CP-7841-SEP0041D2B3F811

- Cisco Systems Inc. -

Issued by Cisco Manufacturing CA

About this certificate

This digital certificate with serial number 1d:11:9e:2d:00:00:00:0b:4b:ee was issued on by Cisco Systems.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types (BRs: 7.1.4.2.1)
  • URIs in SAN extension must have a scheme and scheme specific part (RFC5280: 4.2.1.6)
  • URIs that include an authority ([RFC3986], Section 3.2) MUST include a fully qualified domain name or IP address as the host (RFC 5280: 4.2.1.7)
  • When the subjectAlternateName extension is present and a URI is used, the name MUST NOT be a relative URI (RFC 5280: 4.2.1.6)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

Cisco Systems Inc.

Company registration number: PID:CP-7841 SN:WZP195003QM
Organization: Cisco Systems Inc.
Organization unit: CTG

Cisco Systems

Organization: Cisco Systems

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:11:9e:2d:00:00:00:0b:4b:ee
Serial Number (int): 137273620418704718908398
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 3c:78:3b:c0:69:46:4e:2c:d3:e9:55:32:90:0f:08:1a:56:9a:56:67
AuthorityKeyId: d0:c5:22:26:ab:4f:46:60:ec:ae:05:91:c7:dc:5a:d1:b0:47:f7:6c

Fingerprint (sha1): ec:e9:58:44:c6:e2:63:62:ec:77:33:17:9a:b5:d5:6e:63:26:df:e1
Fingerprint (sha256): 3c:64:7e:f2:cf:9a:93:34:b2:6e:8b:58:e6:b6:21:8c:9a:67:94:78:4e:b7:f9:77:95:14:b1:31:db:b7:10:50

Issuing Certificate URL: http://www.cisco.com/security/pki/certs/cmca.cer

Revocation information

CRL Distribution Point: http://www.cisco.com/security/pki/crl/cmca.crl

Check the revocation status for certificate CP-7841-SEP0041D2B3F811

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CP-7841-SEP0041D2B3F811

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for CP-7841-SEP0041D2B3F811 in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05JMzCDVVEXRHkHYrnPs
Oidl7N2xebQmapCwOEII22ZPHoMBiKGkd/Psgr5t/mbHK2Pho8t/O8TOfr2T8FC1
5SKlHTHZitTWwBS2+EGKSiVUTAavUPSjMsdurnsc5weAQYssGc93Esb+UTQogvev
wwxNKuJoSFDSycqFZqTBtHWzCDVWSKy9fCCAB335qmvWG9+f/FB5n0E+8lbMlFoc
hl3LXOGAAydylUZLN62tzEunTs6P+QBx6XvIKakIYYEkqKK9hOOM0/0T2Dv8lMI/
tuKDU4lZarJXt8uxdii0DQAtJCPEQbCUS3tvEcIB+qJHstNu29eaure8EMjg0G8J
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137273620418704718908398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Manufacturing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-07 18:58:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-07 19:08:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PID:CP-7841 SN:WZP195003QM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cisco Systems Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CTG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CP-7841-SEP0041D2B3F811'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26708425561598486891686241543526712867059280132586601852950261814936233887164794278855092570467256859313183808819177038419952680486307442108221795441900202860436914179476124200928522168901304200758713663848916854095791773189864744304582496710536835406493268973250307481057900310705621728576550295713506593905777637454881735628920735207694820770980167916189916582526173481472210716995449308333257223406771673642842304666875654788012422893682952542891743033689133698891303232062835205598724919383042426969180071880844221717969309283104679131526406633814977397285031108409422591938719359932484467719074008165848835885509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'CP-7841-SEP0041D2B3F811'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c783bc069464e2cd3e95532900f081a569a5667
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d0c52226ab4f4660ecae0591c7dc5ad1b047f76c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.cisco.com/security/pki/crl/cmca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.cisco.com/security/pki/certs/cmca.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 73 0 80 0 83 0 69 0 67 0 73 0 110 0 116 0 101 0 114 0 109 0 101 0 100 0 105 0 97 0 116 0 101 0 79 0 102 0 102 0 108 0 105 0 110 0 101]
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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