CP-7945G-SEP204C9ED78E2D
- Cisco Systems Inc. -
Issued by Cisco Manufacturing CA
About this certificate
This digital certificate with serial number 54:b0:b1:62:00:00:00:33:a9:a7 was issued on by Cisco Systems.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types (BRs: 7.1.4.2.1)
- URIs in SAN extension must have a scheme and scheme specific part (RFC5280: 4.2.1.6)
- URIs that include an authority ([RFC3986], Section 3.2) MUST include a fully qualified domain name or IP address as the host (RFC 5280: 4.2.1.7)
- When the subjectAlternateName extension is present and a URI is used, the name MUST NOT be a relative URI (RFC 5280: 4.2.1.6)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
- Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)
Cisco Systems Inc.
Organization:
Cisco Systems Inc.
Organization unit: EVVBU
Organization unit: EVVBU
Cisco Systems
Organization:
Cisco Systems
This certificate will expire on
Certificate Details
Serial Number (hex): 54:b0:b1:62:00:00:00:33:a9:a7Serial Number (int): 399938193296715513309607
Serial Number lenght: 79 bits, 10 octets
SubjectKeyId: 1a:eb:5e:ad:bf:2a:a7:aa:2b:e3:39:a8:5c:5d:bc:0e:be:4e:7a:d9
AuthorityKeyId: d0:c5:22:26:ab:4f:46:60:ec:ae:05:91:c7:dc:5a:d1:b0:47:f7:6c
Fingerprint (sha1): c1:c3:8b:74:94:ef:30:c4:9b:c7:19:a1:47:f3:92:48:ac:65:29:b5
Fingerprint (sha256): 39:55:dd:42:5c:1b:8e:41:2f:d1:b2:ad:d4:e8:46:72:98:07:a4:b0:17:a9:5e:ab:7a:b8:a2:b0:1a:c3:46:ea
Issuing Certificate URL: http://www.cisco.com/security/pki/certs/cmca.cer
Revocation information
CRL Distribution Point: http://www.cisco.com/security/pki/crl/cmca.crlCheck the revocation status for certificate CP-7945G-SEP204C9ED78E2D
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for CP-7945G-SEP204C9ED78E2D
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
IPSEC End System
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name
(limited to 100 certificates)
Certificate
The complete raw certificate details for CP-7945G-SEP204C9ED78E2D in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIKVLCxYgAAADOppzANBgkqhkiG9w0BAQUFADA5MRYwFAYD VQQKEw1DaXNjbyBTeXN0ZW1zMR8wHQYDVQQDExZDaXNjbyBNYW51ZmFjdHVyaW5n IENBMB4XDTE1MDIwMjA5MjUxMloXDTI1MDIwMjA5MzUxMlowUDEbMBkGA1UEChMS Q2lzY28gU3lzdGVtcyBJbmMuMQ4wDAYDVQQLEwVFVlZCVTEhMB8GA1UEAxMYQ1At Nzk0NUctU0VQMjA0QzlFRDc4RTJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1zeuGtWJ/TGnGeX0HqKqPUNCOMlE/comogFoP7ZGMuOzzPaRHY8w7HrJ RHmZBVUd6wSjYrCNHLd7iMQ50+RjKrvzcpwxvrT6vhBtN6nD3gqAGp2JlzW3mF4X 6e5C8FZnUGkqmNcnckn4U57JISasGGXDgJCVRueBXe3g1yDmiS0RI6vAKQtRE0Rv K3EnsAyIX5MZR4I3n+Ey0cF3GRQ90nppyt6Rg1CavtU2iDyIry5ETCe1Xj7IJOP4 lkcH50eoktGIyYvIOJe9kEIGtpem8PJ5Kq2wZX9td7BZfUmc1E3a+T7yV1ZbuXDD GLlqp4SJNj8UKaaJW7+mTHXLvkaAFwIDAQABo4IBgDCCAXwwDAYDVR0TAQH/BAIw ADALBgNVHQ8EBAMCBPAwKgYDVR0lAQH/BCAwHgYIKwYBBQUHAwEGCCsGAQUFBwMC BggrBgEFBQcDBTAjBgNVHREEHDAahhhDUC03OTQ1Ry1TRVAyMDRDOUVENzhFMkQw HQYDVR0OBBYEFBrrXq2/KqeqK+M5qFxdvA6+TnrZMB8GA1UdIwQYMBaAFNDFIiar