openvpn.sou.edu

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 18:13:93:6a:64:1d:65:dd:c7:b6:36:22:2d:ee:92:1e was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=openvpn.sou.edu

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 18:13:93:6a:64:1d:65:dd:c7:b6:36:22:2d:ee:92:1e
Serial Number (int): 32003115482531146863244844460839703070
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 24:a5:98:97:46:76:65:79:5b:91:c8:dd:53:85:2a:ae:1a:9e:ff:f3
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 0b:52:e7:c5:0d:d7:59:24:62:27:e4:6e:65:81:e8:22:53:cf:18:16
Fingerprint (sha256): 01:5b:07:0d:8c:a7:54:46:fd:94:4d:79:fe:ef:9f:55:c0:b1:27:87:14:89:f4:a4:9f:30:87:6e:d1:b8:b3:dc

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate openvpn.sou.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openvpn.sou.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openvpn.sou.edu
www.openvpn.sou.edu

Other certificates including the domain name sou.edu

(limited to 100 certificates)
hanlib.sou.edu
openvpn.sou.edu
sma.sou.edu
*.ec.sou.edu
development.moodlerooms.com
development.moodlerooms.com
retirees.sou.edu
development.moodlerooms.com
development.moodlerooms.com
catalog.sou.edu
printing.sou.edu
development.moodlerooms.com
rdp.sou.edu
sbdc.sou.edu
development.moodlerooms.com
venture.sou.edu
development.moodlerooms.com
cslab.sou.edu
development.moodlerooms.com
mail.pacificbath.webdev14.acsmi.com
search.sou.edu
students.sou.edu
account.sou.edu
image.e.online.sou.edu
edge-uc4.peopleadmin.com
souvpn.sou.edu
development.moodlerooms.com
forms.sou.edu
events.sou.edu
budget.sou.edu
development.moodlerooms.com
development.moodlerooms.com
retirees.sou.edu
development.moodlerooms.com
edge-uc4.peopleadmin.com
development.moodlerooms.com
virtuallab.sou.edu
development.moodlerooms.com
m.sou.edu
retirees.sou.edu
foreman.sou.edu
san-5-s10.tlsprovisioning.exacttarget.com
rec.sou.edu
testmoodle.sou.edu
image.e.online.sou.edu
development.moodlerooms.com
jpr.sou.edu
olli.sou.edu
us.prod.campusgroups.com
development.moodlerooms.com
rvtv.sou.edu
development.moodlerooms.com
sou.edu
hec-kvm.sou.edu
search.sou.edu
www.sou.edu
sftp.sou.edu
inside.sou.edu
edge_uc2.peopleadmin.com
seadragon.sou.edu
development.moodlerooms.com
catalog.sou.edu
rvtv.sou.edu
support.sou.edu
ems.sou.edu
edge-uc4.peopleadmin.com
development.moodlerooms.com
vmail.sou.edu
development.moodlerooms.com
rvtv.dev.sou.edu
moodle.sou.edu
development.moodlerooms.com
clconnect-test.sou.edu
development.moodlerooms.com
faq.sou.edu
xwp.sou.edu
faq.sou.edu
edge_uc4.peopleadmin.com
development.moodlerooms.com
myhealth.sou.edu
ps.sou.edu
rec.sou.edu
aiopnsense01v.sou.edu
tutortrac.sou.edu
webpages.sou.edu
san-5-s10.tlsprovisioning.exacttarget.com
development.moodlerooms.com
development.moodlerooms.com
ba2mba.sou.edu
image.e.online.sou.edu
aiopnsense05v.sou.edu
dgwupg.sou.edu
jpr.sou.edu
support.sou.edu
tenable.sou.edu
escsupport.sou.edu
development.moodlerooms.com
*.sou.edu
edge-uc4.peopleadmin.com
raider.moodle.sou.edu

Certificate

The complete raw certificate details for openvpn.sou.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OgG7wiNKizYfILRuHu+
MCFUPM2frwFW24L6PGiuTI7J1tgrvwGaGT7fLyvj0lSZE++IiwDCFnplWPm/UtvT
b7pHkCerKlyzudij7EEzLs1fMunukV2w9Var8RNNPXUWDGvkE2DERnJhaOxpVtut
P5T2YeyZNzJEeYe+MEVAxaMZ1MxYg0xY2ln4jSawha2rrslYpIrFOplxlKa+QYAR
7pqc3MLFRfSKeQnOkt/4Mubsjq8fCAp6cDXZpRTZHoWEobx6NM+6sJ0Qf5k41XO8
FGH9PV1vruZ9M0rGN/R3b6mQ8gDV3pqqd43cnc5pStLTXbvH/ODk1H3tb4d5rH03
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32003115482531146863244844460839703070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openvpn.sou.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28391797132315017813940644049335059630324591369981888869003521660531806530795479785341432133156977263056941986271383324201021768563619466275510678520487515096739982085448401770196767813670225920469425859699083917516819613114033618908264294273444786656601408440041069746679537437194629426990542760862083793661882497740067143615290366107212808334715162300494838027276705857309468497288341407191102712569715774928221892026122089315059179655086156776975658088620035913569915542686092811981127125970540402591064233766183023523044558084103202138886021309331991281370721858571524767184903043944015381286126634588471889311511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24a59897467665795b91c8dd53852aae1a9efff3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvpn.sou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openvpn.sou.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001762572927f0000040300473045022074de6ae177dc91066b4fc7f38f21344134737103255db02a594922e824a82eb40221008f2ea62c03244c9248cfd7f3f3c6a81912806f47bb44dad5a9fffd8d17aa097f007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000176257293c900000403004730450220324731f4d46c53b10e8b46df5455ad206688b90c298a3af43ad139621876636f0221008d115113c1cc0768261f4b9264074fb7212cb342a4e3038477530922a5d4c00c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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