rhesx003-mgmt.lsu.edu

- Louisiana State University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number df:fc:87:58:57:0d:e4:4d:fb:f5:9c:85:96:fa:65:d6 was issued on by Internet2.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Louisiana State University

Organization: Louisiana State University
State / Province: Louisiana
Country: US

Internet2

Organization: Internet2
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): df:fc:87:58:57:0d:e4:4d:fb:f5:9c:85:96:fa:65:d6
Serial Number (int): 297729046992703800478932589311734474198
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:21:f2:af:d6:6b:17:90:0d:83:14:db:72:e4:10:e1:e5:ab:8b:02
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): b0:94:11:d2:41:ed:e6:24:e2:b8:75:0c:76:66:d4:9d:a4:3e:09:dc
Fingerprint (sha256): 05:eb:76:55:69:a1:01:a6:67:b2:4c:16:3b:78:af:2e:71:7d:26:e1:eb:1d:28:01:da:3a:82:c1:ca:75:88:b8

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate rhesx003-mgmt.lsu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rhesx003-mgmt.lsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rhesx003-mgmt.lsu.edu

Other certificates including the domain name lsu.edu

(limited to 100 certificates)
paws.lsu.edu
test-myproxy01.apps.lsu.edu
itservice.lsu.edu
moodlerooms.com
ussweb012.lsu.edu
us.prod.campusgroups.com
www.lsu.edu
lsuphotos.lsu.edu
libweb.lsu.edu
listservnew.lsu.edu
lalinks.lsu.edu
stellar.cct.lsu.edu
cobbler.hpc.lsu.edu
ngcl-4052-ups-1.lsu.edu
www.socialwork.lsu.edu
guides.lib.lsu.edu
www.ltrc.lsu.edu
rhhms002.lsu.edu
accounts.hpc.lsu.edu
subrosa.esl.lsu.edu
rhmac001.lsu.edu
acsa.lsu.edu
mail.agcenter.lsu.edu
phall.vpn.ncbrt.lsu.edu
ath-helpdesk.lsu.edu
appj07.apps.lsu.edu
training.lsu.edu
skype.ncbrt.lsu.edu
nas-csc.lsu.edu
sncsrtweb.sncsrt.lsu.edu
app.lbrn.lsu.edu
www.cct.lsu.edu
applygrad.lsu.edu
ol.berklee.edu
rh-testwiki.lsu.edu
moodleftp.lsu.edu
digitalcommons.lsu.edu
places.lsu.edu
admissions.lsu.edu
registration.apps.lsu.edu
us.prod.campusgroups.com
phall.vpn.ncbrt.lsu.edu
pollux.ncbrt.lsu.edu
class.bus.lsu.edu
saspr01.lsu.edu
development.moodlerooms.com
development.moodlerooms.com
hydra.cct.lsu.edu
libweb.lsu.edu
it.design.lsu.edu
card.apps.lsu.edu
appl008.lsu.edu
www.bands.lsu.edu
ngcl-1079-ups-1.lsu.edu
appl030.lsu.edu
podcast.cct.lsu.edu
testsciquest.lsu.edu
uiswcmsweb.prod.lsu.edu
*.ezproxy.law.lsu.edu
mediasite.outreach.lsu.edu
timeclock.lsu.edu
acsa.lsu.edu
newservicerequest.lsu.edu
palo-test.vpn.lsu.edu
cbr.lsu.edu
vm-apps.ofs.lsu.edu
appl003.lsu.edu
web.offcampuspartners.com
urecportal.lsu.edu
appl020tm.lsu.edu
www.ece.lsu.edu
cas.sso.paws.lsu.edu
moss.outreach.lsu.edu
lbrn.lsu.edu
mediasite.outreach.lsu.edu
test-myproxy01.apps.lsu.edu
maps.ga.lsu.edu
clbd.cobre.lsu.edu
us.prod.campusgroups.com
uss-tut.lsu.edu
www.cae.lsu.edu
web9.apps.lsu.edu
web.apps.lsu.edu
rhmax.lsu.edu
development.moodlerooms.com
vcs.lsuagcenter.net
mapp02.lsu.edu
answers.outreach.lsu.edu
rhesx003-mgmt.lsu.edu
dsl.lsu.edu
ol.berklee.edu
uni-wiki.lsu.edu
digitalcommons.lsu.edu
geauxgive.lsu.edu
hearne.phys.lsu.edu
development.moodlerooms.com
us.prod.campusgroups.com
laddl-lims.lsu.edu
pollux.ncbrt.lsu.edu
etd.lsu.edu

Certificate

The complete raw certificate details for rhesx003-mgmt.lsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01sjbU+rxXlL0qCSyayk
AfBerheWEuyRNeyWuUcoNd7OHEmZhHXGdCftphH528hslYMGExB//9ZAJlPFTlOu
stukbO11lJ/SRVjz/zywVETuenBWnJxfVZvwR9unZMhQ2EKEdi9Ml9nUiHTprzHC
6SYilLZcFy0aEZ1t2vdMPOhiHrFN3EQgMAbyyMeveV88AYsejCL8jtC5oKRSuaRC
ZkbG9BLnQZuXO6YlAniikDKjSuJq7ZtNbTD+8hjHFRfOC9Tksdk5DgoF/jN+9eqY
ZOgsPPg3n4yyfVvgny1rv+h7oIXP0kJzgF4t98h9bAo4KPVlhm6+XCP2YupH28sa
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297729046992703800478932589311734474198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana State University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rhesx003-mgmt.lsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26681224361335258405372627798053675659158402514270796410759311084826844049517607973131777952924196382447624642476849470523899193959054727528719849847527579708171270922771436613346432088461798056772292953840866738562008708064878813211486082935583012420700619601650537141967206233114493734463786355499859222177456301427148118149723437313317174616079468881789366685907385697887861565974759333052318096916784413782512789267191003599362601455400571195736950779170463795804664186358075626517530734904301391613068222294933553114590848613086448608429687346842299014363215637477677119026213356522780238244702569164039227382321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c721f2afd66b17900d8314db72e410e1e5ab8b02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhesx003-mgmt.lsu.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		000b97a6d8c80ba8c02daee44b9aca360f36b728193b8209f7364e53a86c7e8e663456b6cdc307ba2efa09bd31718dd54a0b92c99056dca9db49999ccc99c9ee19b9c8cdd37828bbf26c2a34206b323962a825d28d6d05659e8b57ee85ea8b6308ae5e17eeb4a5e2e532d5720e3116c2b791f4fe8cae1fad25e09f8a093af739163d8b1f1a8513b6c776087bdbf5cf4cd91b1f3c446bfaab2ae77852b47d64994192bada29696770d872ce328228186e961733bad356d89c85d2b84f9ddd2014588b582e9528090f211fe1d9007bd3ecf13285483215bc3e562d0c837d2a2ade9ec3d2d005f9e27bf3becdc1a0fc1d3b10aeda018f90862c00b930c0299b7fddc58113ae9363ba4f871f416fc5e740e540c4a47edfca9913df26203361e3cdf11d2bd3337ca23601af8d759a0ebd9f5f11f70b555023f21cebabe5667868e60a8a4c7106daa040b129c30fb9cd8799a55a63d0358192ee16e7773c52a8feb4444c562ae2a4ccf737048c571d17128520e86d60107772f847f853aef0926874adc3