club.gmu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:3a:95:27:1a:16:1f:c4:0a:38:b2:8f:34:8d:42:67:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=club.gmu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:3a:95:27:1a:16:1f:c4:0a:38:b2:8f:34:8d:42:67:82
Serial Number (int): 263796704032795509834535273137916388468610
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:32:f4:18:af:6f:79:0a:e6:ec:55:a6:9e:3d:ce:90:8d:42:4e:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:56:64:72:a4:f6:cf:8c:2b:b8:da:66:71:3c:bf:4c:c7:16:19:1d
Fingerprint (sha256): 00:4e:31:75:58:35:52:a4:bb:f7:6f:c4:48:9e:12:e9:55:18:36:dd:e1:34:1d:d7:1c:b3:23:22:f8:64:42:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate club.gmu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for club.gmu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

club.gmu.edu

Other certificates including the domain name gmu.edu

(limited to 100 certificates)
lynda.gmu.edu
www.gmu.edu
administrativestate.gmu.edu
dshi.gmu.edu
mix.gmu.edu
eaglet.gmu.edu
www2.gmu.edu
surveys.c4i.gmu.edu
us.prod.campusgroups.com
stat.gmu.edu
healthcareers.gmu.edu
malthael.mesa.gmu.edu
club.gmu.edu
mars.gmu.edu
pbk.gmu.edu
corolla.mesa.gmu.edu
www.mix.gmu.edu
chhs.gmu.edu
us.prod.campusgroups.com
tls.automattic.com
*.physics.gmu.edu
ati.gmu.edu
volgenau.gmu.edu
campusimpactforum.gmu.edu
eastgermanposters.gmu.edu
gazette.gmu.edu
provostit.gmu.edu
mats.gmu.edu
qmc.gmu.edu
irr.gmu.edu
welcome2mason.gmu.edu
ularlington.gmu.edu
gec.gmu.edu
fiscal.gmu.edu
coursemedia.gmu.edu
docushare.gmu.edu
securedns.planmygift.org
casper.gmu.edu
jacklab.chss.gmu.edu
ott.gmu.edu
fndtadv1t.mesa.gmu.edu
gazette.gmu.edu
socialcomplexity.gmu.edu
test.gmu.edu
ncbid.gmu.edu
ippp.gmu.edu
anhpham.gmu.edu
computing.gmu.edu
gradfellows.gmu.edu
adr.gmu.edu
tedx.gmu.edu
cashiersoffice.gmu.edu
ready.gmu.edu
orientation.gmu.edu
cie.gmu.edu
publicservice.gmu.edu
greenmachine.gmu.edu
mvets.law.gmu.edu
iflood.vse.gmu.edu
explore.gmu.edu
us.prod.campusgroups.com
learningsolutions.gmu.edu
engage3.campuslabs.com
smfund.gmu.edu
transportation.gmu.edu
socialmedia.gmu.edu
edge-uc2.peopleadmin.com
socialcomplexity.gmu.edu
vision.gmu.edu
patriotlife.gmu.edu
ssac.gmu.edu
randed.gmu.edu
administrativestate.gmu.edu
test.gmu.edu
eip.gmu.edu
calendar.gmu.edu
pbk.gmu.edu
dining.gmu.edu
crdc.gmu.edu
chssweb2.gmu.edu
soa.gmu.edu
securedns.planmygift.org
gstf.gmu.edu
carterschool.gmu.edu
mason.gmu.edu
favs.gmu.edu
scylla.gmu.edu
aubreygrant.gmu.edu
ulbranding.gmu.edu
campusimpactforum.gmu.edu
edge-uc2.peopleadmin.com
robinsonprofessors.gmu.edu
pb.gmu.edu
web.offcampuspartners.com
artsmanagement.gmu.edu
printservices.gmu.edu
ventures.gmu.edu
csps.gmu.edu
call2.gmu.edu
assip.cos.gmu.edu

Certificate

The complete raw certificate details for club.gmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263796704032795509834535273137916388468610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 06:59:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 06:59:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'club.gmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 615466200667668455028343967364000635158248363053105298131963734506141973160454327011612858121460832546697386377005980955763372204060358364366458521206135955935562243325966632927746840881672340559421965519298799827058892993226393800612828766751369945880298443646678750529530553173251526921838051226511017365024653050814731271721064579075514464448848279095354977615921609068803220776233769707463737345143035471300137473617258658429813674738348175830586755981740398045912115448774743480328496588790865419049181180722885289753791873524281702226427058900041505793722080672553761081321288869381280677618163520631501544110121254053783244617193913705852821469009804623043323348712340654454230346043572170900826387512534607526509357813008878048772091290794367680587143859729716590551254993817183225694287543183244393989193532808004357356326160391401291832925536827884151339286242591986853278593853087616312779083230743910273018369109364645760962487896861835768622755099405698383709811414521449361441077264137653654418857812574390813269520605013450898970717513601108223272673361885800636353843370951108471934929218802671302938491623374107922050860271894018110661013690909111362968099866273017586767454044576875523847882787203883999119753732149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea32f418af6f790ae6ec55a69e3dce908d424eb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.gmu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f08918623000004030046304402200b3b96daa286492af26228d01095ed1e5cd430b1c1511f68fe0960b485985df50220671e77089f40d636569243b4992161110ab17411718118ed20145f6d7ca8be3300770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f08918623000004030048304602210085fd23f3a34836a0120fdcf8d46c26e150bcfa30ed054be1aacfe7ae2c2d7c01022100d0c62d52dda89ff033a7b0b6f1d1c406912c706eb33cf158bacd36aa1d390e04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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