slavery.ptsem.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:e1:70:37:c9:7c:44:85:2e:89:12:0a:f7:0a:4d:0c:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=slavery.ptsem.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:e1:70:37:c9:7c:44:85:2e:89:12:0a:f7:0a:4d:0c:b0
Serial Number (int): 283074305879095472953477805954700617256112
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:54:2b:26:f0:91:47:03:62:81:ec:21:1e:b4:c6:a3:7f:2c:ee:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:e5:c3:3e:8a:6c:5f:f8:da:c9:b8:8d:49:69:ec:06:97:7f:b2:eb
Fingerprint (sha256): 00:87:4c:7b:93:d6:dd:67:4e:48:5b:21:e6:a7:7c:2e:09:50:cd:bf:86:3b:3e:47:3c:3c:50:14:2e:a4:df:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate slavery.ptsem.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for slavery.ptsem.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

slavery.ptsem.edu

Other certificates including the domain name ptsem.edu

(limited to 100 certificates)
*.ptsem.edu
ssl377271.cloudflaressl.com
slavery.ptsem.edu
*.ptsem.edu
farminary.ptsem.edu
ssl377272.cloudflaressl.com
iym.ptsem.edu
*.ptsem.edu
sni110592.cloudflaressl.com
*.ptsem.edu
ssl377272.cloudflaressl.com
ssl377270.cloudflaressl.com
*.ptsem.edu
*.ptsem.edu
*.ptsem.edu
www.thethread.ptsem.edu
covid-19-status.anexia.com
thethread.ptsem.edu
covid-19-status.anexia.com
ctmonline.ptsem.edu
ctmonline.ptsem.edu
ssl255904.cloudflaressl.com
www.ctmonline.ptsem.edu
*.ptsem.edu
barth.ptsem.edu
iymforum.ptsem.edu
www.ctmonline.ptsem.edu
sga.ptsem.edu
ctmonline.ptsem.edu
sni.cloudflaressl.com
*.ptsem.edu
*.ptsem.edu
ptsem.edu
iymforum.ptsem.edu
thethread.ptsem.edu
ssl6839.cloudflare.com
omsc.ptsem.edu
xpts.ptsem.edu
ssl377271.cloudflaressl.com
ssl255905.cloudflaressl.com
covid-19-status.anexia.com
covid-19-status.anexia.com
ctmonline.ptsem.edu
compass.status.atlassian.com
ctmonline.ptsem.edu
wimconference.ptsem.edu
ssl377272.cloudflaressl.com
sni110592.cloudflaressl.com
bookofacts.ptsem.edu
*.ptsem.edu
ssl377270.cloudflaressl.com
ctm.ptsem.edu
engle.ptsem.edu
mail.ptsem.edu
compass.status.atlassian.com
*.ptsem.edu
ssl377272.cloudflaressl.com
wimconference.ptsem.edu
ssl377271.cloudflaressl.com
zoeproject.ptsem.edu
*.ptsem.edu
compass.status.atlassian.com
ssl377270.cloudflaressl.com
ssl255905.cloudflaressl.com
ssl377272.cloudflaressl.com
ctm.ptsem.edu
ssl377272.cloudflaressl.com
sni110592.cloudflaressl.com
ssl377272.cloudflaressl.com
covid-19-status.anexia.com
cultivate.ptsem.edu
www.thethread.ptsem.edu
*.ptsem.edu
*.ptsem.edu
covid-19-status.anexia.com
slavery.ptsem.edu
learning.ptsem.edu
*.ptsem.edu
*.ptsem.edu
*.ptsem.edu
thethread.ptsem.edu
hti.ptsem.edu
covid-19-status.anexia.com
covid-19-status.anexia.com
*.ptsem.edu
ssl377271.cloudflaressl.com
ctmonline.ptsem.edu
btli.ptsem.edu
ssl377272.cloudflaressl.com
bookofacts.ptsem.edu
fieldguide.ptsem.edu
ssl377272.cloudflaressl.com
covid-19-status.anexia.com
*.ptsem.edu
xpts.ptsem.edu
thethread.ptsem.edu
ssl377270.cloudflaressl.com
learning.ptsem.edu
covid-19-status.anexia.com
coned.ptsem.edu

Certificate

The complete raw certificate details for slavery.ptsem.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0/TEp+HDMCz3ruAgB+R
0ygXyAyO+Ll83/C5SMW3tFpDP358kyWxEpOzfetJgV8Ealq4PS9Ayhy7lMKMAnJc
RW97nv27zMcyut13Xb3qNCaVM/LCcyIZCCTJoszX0DAuML0rvj7k+b/E9LIeP5hg
Kub6xtWZIzPgTN4DGXI+g8qCfE2QiOdkJJqP984aWrOWeSHJT1xFz6AljFgjbLB2
SqBylU50kTCQGlddexBvPs6waXOMTvcEAh6GKldyj+9ez1WRhIib88saY441SvN7
pPGc2Nn8kkip3TB+1p/9lH87+9f47DBdUsSdnnEeOSIprTy1Zn278ZxMOqG/NSeN
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283074305879095472953477805954700617256112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 19:33:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 19:33:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'slavery.ptsem.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23140972738253466893794894628643596874915950387402012076500145155926887079379977809079928410588198229931900854239573268281347488349002247164784398014810721823782524641747793362134889676808575690149000760080931996140171116531035745249049146056794125426928707745790968239795670160258084171418907662956703669388554934192952219456569892095881063589347500271885132055583639355563378573411626081511365068435959777246174356513305832526224709474130888033302567046082338970946241215375000340655553025087292680528623498663077585168450758281249399764587329682822662827394359435393107163660134198305617060041168346388466296655191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93542b26f09147036281ec211eb4c6a37f2cee29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slavery.ptsem.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168104532b9000004030047304502201b351eb2b7fcd285ae3721febeadb36d62f591e0008a7566bdce46d55619da59022100fcc5f71f5f3b8157ccbf45f86cd3779843c3a707c0a26ecc57638daf7d0aa014007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168104532b80000040300473045022100cb6734600182315fd83f7d319a5cb33e7a9240454a027e63b0fc55ad5305b46b022029df76b0469848a2b50229b668a6c0810a0c0fbe49b928593aa37b65e8aaf892
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00676e93679269fb6b350b2bb0b81b5b909816240f853d56e5f724f99c63d4ae5ecdca42f452d0e10080350ed77036edda8a53db43eefc7eeb6ffa4b3643cc09d94dce178d2bd32096976dfcf2860add62e8bd23199a3692bb598dd59a9c96a6d61305442fb1fd92416920af7b525b50e341418b797581542f66a7d73ad3ed28b2b27f6e041df1dfc6ea689ee3f792debd13c8951ec693c0ca0fba94bcc790f86cb314368aec87781de412e957cd27598cf83b2b5dc5b77e80cac04cb0a410a7a7ed72e90c96b1fb195242ce8a139985e38a23b6f034f04501c542ec9e106b74eab8685109a2f40f9e4d8b39364f56073d40c730a5b747c87e116e686d36bda89e