avgve01prdhmd.pnw.edu

- Purdue University -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number d2:81:b6:29:03:70:13:c7:5e:39:f9:fc:d1:83:92:41 was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Purdue University

Organization: Purdue University
Organization unit: Purdue University Northwest
State / Province: Indiana
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d2:81:b6:29:03:70:13:c7:5e:39:f9:fc:d1:83:92:41
Serial Number (int): 279811380057549801886650768063058907713
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1e:1f:6a:d5:69:08:00:a6:e0:05:c4:f9:7e:42:98:81:c3:91:9c:2c
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 5a:0a:a2:92:ad:c5:ce:be:b3:e6:04:9b:fd:0a:9c:07:c2:c0:21:d4
Fingerprint (sha256): 9f:cb:a6:4a:62:03:d2:de:ad:54:3a:88:02:3e:15:a0:51:11:f9:1a:08:f2:34:5d:bf:15:6d:e7:6c:d8:10:67

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate avgve01prdhmd.pnw.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avgve01prdhmd.pnw.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avgve01prdhmd.pnw.edu

Other certificates including the domain name pnw.edu

(limited to 100 certificates)
us.prod.campusgroups.com
it.uahs.arizona.edu
nursingonline.pnw.edu
ecet.pnw.edu
sharepoint.purdue.edu
givingisgorges.org
discover.pnw.edu
liberalarts.ss.pacific.edu
sharepoint.purdue.edu
facilitywizard.pnw.edu
catalog.pnw.edu
5661601461960704-fe3.pantheonsite.io
cluster3.technolutions.net
pnwcmg01prdaz.pnw.edu
discover.pnw.edu
akamai-san78.exacttarget.com
5664606865326080-fe3.pantheonsite.io
labellelab.asu.edu
nursingonline.pnw.edu
legacy.hq.philabundance.org
mail.pnw.edu
academics.pnw.edu
alumni.pnw.edu
calumet-horizon.pnw.edu
5664606865326080-fe3.pantheonsite.io
us.prod.campusgroups.com
portalprod.pnw.edu
sharepoint.purdue.edu
5751646390845440-fe3.pantheonsite.io
catalog.pnw.edu
cluster3.technolutions.net
nursingonline.pnw.edu
wp.www.purdue.edu
chemphys.pnw.edu
libraryanswers.pnw.edu
discover.pnw.edu
cluster3.technolutions.net
nursingonline.pnw.edu
nursingonline.pnw.edu
5751646390845440-fe3.pantheonsite.io
cluster3.technolutions.net
us.prod.campusgroups.com
us.prod.campusgroups.com
givingisgorges.org
confluence.pnw.edu
us.prod.campusgroups.com
akamai-san78.exacttarget.com
vcsa-cal.pnw.edu
intranet.olivecrest.org
ntpr3.pnw.edu
catalog.pnw.edu
ssb-prod.pnw.edu
engineering.pnw.edu
us.prod.campusgroups.com
guides.pnw.edu
degreeworks-stage.pnw.edu
cluster3.technolutions.net
degreeworks-stage.pnw.edu
spirion.pnw.edu
2a2a.pnw.edu
sharepoint.purdue.edu
cluster3.technolutions.net
password.pnw.edu
discover.pnw.edu
internal.gcir.org
sharepoint.purdue.edu
campaign.ucsc.edu
libraryanswers.pnw.edu
catalog.pnw.edu
5754258133614592-fe3.pantheonsite.io
cluster3.technolutions.net
wsc-dev.pnw.edu
www.pnw.edu
vcsa-pnc.pnw.edu
mail.pnw.edu
webfiles.pnw.edu
international.research.ucsb.edu
thepointalehouse.com
chemphys.pnw.edu
papercut.pnw.edu
ham-vdi-h7tcs.pnw.edu
international.research.ucsb.edu
cluster3.technolutions.net
5751646390845440-fe3.pantheonsite.io
cluster3.technolutions.net
confluence-stage.pnw.edu
dwtools-stage.pnw.edu
starrezweb.pnw.edu
vdi-mgmt.pnw.edu
onlinenursing.pnw.edu
academics.pnw.edu
nursingonline.pnw.edu
campusm-stage.pnw.edu
discover.pnw.edu
5751646390845440-fe3.pantheonsite.io
guides.pnw.edu
onlinenursing.pnw.edu
givingisgorges.org
libraryanswers.pnw.edu
ham-vdi-psct.pnw.edu

Certificate

The complete raw certificate details for avgve01prdhmd.pnw.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279811380057549801886650768063058907713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Purdue University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Purdue University Northwest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avgve01prdhmd.pnw.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785953109659338820143453685712798568566244713178481368946807189970938954631480269967162264677090545557953628463389853451598869581682459327852630314746387425056452981414895183506008069857313730061195459038916208578565878547247328827163290300678847193719499513129960161970225061296551425669175043130180635045986778236749981867323488882864822289985322316752416835618119216541514542689023297698607116561985238312689701594906080116119750652191470532783741641084871743286987544962293905207170757153955634301524847578671821666164874423290631306198899564699456045727086948068913168417574837721981006307355713211466071083981962398054341326655975456100052614469137715679709051243901422165068131674331406401033511909125023713036125302201498829498660478883990647430576913161733366364561342271796900284259236958605230596054193047239737577161543267498243910213046765427857914001526526811424029526730727432974469355309180467243408102930125089888922479826762954315389037188506083513641170514068137996808898038903073661249782040351947136365223750587687609994622256492087459546263737071811741856270050471611865078656614869957470078844566587787793831710782006809157019535482885256695773142947115605152852456543802668873655830669722181348024995407599019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e1f6ad5690800a6e005c4f97e429881c3919c2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgve01prdhmd.pnw.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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