web.stat.ncsu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:26:1e:68:df:72:c3:f4:2e:a6:59:b1:85:8b:a3:2b:42:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.stat.ncsu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:1e:68:df:72:c3:f4:2e:a6:59:b1:85:8b:a3:2b:42:2c
Serial Number (int): 361420295040853480212425582581800000766508
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:d4:56:9b:ff:76:32:c8:63:b6:dc:b3:7d:b3:82:73:5a:a7:45:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:3e:e7:ee:f6:c8:89:d7:f0:1e:37:22:f1:ef:45:ae:0f:bf:1e:4d
Fingerprint (sha256): 00:69:81:c8:4e:70:18:08:c5:57:30:88:03:60:03:f1:1d:93:71:c6:43:21:33:71:2a:b1:62:fe:c5:5e:a9:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate web.stat.ncsu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.stat.ncsu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.stat.ncsu.edu

Other certificates including the domain name ncsu.edu

(limited to 100 certificates)
pesttraining.cals.ncsu.edu
cdn.lib.ncsu.edu
vtcp.chass.ncsu.edu
www.p1tlab.ncsu.edu
chandler.math.ncsu.edu
www.cei.ncsu.edu
test-feedback2.iaa.ncsu.edu
*.givegab.com
sdc-test.csc.ncsu.edu
sasanalyticsdev.oit.ncsu.edu
marinesci.ncsu.edu
shib.ncsu.edu
web.stat.ncsu.edu
execportal.acs.ncsu.edu
sva74prd.oit.ncsu.edu
munki.math.ncsu.edu
fi.ncsu.edu
www.ies.ncsu.edu
comtech.ncsu.edu
producesafety.ncsu.edu
ipsen.math.ncsu.edu
sfrdel00406mn01.delta.ncsu.edu
eml.lib.ncsu.edu
ednaweb.oit.ncsu.edu
survey.ncsu.edu
fo91upg.acs.ncsu.edu
applygrad.ncsu.edu
jack.math.ncsu.edu
wordpress.ncsu.edu
yfcsonline.cals.ncsu.edu
www.ces.ncsu.edu
stsynkov.math.ncsu.edu
dns-vetting1l.map.fastly.net
lib-ops-prod01.lib.ncsu.edu
applynds.ncsu.edu
uconnectlabs.com
online.math.ncsu.edu
zhilin.math.ncsu.edu
aalexan3.math.ncsu.edu
vmimap.ncsu.edu
msen.fi.ncsu.edu
im122pp101.oit.ncsu.edu
*.givegab.com
mba.ncsu.edu
onece-staff.ncsu.edu
cgiplqa-ww1.oit.ncsu.edu
s2w-dev.oscar.ncsu.edu
center.ncsu.edu
wp.math.ncsu.edu
public.intellimedia.ncsu.edu
cnec.oit.ncsu.edu
ebi94qa.acs.ncsu.edu
research.ece.ncsu.edu
idpt1.unity.ncsu.edu
*.givegab.com
www.linux.ncsu.edu
info.broadcaster.ncsu.edu
proxy.oit.ncsu.edu
eval.ces.ncsu.edu
tnguye13.math.ncsu.edu
dns-vetting1l.map.fastly.net
ncchinasummit.fi.ncsu.edu
erate.fi.ncsu.edu
brc.ncsu.edu
tlc.math.ncsu.edu
sg.students.ncsu.edu
spl-d-ix-200.oit.ncsu.edu
sir.csc.ncsu.edu
nids.csc.ncsu.edu
rpt2web.acs.ncsu.edu
mydesktop.lib.ncsu.edu
char.csc.ncsu.edu
mysqlcl-dev02.lib.ncsu.edu
miso.ncsu.edu
etsstestpl.fis.ncsu.edu
mrl.ies.ncsu.edu
jha1220ms.classtech.ncsu.edu
cs4all.fi.ncsu.edu
developers.ncsu.edu
stormwater.bae.ncsu.edu
reedycreekequine.ncsu.edu
www9.acs.ncsu.edu
t19-moodle-01.delta.ncsu.edu
viewadmin.lib.ncsu.edu
pllc.fi.ncsu.edu
analytics.ncsu.edu
sfrcal00103ki01.cals.ncsu.edu
zoom.ces.ncsu.edu
nreadin.math.ncsu.edu
rpt2web.acs.ncsu.edu
mae.ncsu.edu
mbam.oit.ncsu.edu
msen.fi.ncsu.edu
t13-gen-web-01.delta.ncsu.edu
ir.engr.ncsu.edu
arts.ncsu.edu
ptmt.fi.ncsu.edu
recreation.ncsu.edu
assist.ncsu.edu
spl-d-sh-200.oit.ncsu.edu

Certificate

The complete raw certificate details for web.stat.ncsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkoz+GgLeia/pnC/+v6Y
VGLR+q12jv9Dy7qttICTyZtpyi5E/FpTLRWenSubzF7VNg8yJnYUZky+QQb7uFDb
RlxTtoJo2s7iWu7W43VU7PKhshknK2+kp6mySj9vpkIz08M8UJc1EQk3YlB4wT1E
uMDaKAXB8kLIlR9CRvRO95uk1rVbGLTFHvfeFgSOyoOVQxFRZoAnCuTz9zVN2mzY
JtZbhDivfrzAI/zZf25ohiziXBGWBgUxo7qDTgwCwWT9RF3YOQuCsHvEWca5yU5e
wB03xFYKH5jMSN4rBYPLM6d7u7tnT9wdC067V0z1gzU8ECM2a9qy/IMz1n1NN59i
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361420295040853480212425582581800000766508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 11:44:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 11:44:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.stat.ncsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19982243052200188333871510701754774259537449358307115851664683985537204909792908625120156777703446408397040050633432118462428068736371724057849215578929534139110702043020988768939874521317209584737589425541325095268890896996932695646446342022432802075380196345286503214625395364227011205869055014392771280501200263688678366188456445598570786768967480733248573457640821586652036593989890563398715741659486182148507801446665460357196553970681783307052830813092929506384027574784364834447337160031778673942700419526720088419504002118139710674994460505820097200188281292462747376526541320776172099237187901886162446279251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7d4569bff7632c863b6dcb37db382735aa74571
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.stat.ncsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e5fa489f40000040300473045022100c5e1e83fcc87b3a95208b20cd953de3c38e6208e4b28ac3ec1ff7bcd69897a5202205a2645547b404baf771142d2c5a2b41e483ed64eebb999d14f0c489202863580007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e5fa489e30000040300473045022029830f8e06af090e5d08e40f0cecec404935869802976e2b42df160c566a5251022100a15a4674050eed915697c477bb54925900b5bc214ebc22c44dd882766c4b9ae2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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