www.h-net.msu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9b:4c:a8:64:91:72:2e:f1:57:af:62:5b:cb:68:69:dd:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.h-net.msu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:4c:a8:64:91:72:2e:f1:57:af:62:5b:cb:68:69:dd:49
Serial Number (int): 401294806273102717851851478449015770176841
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:35:ea:f7:16:dc:57:ee:91:f8:8f:6b:c3:9e:78:a5:0c:f2:5c:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:e1:a1:5b:c0:d1:ed:01:d0:57:c4:fe:ce:ca:b0:57:c5:16:fe:46
Fingerprint (sha256): 00:81:cf:59:ae:72:ab:a3:52:76:00:ec:0f:74:7e:d0:d7:c7:dc:c5:77:00:a7:14:b4:70:7a:d8:f6:f0:bb:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.h-net.msu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.h-net.msu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.h-net.msu.edu

Other certificates including the domain name msu.edu

(limited to 100 certificates)
paw.itservices.msu.edu
shiny.stt.msu.edu
vdi.msu.edu
intranet.nscl.msu.edu
tls.automattic.com
www.licensing.msu.edu
cosmetic.msu.edu
5651276360581120-fe3.pantheonsite.io
dinglab.natsci.msu.edu
addrarch.ais.msu.edu
imperva.com
ooialt.qual.ebsp.msu.edu
dev.labeldat.vudat.msu.edu
www2.pa.msu.edu
mystuinfodirectdeposit.msu.edu
neurology.msu.edu
cj.msu.edu
eamcweb3.usfs.msu.edu
sw.msu.edu
tls.automattic.com
it.uahs.arizona.edu
civilrights.msu.edu
mystuinfo.test.itservices.msu.edu
soviethistory.msu.edu
5651276360581120-fe3.pantheonsite.io
unifier.msu.edu
share.rhs.msu.edu
imperva.com
www.h-net.msu.edu
web.cal.msu.edu
mistt.msu.edu
africanactivist.msu.edu
crm.test.itservices.msu.edu
www.collegelifeel.msu.edu
panorama0.itservices.msu.edu
edassist.hr.msu.edu
nartc.fcm.arizona.edu
nowlin.qual.psm.msu.edu
research.chm.msu.edu
rice-alt.test.ebsp.msu.edu
vdi-b-cs1.campusad.msu.edu
exchange.pa.msu.edu
imperva.com
dev.undergrad.msu.edu
animalhealth.msu.edu
5651276360581120-fe3.pantheonsite.io
5746985747349504-fe1.pantheonsite.io
wwdev2l.math.msu.edu
dmat.msu.edu
imperva.com
www.effs.msu.edu
incapsula.com
incapsula.com
plantbiology.natsci.msu.edu
uconnectlabs.com
dmat.msu.edu
5639955095224320-fe3.pantheonsite.io
reporting.anr.msu.edu
incapsula.com
news.jrn.msu.edu
systempassword.test.itservices.msu.edu
web.natsci.msu.edu
lms.advancement.msu.edu
ww2.math.msu.edu
mcfscholars.msu.edu
5658638538506240-fe4.pantheonsite.io
vita.msu.edu
mail.campusad.msu.edu
imperva.com
vegetable.ent.msu.edu
web5.cal.msu.edu
rdgateway.ipf.msu.edu
burgueno.egr.msu.edu
vp.research.msu.edu
glg.msu.edu
oauth2.qual.itservices.msu.edu
asset.itservicedesk.test.itservices.msu.edu
actsciclub.natsci.msu.edu
wwl6.math.msu.edu
cstat.research.msu.edu
search.msu.edu
bps.broad.msu.edu
rose.canr.msu.edu
imanage.itservices.msu.edu
wwl2.math.msu.edu
sgp.msu.edu
scholendow2.dev.ais.msu.edu
chems.msu.edu
rio.msu.edu
help.anr.msu.edu
jira.test.itservices.msu.edu
varietytrials.msu.edu
msu-water.msu.edu
epri-trac.egr.msu.edu
5651276360581120-fe3.pantheonsite.io
confrooms.pa.msu.edu
marcom.cal.msu.edu
oemi.msu.edu
netprint.msu.edu
5651276360581120-fe3.pantheonsite.io

Certificate

The complete raw certificate details for www.h-net.msu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401294806273102717851851478449015770176841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 14:00:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 14:00:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.h-net.msu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635864777632743766394680104111627647029537408389673545884095140110243876536432789167510315606791641453700090504346411885584770037375436427990773214055134558872890969544109124279306741957705883627739245670584757841289286676917631764670262919110936996904804559941216196091228813729699500624038480683294907927442852744667813368302471074575007600601298768363538706286751250566663566691950439338493357849095139918955571065447111024160195009851885549129750011803538248276803789983104956301439806053840345449226756758289646560640498722738004017054746602700504844033056967268682078619168037798719081644809222744934528236756371974400340573583947769729396167498906644111387422722831161286539892780423147443545111330423643229139354174366256364470936806114312409783247186972021459147351478189016772625989790021952804852700206890461978778630347568920457780273444813753133782005381628003884330580040755179360604313921406949162719462260514372772550491608683381184266967526292373976924616768571147394874738989076995781536967685704463823124893093638777554934803887043290979944461014859456993840440442679839878463359524916758691083539298394037468817659612780111293723595632466468422479322685244741766242286852377704017830409213603646423637850766567209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7135eaf716dc57ee91f88f6bc39e78a50cf25c28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.h-net.msu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017169c187cd00000403004730450220748c4550f77fe0ca854560202994961b4a13bd7b81f7e4c263b16b298feed0db022100ff91b3b3d07c581336b28b4346dc9d020eb946098549c8b5b3e7f76dda0640690076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017169c188760000040300473045022053f57cee777839752cabfcea7ce05083db49f48ba8598d02071dfdfbbe4d37dc0221009840332e4dc2fa286c2b3541aa33cb29abfd1ded653cd85d9a2e0ec4d9a7f9a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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