OV SSL/TLS Certificate for workflow.emerson.edu Issued to Emerson College

Certificate is witin its validity period

Issued by Internet2 (InCommon RSA Server CA 2)

About the workflow.emerson.edu OV SSL/TLS Certificate

This certificate with serial number 51:0c:a4:72:69:19:88:8f:f2:31:fa:57:08:de:18:8c for workflow.emerson.edu was issued on by Internet2.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for workflow.emerson.edu provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Internet2

Organization: Internet2
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 51:0c:a4:72:69:19:88:8f:f2:31:fa:57:08:de:18:8c
Serial Number (int): 107733110600592923210744426892319660172
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: 45:07:bd:9c:3c:6e:8e:9a:a9:82:17:04:36:b7:16:ba:58:eb:28:65
Authority Key Identifier: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (SHA-1): 38:8c:d5:71:6b:56:51:f6:0a:fb:6d:b0:6e:67:fb:96:36:e8:1c:a1
Fingerprint (SHA-256): f1:42:15:52:a8:f3:3d:2c:c8:6e:5a:6a:9f:39:81:45:22:14:0c:a4:c0:0c:ea:51:21:75:d6:f1:ae:22:1f:2e

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate workflow.emerson.edu
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for workflow.emerson.edu

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

workflow.emerson.edu

X.509 Certificate

The complete raw X.509 certificate details for workflow.emerson.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Sk056If1frfdZzmnB+Y
dkI6N8aZOdK3wPOrvSTu6MF7CItx/RL1be52sf951YTLZFbSNbx2TKw7RQ+jkkBB
hZDteNTHom0mNSE6aqODqhD330UIvmXX0KMdTnGgAOcU9dzzwrY1eem0itYXJFGY
YSUgz3UHrjO0Lzo2iuexR6NGDdoKtnmPSkxCESpftv7FyY0zJF5mrAeFs6Yu852w
FiXB2S6aSeC5twyhE1d6KTO2/KBbpBgi/xmeb44H0kasanyHg7y4kPYI027KzboY
bisPsJt8/Ufwc9iJn2w2mSqAiz5b5xNjI2IT5zVk9FZ6sEUPkCzOlPlVEcqN1Gro
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107733110600592923210744426892319660172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Emerson College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'workflow.emerson.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30443751257919653456983423808392345853767665739189323419689698858869367164452659651266133620422205559736878617780523312781167947818234807561125376824061133529349337117073766385415070600452721273150152294932369107345521659348078305747140093371489930748539110066387441039872093616756553837521115079200181399142859341346971523053671032835410331698814195182093859591991301609585135769816651079242294091945387141150803502527604846806798864597477265752152304149045614679185943234696931276603308069442421559367179051043368319080716430283763631716301677822353391320157619690771733563415504005467602947663203710871494602713309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4507bd9c3c6e8e9aa982170436b716ba58eb2865
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflow.emerson.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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