lynda.gmu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:cb:d3:f6:7c:4a:e0:1d:d3:b4:d4:83:b8:06:5e:0b:d1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lynda.gmu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:cb:d3:f6:7c:4a:e0:1d:d3:b4:d4:83:b8:06:5e:0b:d1
Serial Number (int): 266371744789275594680232032331469871254481
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:a0:dc:5f:f2:99:23:73:47:d6:5c:36:db:32:da:88:2f:19:18:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:94:a1:52:49:87:d8:32:fe:9a:fb:f8:e3:cc:2a:20:77:bf:5a:0d
Fingerprint (sha256): 00:02:40:2b:28:6b:6d:2a:de:e2:2f:94:89:09:12:4b:7c:fc:5a:66:77:bc:26:a9:8e:95:24:85:06:e3:8f:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate lynda.gmu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lynda.gmu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lynda.gmu.edu

Other certificates including the domain name gmu.edu

(limited to 100 certificates)
lynda.gmu.edu
www.gmu.edu
administrativestate.gmu.edu
dshi.gmu.edu
mix.gmu.edu
eaglet.gmu.edu
www2.gmu.edu
surveys.c4i.gmu.edu
us.prod.campusgroups.com
stat.gmu.edu
healthcareers.gmu.edu
malthael.mesa.gmu.edu
club.gmu.edu
mars.gmu.edu
pbk.gmu.edu
corolla.mesa.gmu.edu
www.mix.gmu.edu
chhs.gmu.edu
us.prod.campusgroups.com
tls.automattic.com
*.physics.gmu.edu
ati.gmu.edu
volgenau.gmu.edu
campusimpactforum.gmu.edu
eastgermanposters.gmu.edu
gazette.gmu.edu
provostit.gmu.edu
mats.gmu.edu
qmc.gmu.edu
irr.gmu.edu
welcome2mason.gmu.edu
ularlington.gmu.edu
gec.gmu.edu
fiscal.gmu.edu
coursemedia.gmu.edu
docushare.gmu.edu
securedns.planmygift.org
casper.gmu.edu
jacklab.chss.gmu.edu
ott.gmu.edu
fndtadv1t.mesa.gmu.edu
gazette.gmu.edu
socialcomplexity.gmu.edu
test.gmu.edu
ncbid.gmu.edu
ippp.gmu.edu
anhpham.gmu.edu
computing.gmu.edu
gradfellows.gmu.edu
adr.gmu.edu
tedx.gmu.edu
cashiersoffice.gmu.edu
ready.gmu.edu
orientation.gmu.edu
cie.gmu.edu
publicservice.gmu.edu
greenmachine.gmu.edu
mvets.law.gmu.edu
iflood.vse.gmu.edu
explore.gmu.edu
us.prod.campusgroups.com
learningsolutions.gmu.edu
engage3.campuslabs.com
smfund.gmu.edu
transportation.gmu.edu
socialmedia.gmu.edu
edge-uc2.peopleadmin.com
socialcomplexity.gmu.edu
vision.gmu.edu
patriotlife.gmu.edu
ssac.gmu.edu
randed.gmu.edu
administrativestate.gmu.edu
test.gmu.edu
eip.gmu.edu
calendar.gmu.edu
pbk.gmu.edu
dining.gmu.edu
crdc.gmu.edu
chssweb2.gmu.edu
soa.gmu.edu
securedns.planmygift.org
gstf.gmu.edu
carterschool.gmu.edu
mason.gmu.edu
favs.gmu.edu
scylla.gmu.edu
aubreygrant.gmu.edu
ulbranding.gmu.edu
campusimpactforum.gmu.edu
edge-uc2.peopleadmin.com
robinsonprofessors.gmu.edu
pb.gmu.edu
web.offcampuspartners.com
artsmanagement.gmu.edu
printservices.gmu.edu
ventures.gmu.edu
csps.gmu.edu
call2.gmu.edu
assip.cos.gmu.edu

Certificate

The complete raw certificate details for lynda.gmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviBWEZhigMB2DtFT+hxH
UM4RycsslQlawpyBeyx1WvIP3O2efvz3xQAqltpHaJHCDuxe1hwWuNv1v/kXe7DK
CsloBBX/vskn3O29/Sp5ELtS+fsp9JZYwe/vCFTQ4hH3ekIHnclhhNs/FkZME6zp
O1vKzWj8aU3dZb59ucN3fRH0LKwWPayi675OUCvaQ6fLFVxM2Hv8WpQ6YVhc2OCE
/lycMyHufhrDjcI2qJzye1Sajdm2R21wdveNwOR4dNsny0IZKDSIbu06Rsk00JjM
W6uEA1kUb6JUvBdsaOr5xDlotgaPtWr9C2DrM1it7mR6dxf84n45NGGPGAer0q/S
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266371744789275594680232032331469871254481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 21:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 21:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lynda.gmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24001223521020798940683433481013504302037219581056540567968269572908830481454132305588215266861458943161287490926014674955756746072406232564700066491086595529088329852270792873377122568284423044491771016251824421724545693547048408476541840986613380739627872883288578159262934782992030906030822110523533340332773817777950136618702528854227463632683422296764520446983264858987816422314466490128608046215800504833174996665389009274449858778092518150641629603097700354286193280390929981181761434345620234531134977277475358761029786727358602624582924568179656677560693510952241542488013685846017924722016224107912319980153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65a0dc5ff299237347d65c36db32da882f191817
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynda.gmu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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