www-internal.eecs.usma.edu

- U.S. Government -

Issued by DOD ID SW CA-37

About this certificate

This digital certificate with serial number 5d:47 was issued on by U.S. Government.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Organization unit: USA
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: DoD
Organization unit: PKI
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:47
Serial Number (int): 23879
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId: b8:02:ab:de:13:70:4f:12:41:8f:eb:bc:29:96:49:5c:27:99:9a:ae
AuthorityKeyId: 16:24:7e:f7:2d:c1:ef:92:3f:be:44:e7:54:5e:e9:fe:17:ba:f3:a1

Fingerprint (sha1): 2c:9a:07:10:99:ad:fd:b0:5f:34:be:f9:d4:78:03:ac:68:61:cd:10
Fingerprint (sha256): 49:b1:ba:8b:75:b2:77:83:1e:be:e7:06:12:80:b7:73:bf:b1:09:30:30:1b:9c:4f:2f:39:84:7b:ef:cb:b1:fb

Issuing Certificate URL: http://crl.disa.mil/sign/DODIDSWCA_37.cer

Revocation information

OCSP Server: http://ocsp.disa.mil
CRL Distribution Point: http://crl.disa.mil/crl/DODIDSWCA_37.crl

Check the revocation status for certificate www-internal.eecs.usma.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-internal.eecs.usma.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-internal.eecs.usma.edu

Other certificates including the domain name usma.edu

(limited to 100 certificates)
army.iii.com
www.usma.edu
NOMINATIONS.USMA.EDU
usmalibrary.usma.edu
usma.edu
www.westpoint.edu
candidate.usma.edu
acepasts3.usma.edu
usma.edu
www.usma.edu
usma.edu
FIELDFORCE.WESTPOINT.EDU
www.westpoint.edu
www.usma.edu
candidate.usma.edu
www.usma.edu
downloads.oema.usma.edu
usma.edu
www.ctc.usma.edu
www.usma.edu
usma.edu
www.usma.edu
usmalibrary.usma.edu
USMASVDZBATMAN.usma.ds.army.edu
mail.usma.army.mil
usma.edu
hunting.usma.edu
www.westpoint.edu
ams-external.usma.edu
nominations.usma.edu
www.usma.edu
FIELDFORCE.WESTPOINT.EDU
nominations.usma.edu
www.westpoint.edu
www.usma.edu
ams-external.westpoint.edu
www.usma.edu
usma.edu
www.westpoint.edu
candidate.usma.edu
ctc.westpoint.edu
usma.edu
NOMINATIONS.USMA.EDU
FIELDFORCE.WESTPOINT.EDU
mwi.usma.edu
www.westpoint.edu
usma.edu
www.westpoint.edu
ctc.usma.edu
www.usma.edu
www.usma.edu
talent.army.mil
FIELDFORCE.WESTPOINT.EDU
nominations.usma.edu
library.usma.army.mil
candidate.usma.edu
candidate.usma.edu
usma.edu
ams-external.usma.edu
www-internal.eecs.usma.edu
www.usma.edu
iwatch.usma.edu
candidate.usma.edu
usma.edu
www.usma.edu
army.iii.com
candidate.usma.edu
www.usma.edu
usma.edu
usma.edu
www.usma.edu
talent-cms.usma.edu
usma.edu
usma.edu
www.westpoint.edu
www.usma.edu
NOMINATIONS.USMA.EDU
ams-external.westpoint.edu
usma.edu
www.ctc.usma.edu
www.westpoint.edu
www.east.usma.edu
FIELDFORCE.WESTPOINT.EDU
www.westpoint.edu
www.ctc.usma.edu
candidate.usma.edu
NOMINATIONS.USMA.EDU
www.usma.edu
www.usma.edu
www.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
lyncFEPool01.usma.ds.army.edu
www.usma.edu
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
usma.edu
blau.usma.edu
www.oema.usma.edu
hunting.usma.edu

Certificate

The complete raw certificate details for www-internal.eecs.usma.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvhBttY0fGjXrKWodaD
ypes825/OkpQPemmHWPD5IxrvgIJWxjy3HghE16mdmxDp+J9D/cXABJ9hAQ0fe0w
/ZhsCX/b8fC8iWiAWy0iF1jLnTEmH4QweFXkjeW9VvuXLRyhVcSthp1UiLHQwHrY
QjcW30QcRAAXNaDxoiPgFlI8vd0QTjbxc0xEpPfCigguqLT/x8zHWr1AZG6q7s6D
t+MSehFWZuTA4KdG34mKRQKugqIkUyZCDpJigTlhO5a8rT8PFJIvmY0iYvPKQSL3
teB7M0te/Rbnwth6S7HUJVkPRaJSTPuXnvKmKGATGjmiGF1nCAKq0veRF71pkdrb
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOD ID SW CA-37'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-17 16:24:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 16:24:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DoD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-internal.eecs.usma.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20843067972045069297258173897748500904908768264264132563613663987519162692973060663468811104247504937004338481829510004021048659724600621179285337938754581228636463222271995152403669960281512236293924044130439904959119757504711860255713846634380785219011339083118397911361460723733467875845339110681723870183937485346975455603948920245622789526988014084771567424533872652790273780858994320599791722851303910810672724042411514148891264594832478015114396481106845013721330274779944577054256430845654480213644863816632542500241446035101766975427619452343103239088454854820398878564458819923158873500761993982435284146989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 16247ef72dc1ef923fbe44e7545ee9fe17baf3a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b802abde13704f12418febbc2996495c27999aae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/sign/DODIDSWCA_37.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.disa.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.disa.mil/crl/DODIDSWCA_37.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-internal.eecs.usma.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.2.1.11.39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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