pbk.gmu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:29:78:61:e3:d4:5b:69:73:49:ac:b7:48:e7:2b:79:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pbk.gmu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:29:78:61:e3:d4:5b:69:73:49:ac:b7:48:e7:2b:79:37
Serial Number (int): 313455183343078776357129404125505779366199
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:35:ad:37:d3:e8:2b:56:7e:85:b2:d5:10:8c:f5:6d:75:fc:6e:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:13:7e:64:a5:d2:55:3e:62:eb:93:57:78:6a:61:38:cd:54:50:70
Fingerprint (sha256): 00:82:92:40:7f:d5:d1:07:18:32:66:1a:51:15:06:1c:e1:ae:33:bb:1f:76:23:0e:1d:4e:f5:26:7a:c4:16:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pbk.gmu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pbk.gmu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pbk.gmu.edu

Other certificates including the domain name gmu.edu

(limited to 100 certificates)
lynda.gmu.edu
www.gmu.edu
administrativestate.gmu.edu
dshi.gmu.edu
mix.gmu.edu
eaglet.gmu.edu
www2.gmu.edu
surveys.c4i.gmu.edu
us.prod.campusgroups.com
stat.gmu.edu
healthcareers.gmu.edu
malthael.mesa.gmu.edu
club.gmu.edu
mars.gmu.edu
pbk.gmu.edu
corolla.mesa.gmu.edu
www.mix.gmu.edu
chhs.gmu.edu
us.prod.campusgroups.com
tls.automattic.com
*.physics.gmu.edu
ati.gmu.edu
volgenau.gmu.edu
campusimpactforum.gmu.edu
eastgermanposters.gmu.edu
gazette.gmu.edu
provostit.gmu.edu
mats.gmu.edu
qmc.gmu.edu
irr.gmu.edu
welcome2mason.gmu.edu
ularlington.gmu.edu
gec.gmu.edu
fiscal.gmu.edu
coursemedia.gmu.edu
docushare.gmu.edu
securedns.planmygift.org
casper.gmu.edu
jacklab.chss.gmu.edu
ott.gmu.edu
fndtadv1t.mesa.gmu.edu
gazette.gmu.edu
socialcomplexity.gmu.edu
test.gmu.edu
ncbid.gmu.edu
ippp.gmu.edu
anhpham.gmu.edu
computing.gmu.edu
gradfellows.gmu.edu
adr.gmu.edu
tedx.gmu.edu
cashiersoffice.gmu.edu
ready.gmu.edu
orientation.gmu.edu
cie.gmu.edu
publicservice.gmu.edu
greenmachine.gmu.edu
mvets.law.gmu.edu
iflood.vse.gmu.edu
explore.gmu.edu
us.prod.campusgroups.com
learningsolutions.gmu.edu
engage3.campuslabs.com
smfund.gmu.edu
transportation.gmu.edu
socialmedia.gmu.edu
edge-uc2.peopleadmin.com
socialcomplexity.gmu.edu
vision.gmu.edu
patriotlife.gmu.edu
ssac.gmu.edu
randed.gmu.edu
administrativestate.gmu.edu
test.gmu.edu
eip.gmu.edu
calendar.gmu.edu
pbk.gmu.edu
dining.gmu.edu
crdc.gmu.edu
chssweb2.gmu.edu
soa.gmu.edu
securedns.planmygift.org
gstf.gmu.edu
carterschool.gmu.edu
mason.gmu.edu
favs.gmu.edu
scylla.gmu.edu
aubreygrant.gmu.edu
ulbranding.gmu.edu
campusimpactforum.gmu.edu
edge-uc2.peopleadmin.com
robinsonprofessors.gmu.edu
pb.gmu.edu
web.offcampuspartners.com
artsmanagement.gmu.edu
printservices.gmu.edu
ventures.gmu.edu
csps.gmu.edu
call2.gmu.edu
assip.cos.gmu.edu

Certificate

The complete raw certificate details for pbk.gmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2/Y6akHoTDZ4OR/BBphz
cLtlbR0QFoqALfj/BorFr/1Fd/Oum2C//JemFfxTaCQiTw1eKESCU/AWhJIZ42Rh
1hRCY+S4DZyC2LcqJTqX6vHKCbVZJFDvJPPEIJX5g0PkGZjNcpz4hh+IDuo19Z4o
p9ixxnbv7GiKHhcmRHwhk09lqM+ssVAiIDm+bxnX6CVwQXrOZQvOzyDs31FsGdAA
YB5jOnBjJZhkke7j4sZktg++zWGfSdErzWDnrcxnwqEo9aH5hGqc3JdUJeb8ZDUd
yFZGg6txEVcGqfz6zVqTcYRZPWaMgZf8d3pAl2winADOYj6LmGlAak7lkZ2RSdKf
aUij8dd0vUYR8HEL1u5RLqu5n5We1XGThT5lE5A2UE0xaHPuZxrYQXFMi/OoCh/c
Cbbh2ripEhORChw2jCneYlUHm9vN1oxdDDMuPBxXw6lBUBNmybyOZY7YOcqn4M00
Dr6lLY2Zr00Dj59plo2kAaqDY4c/kAUZqKSxr6NA3UzAUlO0G7diUDsYWov5I12c
mwljzTgJNhNdsMoqK9n9KcneHAZRfodL+iuVIlAlgvH/tjetREZYeEx5ONZWeS/x
6Vj4ZXurUTGecKNZAfcESr1iHaQkvMuBYQi21rF8RR1Q0QOBZbtOYUIsr1dT8cVD
tHXkUec7BLvZBrz2ioFucH0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313455183343078776357129404125505779366199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 19:46:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 19:46:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pbk.gmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897365970231032553326203951087318711555598749328441037724018500525277504795336568003592585451002477128189845772564471865610860314159671055759538961958927972288265096743938081202498232395728523655915779008673731801018975653113581250900118208440981592890137071211284048462333043525340820943987812981727155552396325233979772006970811983549023976603641070665844178038098362617359661150752290102476372646239376500762621390168287050587832294041383117487412032348387502807103849721515925985927200410440449461055769014442322622867873068325618445484034183255566846423103179753958965778747539537127788972767236322384467078840848687909462654817426331535940329186178621262564317781961271998293532882558284071254622797941407163278912777760935730877385574134512418130270854806763754460347810625685694974301264110395509606162449718270123237909357369738059240217724738813755901316206441217505035474132052672760481392204625697939775692371962853736229425512098345317905943132662337369252079063122787226748415622912617840272884627449646189703700628313605811294316010539313316652359239915467928407434837122420620009873831391363959302551473106378174303189111415398938840177292868877555265609093962793460539316761894475966851281546222662711031723312705661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2335ad37d3e82b567e85b2d5108cf56d75fc6e32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbk.gmu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de5c562e700000403004630440220428c5eba91cc7048b44ac70a74b419b7e4a4456799e7249a2b55a563baf88453022030f458330beec0b7e19d421eb2371673f8799efe81ce2bd35afaae27b4a833cb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016de5c563180000040300473045022029c8b878cb875614b75bda67e00679d06b9394dd5d1190110970f1f4b56931f1022100e8fd43e6d57a927e9930f27f064ea3a51a7b7f5d9810f1c898ef1d28fc334748
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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