cme.bu.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:81:99:08:e3:47:ff:8a:bd:77:9c:3b:1f:22:56:37:ef:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cme.bu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:81:99:08:e3:47:ff:8a:bd:77:9c:3b:1f:22:56:37:ef:dd
Serial Number (int): 392548987091383274751889422542601125883869
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:7c:87:81:e6:04:47:ff:8f:30:b4:e2:18:d2:e8:48:9a:1c:b0:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:d2:7e:e3:ee:fa:35:f8:c4:86:cb:65:f3:75:3f:89:72:aa:a4:25
Fingerprint (sha256): 00:73:81:a5:22:2e:8b:17:99:18:64:c0:27:da:89:c2:dd:55:7d:47:6f:66:ce:1f:15:d9:6f:f5:bd:2e:5f:bb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cme.bu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cme.bu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cme.bu.edu

Other certificates including the domain name bu.edu

(limited to 100 certificates)
smgserv1.bu.edu
us.prod.campusgroups.com
patientconnect.bu.edu
questromworld.bu.edu
myprintweb.bu.edu
casit-wiki.bu.edu
teklaser.bu.edu
cme.bu.edu
ec700.bu.edu
algorithmics.bu.edu
uis-eta.bu.edu
us.prod.campusgroups.com
genomics9.bu.edu
peptimap.bu.edu
cmld.bu.edu
inspir.bu.edu
amploadvance.com
san-7-s11.tlsprovisioning.exacttarget.com
ist-rims-prod.bu.edu
bubhub.bumc.bu.edu
curriculum-courseleaf.bu.edu
uconnectlabs.com
peptimap.bu.edu
adfs.bu.edu
devapplyemssp.bumc.bu.edu
genealogyonline.bu.edu
uconnectlabs.com
facdev.bumc.bu.edu
ssl714054.cloudflaressl.com
amploadvance.com
agnionline.bu.edu
exec-courses.bu.edu
cpr-archive.bu.edu
ec700.bu.edu
segrelab.bu.edu
scalefunder.net
cytreg.bu.edu
laundry-web-test1.bu.edu
genealogyonline.bu.edu
ist-shib-san2.bu.edu
bupid.bumc.bu.edu
cogrhythms.bu.edu
us.prod.campusgroups.com
test-support.bu.edu
wwwapp.bumc.bu.edu
www.shape.bu.edu
cpr.bu.edu
neidl-cmms.bu.edu
support.bu.edu
san-7-s11.tlsprovisioning.exacttarget.com
met-vs204.bu.edu
bioed.bu.edu
adfs.bu.edu
test-support.bu.edu
crem.bu.edu
disco.bu.edu
shape.bu.edu
financialplanningonline.bu.edu
bupid.bumc.bu.edu
uconnectlabs.com
agnionline.bu.edu
ftdyn.bu.edu
cytreg.bu.edu
cpr.bu.edu
disco.bu.edu
uconnectlabs.com
cpr-archive.bu.edu
boylston.bu.edu
givingday.bu.edu
illiad.bu.edu
mycv-test.bu.edu
open.bu.edu
fincomp.bu.edu
web.offcampuspartners.com
uconnectlabs.com
mypa-application.bumc.bu.edu
linklogin-syst.bu.edu
hospitality.bu.edu
webapi.bu.edu
ec521.bu.edu
kuali-research-qa.bu.edu
combeyond.bu.edu
wwwru.bumc.bu.edu
geddes-wiki.bu.edu
ist-filemaker.bu.edu
hospitality.bu.edu
us.prod.campusgroups.com
www.cpr.bu.edu
san-7-s11.tlsprovisioning.exacttarget.com
ist-fms-pr1.bu.edu
n001.offcampuspartners.com
casapps.bu.edu
study.bu.edu
shape.bu.edu
mendelsun.bu.edu
ist-ob-unity.bu.edu
ist-wsus04.bu.edu
myfitrec.bu.edu
casadvtrac.bu.edu
outandally.bumc.bu.edu

Certificate

The complete raw certificate details for cme.bu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArQ5UT4ZvFXfO8WMR199F
xFk87l92qGeMm/SdPvpQedR1jwITdcNF9HNb3EXeldrlgnH0n0+EYoIBef6MQFKl
n60Fr2GbVoBm3Qpw++7Mt62zoXK36mfqOVjQt0wa2R+9wlJmlwS4Wa9Kp5dbhdJR
m7lYrON3Hufm+eSmdvtUfaTo8t0YaYGcs0x7SnZQpXH4k6BSpCTChAAJc9+xjtDX
WUVX7Tw4k6rYZX4QU9+ab3Uq6WZcozu33R5EW+vErl2z2NJb3h9uq53moEILdQe4
85fMVQ6XdKwWyyHAoQc99QLeHq/TzlA6T2hxP2Vd717VYMO1f6Y+kj6XU/0jc+YC
qy56UloCC0s/aorNDkzlnYov9dBi/q8kmF77oqSz/2xBuidJZ53cX24MuNCFYejN
DMb/yJZHN0Z8qxdYzriLuH2qZ0H3eIBDBACvmb6hE/IIQbwK0JcDzPcW19R1Ay4H
gbWl3nBfdR0lSHi6PGrSf7T6iuoSIyNqN9TSHnMyReF9Crr24pK2QtRLrkgLsLs3
oK9RZvEmcqL++iYGedsJ42ATzhM/rv5gQTe2B8Bl5BmzP39qVfZ3IqPm5qZYV2Fu
dUy3D614yXgA+PmIUUz/9ufyzDo2wKF6maLVfdr+34dJ0im4mHHuoxfLLgucHPCQ
+Na9luFFoUOZz4s9fxVvmWECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392548987091383274751889422542601125883869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 08:11:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 08:11:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cme.bu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706006777676215009096265995677259801234275751057169053607903549743915941426285561671114370405857310085875048879748802728551444425932306689069882389549541522059671831400458034648220438658703009934975757961888755945521950951889107930843028985320723894125862053963606171702482178402364490690989642780751639015012353960615523225884505684013374261853257195202835949267850996790814471696988657305230335252177302254692702261000609263721964205497035689680496311918435802126890999958877382508530791050045480722452097870452284260430939769902174978473736662551616851494922664900170171900426283882632857356665701412308238600412108944874498916465318547298166132340924719651129971041989796580235349415825480074855095716290120272222640425320421338517249674220465427675655045731438780175639948804287006385265337940503023195016767112448939663533491173214667043885013924686163434618348949773037516257894716481876825296383247790325352885720377500465235601245038568459669374675736295115852127049128809056956300109588134422735298793278957335929733797424072158595969226264410753012798913666611924993936386937668604860862942752161141020179400473494683215904269382994267697811037975404658474984463286388596622568694260565267927197373513373559031445194774881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e7c8781e60447ff8f30b4e218d2e8489a1cb069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cme.bu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a981bf90f0000040300483046022100ed0a0357fc3cab7deb7dfb31679579a5c40b7c062870cdba04ca9b79a48bfe8b022100d5a85b9ecda65a7a812ed23a4aeadaf4ff9437b2721cfd118d53dc8f99e65614007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a981bf93b000004030046304402206d589df4ef9853b14d3537d04661e33562462e0fb879b34f2a6a1625f03d0d9502205ddc999b57db5413816464f78fd3af03528f34f859b913831b141ba0194ec34a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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