MIT SECURE Wireless Certificate Fingerprints

Q: How do I verify that the RADIUS server used for authentication by the wireless network is legitimate?

A:

It is important to verify that the server name, as well as the certificate signing authority, match before entering your password.

If they do not match, do not continue to connect, and contact the IS&T Service Desk. Cyber criminals may attempt "man-in-the-middle attacks" by creating fraudulent wireless networks made to look like "MIT SECURE" or "eduroam". However, fraudulent networks won't present the correct certificate(s). You can verify the correct certificates by looking at the certificate's fingerprints.

Wireless RADIUS Server Certificates:

MIT SECURE

• oc11-radius-wireless-1.mit.edu
  • Subject Key Identifier: DE 6C C9 B3 BD 45 E8 9A 80 63 60 59 24 B0 8D C0 DC CB 3E AF
  • SHA256 Fingerprint: 88:D6:D7:CB:E0:3A:79:CB:B5:37:FD:FE:20:0A:C9:A7:1B:B0:0C:71:4E:01:8E:0C:D0:73:CB:5F:7B:6F:E4:63
  • SHA1 Fingerprint: AE:07:DC:BA:6D:65:E6:03:4E:95:70:11:25:6D:1F:31:A3:F8:CF:9C
  • MD5 Fingerprint: 15:6B:FC:59:80:56:68:BF:C8:04:23:3A:23:98:99:CD

• w92-radius-wireless-1.mit.edu
  • Subject Key Identifier: B3 D4 53 2E E9 9C 4C 0F 9D EB 88 0F 65 3D C9 A8 E9 59 3B 4F
  • SHA256 Fingerprint: 30:46:DD:6D:E6:A6:8E:18:BE:8A:DA:16:16:65:FA:94:0B:6D:BC:FC:A6:7B:C5:25:E7:3F:1A:BC:32:84:89:D9
  • SHA1 Fingerprint: A4:86:E2:F9:0A:5C:AC:40:10:37:7A:D2:DF:6E:F2:96:3D:A1:A6:4D
  • MD5 Fingerprint: 11:A1:89:8D:20:5A:B3:97:7E:5B:8B:E7:66:1D:8E:A0

eduroam

• oc11-radius-eduroam-1.mit.edu
  • Subject Key Identifier: A5 AC 6D 4C DD 58 60 C7 58 67 44 47 FB 6D 72 D6 41 E6 DF ED
  • SHA256 Fingerprint: E9:40:C2:EA:7D:1A:AC:8E:3D:77:A4:CC:9E:CD:95:17:1E:0B:1B:8D:62:27:CF:60:61:7E:E6:5D:57:83:A7:6A
  • SHA1 Fingerprint: 3C:3A:90:1D:45:28:2B:86:D9:D9:E3:5E:9D:55:B4:EF:FB:5C:4D:D4
  • MD5 Fingerprint: 04:82:3C:8F:FF:24:AD:02:45:20:65:5E:60:47:7A:CB

• w92-radius-eduroam-1.mit.edu
  • Subject Key Identifier: 8D 34 2D DB FF E4 F5 30 30 75 D5 A2 BF 51 C5 AF B9 D1 58 2B
  • SHA256 Fingerprint: 77:53:C2:D7:14:43:D8:F6:D3:D0:46:6E:8F:CE:EA:0C:C5:13:68:04:2F:A6:A8:24:B7:B7:D4:67:CE:6F:9C:DA
  • SHA1 Fingerprint: F4:81:12:B2:F2:AB:85:56:85:65:AA:A0:09:8A:3E:23:CC:1E:B6:00
  • MD5 Fingerprint: 2C:52:91:72:C1:C3:89:02:83:6D:EA:1E:59:8D:8B:95

Root Certificate Authority Certificate

• AAA Certificate Services
  • Subject Key Identifier: A0 11 0A 23 3E 96 F1 07 EC E2 AF 29 EF 82 A5 7F D0 30 A4 B4
  • SHA1 Fingerprint: D1 EB 23 A4 6D 17 D6 8F D9 25 64 C2 F1 F1 60 17 64 D8 E3 49
  • MD5 Fingerprint: 49 79 04 B0 EB 87 19 AC 47 B0 BC 11 51 9B 74 D0

See also

• The Wireless Networks at MIT