OV SSL/TLS Certificate for lectia.nflc.umd.edu Issued to University of Maryland-College Park

Certificate is witin its validity period

Issued by Internet2 (InCommon RSA Server CA 2)

About the lectia.nflc.umd.edu OV SSL/TLS Certificate

This certificate with serial number c2:4b:14:21:ab:fe:36:82:08:5e:a8:ca:14:c4:6d:33 for lectia.nflc.umd.edu was issued on by Internet2.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for lectia.nflc.umd.edu provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Internet2

Organization: Internet2
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): c2:4b:14:21:ab:fe:36:82:08:5e:a8:ca:14:c4:6d:33
Serial Number (int): 258260061762614488663712008542450117939
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: ab:7d:b0:70:d9:eb:3a:aa:8f:ab:96:29:56:1b:72:96:77:d3:26:26
Authority Key Identifier: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (SHA-1): 9a:e0:d5:8b:5f:9a:f3:c7:a4:24:ec:78:ac:1d:2c:18:85:bd:60:44
Fingerprint (SHA-256): 27:4a:45:cc:31:99:c2:e3:3a:7f:77:33:18:55:cd:61:ea:05:4a:67:0f:58:2a:07:c1:70:a1:ed:c4:f4:df:0a

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate lectia.nflc.umd.edu
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for lectia.nflc.umd.edu

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

lectia.nflc.umd.edu

X.509 Certificate

The complete raw X.509 certificate details for lectia.nflc.umd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WbFUvgSR+KRQVe9839c
YAwLDauyGr7qbu5nu9xpurWJ6ZLlVntwI9QnzTenJ0OIvB1OOqkxIi9aLAvsoBR0
AnqCu87xFP/aWAFz8b37FrKXCbM4hBSLXuUfF8yvSo2ffubo4HdgP8E5c3POH+BO
bo5F4k+2G/9skNvbC3ZuDcKieMKhNjLradD47birAL+AaWI/115lHyq7rjq+I75x
xQp7nz3LH+jIWZDdxTFL3aOq9LDOMG3Ahe/71b6SyWGcpyChHi6cklpfnV8ROgRd
kiaEqtVAfJOwhzJ9NRLwuWjWgQrAHfEZTSlxTqWE5k/yqPBEfU6OZzOWaHV1O4+b
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 258260061762614488663712008542450117939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Maryland-College Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lectia.nflc.umd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28959250006156029800889636750235786694189242632965774045304765217265807920055219852864977929849658729944749110067378864041300487079929376286955558172722905095011483417723121340462348855472949895760723623764412936602930291936565428548455083791449363758064795654617943430157240134572067551370075923880694997778145490656129394270946140841435188462940728269432488277973405350211699980751847426132820550162919773125853798003798451791779154859551215145453097626677951530889484290923852370970399483862157314320324436086345848745321502422808128638900868658948905584956800653424192885755217195624358668213953356703709673790277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab7db070d9eb3aaa8fab9629561b729677d32626
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lectia.nflc.umd.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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