webctrl-scce.amherst.edu

- Amherst College -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 18:e8:55:e6:71:41:4c:18:c1:16:ea:9c:ba:61:a8:14 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amherst College

Organization: Amherst College
State / Province: Massachusetts
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:e8:55:e6:71:41:4c:18:c1:16:ea:9c:ba:61:a8:14
Serial Number (int): 33107827032362495276869192208567347220
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 6c:46:6a:d8:1b:54:d7:ee:3c:38:f3:33:bf:24:d9:1c:4b:f5:cc:fd
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 27:75:1d:4b:c2:48:f8:29:4f:d3:c6:5c:4a:67:1b:2f:49:3a:ee:65
Fingerprint (sha256): 91:73:33:38:26:1d:b4:ef:30:cb:95:27:fe:ac:ec:67:66:64:08:3f:90:db:d4:be:3c:ad:48:88:20:f3:63:12

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate webctrl-scce.amherst.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webctrl-scce.amherst.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webctrl-scce.amherst.edu

Other certificates including the domain name amherst.edu

(limited to 100 certificates)
voma-web.amherst.edu
wsgapps.amherst.edu
reli-224-staff-01.wordpress.amherst.edu
lab06-centos5.amherst.edu
cluster3.technolutions.net
cluster3.technolutions.net
voma-web.amherst.edu
lms2-dev.ats.amherst.edu
5654961308303360-fe2.pantheonsite.io
netetc.amherst.edu
moodle.amherst.edu
app.cs.amherst.edu
ac3-root.amherst.edu
neon.note.amherst.edu
cluster3.technolutions.net
hannekelab.amherst.edu
stream01.amherst.edu
5654961308303360-fe2.pantheonsite.io
*.people.amherst.edu
5744125232021504-fe1.pantheonsite.io
listserv.amherst.edu
admission.amherst.edu
5654961308303360-fe2.pantheonsite.io
rstudio.amherst.edu
*.amherst.edu
cluster3.technolutions.net
uconnectlabs.com
snaplogic.amherst.edu
wsgdev2.amherst.edu
5654961308303360-fe2.pantheonsite.io
cluster3.technolutions.net
fadata.amherst.edu
datamatch.sites.amherst.edu
aruba-master.amherst.edu
fadata.amherst.edu
filesender.amherst.edu
cluster3.technolutions.net
lms2.ats.amherst.edu
wsgapps.amherst.edu
moodle-aws.amherst.edu
advwebcamp.amherst.edu
*.amherst.edu
jobs2.amherst.edu
krypton.note.amherst.edu
cluster3.technolutions.net
neon.note.amherst.edu
acdc.amherst.edu
cluster3.technolutions.net
religioninthehimalayas.wordpress.amherst.edu
cluster3.technolutions.net
lms2.ats.amherst.edu
fivecx.amherst.edu
span-125-alfareros-de-ficcion.wordpress.amherst.edu
translatingtheclassics.wordpress.amherst.edu
5654961308303360-fe2.pantheonsite.io
uconnectlabs.com
app.cs.amherst.edu
wsgapps.amherst.edu
krypton.note.amherst.edu
rstudio.amherst.edu
x-san.amherst.edu
shibidp.amherst.edu
*.ats.amherst.edu
anth-220-1617s-ancientamericas.wordpress.amherst.edu
rstudio.amherst.edu
cluster3.technolutions.net
sysmon-cluster.amherst.edu
netreg2.amherst.edu
5654961308303360-fe2.pantheonsite.io
colleague-ss1.amherst.edu
5744125232021504-fe1.pantheonsite.io
5744125232021504-fe1.pantheonsite.io
advwebdev3.amherst.edu
digitalafricas.wordpress.amherst.edu
5744125232021504-fe1.pantheonsite.io
5744125232021504-fe1.pantheonsite.io
giftplanning.amherst.edu
opm.amherst.edu
dam-dev1.ats.amherst.edu
admission.amherst.edu
amherststudent-archive.amherst.edu
static.athletics.amherst.edu
advwebcamptest.amherst.edu
cluster3.technolutions.net
cluster3.technolutions.net
thehub.amherst.edu
filesender.amherst.edu
archive.ats.amherst.edu
cluster3.technolutions.net
*.amherst.edu
opm.amherst.edu
moc.ats.amherst.edu
cms-stats.amherst.edu
armsapp.amherst.edu
acnutrition.amherst.edu
cluster3.technolutions.net
5654961308303360-fe2.pantheonsite.io
cluster3.technolutions.net
cluster3.technolutions.net
app.cs.amherst.edu

Certificate

The complete raw certificate details for webctrl-scce.amherst.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33107827032362495276869192208567347220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amherst College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webctrl-scce.amherst.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667841332779896098337519385173012972350545986076032898498775696464562473467414896332084732043016741814718136590329647653807952148738402351933333801407571796258266272813968373186243336600352897726551822681050642012460270240002673561726726689489914824571033532810859683124616276693344077056775573117797033828342998550914575066566103357806141006996811818920405514037847540675594765349109897791447347059796328887231194723972490649582609332631121213411454987700651403307427547244007130525657735577386927792295994443515850703358064486663063166023755931053285204677314125164201342898149214816467257060150604337406625505456575811249740211724425425939087070121738110454354963542790517682123185782122773024934737966072029357002937414191594946860033607773860507152073638523247863810300911439832035218968893143309209290477223002733756418880482423153505681572895506959617187951491326778817313458984408321605386175392120725940071212819911366789244096586244265199831898636159489751098775529333293569525283771987608576831489683853265756125535691226376562582151482223878274832986706852685062309942850168247236340322187918387543779441816465146907777143445364482396389672119402585715272568781711936468617416021533983722132922847439732530952170039515539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c466ad81b54d7ee3c38f333bf24d91c4bf5ccfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webctrl-scce.amherst.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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