T0Zg7K4FkcfcWtGwR/dsMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly93d3cuY2lz Y28uY29tL3NlY3VyaXR5L3BraS9jcmwvY21jYS5jcmwwTAYIKwYBBQUHAQEEQDA+ MDwGCCsGAQUFBzAChjBodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kv Y2VydHMvY21jYS5jZXIwPwYJKwYBBAGCNxQCBDIeMABJAFAAUwBFAEMASQBuAHQA ZQByAG0AZQBkAGkAYQB0AGUATwBmAGYAbABpAG4AZTANBgkqhkiG9w0BAQUFAAOC AQEAXzvADCBjl6NeC5WgkoehPoN8c8GcXfdETK23yAWFDPQCHDRYbxeP9HU0Mu55 Cb1ASfkBmcv3TO4hJathFvlrVvXr4fjqlBRpTMxTUqQJkPNQOVp5aq66QF90LcXS 9cfSmhinDEwpiaqpRGDhwOieHETBB6fQkTXk+EYpR102Rx45CqS0txBar7pDh5RP F6MsHMJOfvf2nWhyQEnvUgyo7fmIVfvv6XuU/Zav4SWJBOBs6ecXVyVs7IUoQddE Zxu5w/WWeRGsdNRtFBaom8EV8eRNMDRE4Y1zNwDxqGZ+HrGg64KNVRpIllNe1hur zASLDtgTRCFaCm5KsZNXqpsVGg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zeuGtWJ/TGnGeX0HqKq PUNCOMlE/comogFoP7ZGMuOzzPaRHY8w7HrJRHmZBVUd6wSjYrCNHLd7iMQ50+Rj KrvzcpwxvrT6vhBtN6nD3gqAGp2JlzW3mF4X6e5C8FZnUGkqmNcnckn4U57JISas GGXDgJCVRueBXe3g1yDmiS0RI6vAKQtRE0RvK3EnsAyIX5MZR4I3n+Ey0cF3GRQ9 0nppyt6Rg1CavtU2iDyIry5ETCe1Xj7IJOP4lkcH50eoktGIyYvIOJe9kEIGtpem 8PJ5Kq2wZX9td7BZfUmc1E3a+T7yV1ZbuXDDGLlqp4SJNj8UKaaJW7+mTHXLvkaA FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 399938193296715513309607 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Manufacturing CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-02 09:25:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-02 09:35:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EVVBU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CP-7945G-SEP204C9ED78E2D' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27168692446843720609873209225220333741713231271285645718210524356807389215143281858646103502761784779986140243563540731486379211684168771563526399955266689377769288824269470742695515750225100658925772705843830024317632686969212408896778371702111397892885207591323612615296018978472988930077936927956793848791447981908300132888658201490472716378820329462670184367494403535507318174084357745467001870589297851089400932695735150419438665624517794743525359840487420807937120623322960079233161655074747525488606074885753393128467244608547549647737231516014748283688336823797708963208942225673278611596034387602578197610519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'CP-7945G-SEP204C9ED78E2D' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1aeb5eadbf2aa7aa2be339a85c5dbc0ebe4e7ad9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d0c52226ab4f4660ecae0591c7dc5ad1b047f76c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.cisco.com/security/pki/crl/cmca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.cisco.com/security/pki/certs/cmca.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 73 0 80 0 83 0 69 0 67 0 73 0 110 0 116 0 101 0 114 0 109 0 101 0 100 0 105 0 97 0 116 0 101 0 79 0 102 0 102 0 108 0 105 0 110 0 101] . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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