spocfds.lpl.arizona.edu

- The University of Arizona -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number e0:b6:4b:0f:3a:a9:27:59:bc:f1:65:4c:0c:5b:fe:b3 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The University of Arizona

Organization: The University of Arizona
State / Province: Arizona
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): e0:b6:4b:0f:3a:a9:27:59:bc:f1:65:4c:0c:5b:fe:b3
Serial Number (int): 298693591471371830608912907100414017203
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c3:10:11:0b:ca:e7:48:93:36:9e:c4:6d:c8:68:07:1d:f7:b7:47:26
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): 31:40:67:ab:2b:d5:f5:48:85:0c:2d:a4:14:bf:b2:2f:7e:f3:1f:b1
Fingerprint (sha256): 00:04:fa:a8:b3:8d:19:df:82:76:f3:de:5b:19:93:02:ae:34:3c:b7:9c:8b:1e:78:c7:d7:3d:53:ed:51:c9:8c

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate spocfds.lpl.arizona.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spocfds.lpl.arizona.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spocfds.lpl.arizona.edu

Other certificates including the domain name arizona.edu

(limited to 100 certificates)
5734743547052032-fe3.pantheonsite.io
spocfds.lpl.arizona.edu
5698998010642432-fe4.pantheonsite.io
webservice.oscr.arizona.edu
5658514613600256-fe2.pantheonsite.io
5693703389708288-fe3.pantheonsite.io
drc-dev.arizona.edu
*.ezproxy2.library.arizona.edu
test-web-lws.edu.help
p21.uawebhost.arizona.edu
carpepm.almonds.com
photonicshub2.uawebhost.arizona.edu
primatefieldschool.uawebhost.arizona.edu
5697124062724096-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5703128158568448-fe1.pantheonsite.io
usif.arizona.edu
aer.arizona.edu
5723088213770240-fe3.pantheonsite.io
it.uahs.arizona.edu
pictor.as.arizona.edu
accona-idrac.fm.arizona.edu
helpdesk.travelleaders.com
cluster3.technolutions.net
remote.azgs.arizona.edu
helpdesk.travelleaders.com
imr.uawebhost.arizona.edu
libguides.library.arizona.edu
5631943370604544-fe1.pantheonsite.io
mis-mallinfra1.microagelab.arizona.edu
5702351037923328-fe2.pantheonsite.io
5720453519769600-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
5733052001026048-fe3.pantheonsite.io
survey.pharmacy.arizona.edu
5643365030821888-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5732910535540736-fe1.pantheonsite.io
xlr7.lpl.arizona.edu
azmesa.arizona.edu
tinker.lpl.arizona.edu
in.arizona.edu
test.arizonamed.medicine.arizona.edu
calendar.sdzsafaripark.org
5763210187636736-fe2.pantheonsite.io
amonhen-th-01.ucode.arizona.edu
legacy.fso.arizona.edu
5700866052980736-fe2.pantheonsite.io
l3.shared.global.fastly.net
jsw.arizona.edu
5723088213770240-fe3.pantheonsite.io
ba-vpn.lpl.arizona.edu
data.library.arizona.edu
consciousness.arizona.edu
housing.arizona.edu
5743114304094208-fe3.pantheonsite.io
5693341270278144-fe4.pantheonsite.io
cls.uawebhost.arizona.edu
skycenter.arizona.edu
vas.uawebhost.arizona.edu
samis.webhost.uits.arizona.edu
5685665089978368-fe3.pantheonsite.io
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
mesupport.saloncloudsplus.com
cesd.arizona.edu
udallcenter.uawebhost.arizona.edu
www2.engr.arizona.edu
5650082896543744-fe3.pantheonsite.io
*.playposit.com
5693703389708288-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736449051721728-fe1.pantheonsite.io
law.arizona.edu
accounting.eller.arizona.edu
5754818358411264-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
psi.arizona.edu
banking-business-review.com
5650082896543744-fe3.pantheonsite.io
5636635823702016-fe2.pantheonsite.io
apps.iam.arizona.edu
5692201761767424-fe3.pantheonsite.io
portal.environment.arizona.edu
5747976207073280-fe2.pantheonsite.io
cdn-test.battlefields.org
rds.athletics.arizona.edu
test.eis.uw.edu
aemrc.arizona.edu
cybersw.org
5703128158568448-fe1.pantheonsite.io
5634612826996736-fe4.pantheonsite.io
5734743547052032-fe3.pantheonsite.io
5668906396024832-fe3.pantheonsite.io
5639026912526336-fe4.pantheonsite.io

Certificate

The complete raw certificate details for spocfds.lpl.arizona.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu513cqaEbep8iclvnxwA
Eza0/Q0KAnDw79TB+WaHE04vdscn3DOZw3OziK1/YaDUHBPf7PMVgWjt5YG1RdQw
9z+3OWTS+uIjsoqWrk0eZREXzoGanQt4szLWcC8tYeBcrp4wbEf+fPMyFp1jFmTa
+5fRxf6V7StAny6VTwE3MvDAAAy2omIAVhWi6tK4ohErUN+hPSp+U+c5mPCVMYDq
mJ8GPxLcGzon6QoJX+nEt8DyQYGUyr+ZyI01Ra09wbo/ECI2aE+0Fivz6v4YCSZH
jwumTbats2XUFJTyuJ33P0ASbROaYVvwadw2VskLWDATo+AKSJxLfl01W0kbEfUB
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298693591471371830608912907100414017203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spocfds.lpl.arizona.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23684212699791494897658679165167443388773351916828072461499231615762452191133860129609483254898689312488492779782660392923003599621977729618267843952818890859907077699291929187716354797772792444850748436472470399300174073961690646504337306898992682885000083365398434405263161111828796207678763281271860342839338493612334836481417058731182123408519002613791047697614418059490326710083571162058834845253395692355935733878349897925570393103247900113049573225550646724195637752796370387014395930565034180775802365322310091919077125994666156040774882306137380485493036845388217987946010591877923145844300297827828605714869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c310110bcae74893369ec46dc868071df7b74726
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spocfds.lpl.arizona.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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