lpcschedd3.fnal.gov

- Fermi Research Alliance -

Issued by InCommon RSA IGTF Server CA 3

About this certificate

This digital certificate with serial number b7:7c:66:5c:f0:d0:1d:2f:18:04:16:38:b9:a7:28:18 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Fermi Research Alliance

Organization: Fermi Research Alliance
State / Province: Illinois
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): b7:7c:66:5c:f0:d0:1d:2f:18:04:16:38:b9:a7:28:18
Serial Number (int): 243894644208396443894994941437853247512
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a6:4b:af:9c:ae:66:56:cf:2e:25:18:99:1d:5a:5b:ab:f7:f8:ee:10
AuthorityKeyId: 16:36:a5:e3:31:7b:bf:67:f6:b2:b7:e7:ea:54:ef:57:30:be:c7:e5

Fingerprint (sha1): 7c:32:36:4a:d9:6c:26:b6:51:53:3f:7d:d8:af:95:de:79:67:05:93
Fingerprint (sha256): 01:95:14:9e:f2:29:c2:f9:49:e4:7b:60:67:99:76:d5:15:00:01:c3:4b:cb:92:8e:cb:d7:35:c4:5d:22:e4:25

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAIGTFServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAIGTFServerCA3.crl

Check the revocation status for certificate lpcschedd3.fnal.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lpcschedd3.fnal.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lpcschedd3.fnal.gov

Other certificates including the domain name fnal.gov

(limited to 100 certificates)
uboonepro-uboonegpvm01.fnal.gov
gpce03.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
stkendca71a.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
lpcschedd3.fnal.gov
samwebgpvm03.fnal.gov
ftdc2.fermitest.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
uhosts.fnal.gov
*.fnal.gov
pubstor2231.fnal.gov
*.fnal.gov
nsexpe2.fnal.gov
cmsstor341.fnal.gov
*.fnal.gov
uhosts.fnal.gov
www-bss.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
cmssi-factory02.fnal.gov
*.fnal.gov
uhosts.fnal.gov
fermi-rsa-2.fnal.gov
*.fnal.gov
cmseos-tf1103.fnal.gov
rcds01.fnal.gov
*.fnal.gov
*.fnal.gov
ssiadmin3.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
cmseos511.fnal.gov
uhosts.fnal.gov
fcdfcache122.fnal.gov
*.fnal.gov
*.fnal.gov
cmssrv628.fnal.gov
*.fnal.gov
*.fnal.gov
uhosts.fnal.gov
cmseos1144.fnal.gov
*.fnal.gov
uhosts.fnal.gov
*.fnal.gov
icaruspro-icarusgpvm01.fnal.gov
cmsstor907.fnal.gov
*.fnal.gov
*.fnal.gov
fifeutilgpvm01.fnal.gov
fermicloud527.fnal.gov
*.fnal.gov
*.fnal.gov
fndcaitb1.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
cmseos-if1102.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
uhosts.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
fermicloud363.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
cmseos517.fnal.gov
rcodegpvm02.fnal.gov
cmseos56.fnal.gov
*.fnal.gov
*.fnal.gov
*.fnal.gov
cmsdcadiskitb03.fnal.gov
*.fnal.gov
accelaipro-accelaigpvm01.fnal.gov
*.fnal.gov
*.fnal.gov
cmsdcadiskitb04.fnal.gov
cmseos34.fnal.gov
fndca5b.fnal.gov
*.fnal.gov

Certificate

The complete raw certificate details for lpcschedd3.fnal.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 243894644208396443894994941437853247512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA IGTF Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'incommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fermi Research Alliance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lpcschedd3.fnal.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812251663304500870778604201606493501448603964172731353507988550358386686634617694877510556808064198316805726540913381456340984623504455091309438727386151070240147424225078209009307606475845596048454603983298074586173674448293829975572057352759449719668014766945457679601804222635159309270734248253910846445772427990539310920956638830443546279779248543311302189461703173552212993527034229222075546856032580670987628037520119464205956993115196276981199211973833229844150064294793196718970750786858407104368350673000929040817371998247603751831251467774563662970194855098662024632804453477472218260111637984460485333219701869994881190375502861436059780800668575390224835998637345080931828766519172123175211156090759288632463770410902293290756076554086751756720283274529701412709590817480221088894995843395071866791271849425328575682814089773715568850970768451627604019815680091385706559069872448598833314901682509279316461741983970702995119339583461555611592252801666314891545496682904934038733718042776354669795286768983249150081612552650170438655321138479611738731397895686884315370532201325314569829833492490009137290633890700229270397330764600373466457262930817405398090696718237684385191938405359789403036965495579845603854223837579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1636a5e3317bbf67f6b2b7e7ea54ef5730bec7e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a64baf9cae6656cf2e2518991d5a5babf7f8ee10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.4.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAIGTFServerCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAIGTFServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpcschedd3.fnal.gov'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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