www.bellmuseum.umn.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:41:72:94:4b:35:1b:ab:37:3a:2c:8d:01:72:6e:ba:d9:1e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bellmuseum.umn.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:72:94:4b:35:1b:ab:37:3a:2c:8d:01:72:6e:ba:d9:1e
Serial Number (int): 370719799553744906245129904056276407212318
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:33:05:0c:e7:48:d4:17:9a:a7:30:8b:79:b8:a1:a2:7a:2c:f3:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:1b:d0:36:d7:02:06:4c:11:e3:0b:1c:72:55:1a:0c:0e:49:b0:91
Fingerprint (sha256): 00:d8:e7:94:0c:35:5b:78:77:22:ff:43:12:b0:a4:46:38:d3:48:f0:b5:f3:f3:c2:4c:23:42:d9:dc:cb:08:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bellmuseum.umn.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bellmuseum.umn.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bellmuseum.umn.edu

Other certificates including the domain name umn.edu

(limited to 100 certificates)
sni.cloudflaressl.com
sni.cloudflaressl.com
axiumssl-prod.ahc.umn.edu
ggg.umn.edu
rhrc.umn.edu
scholarship.law.umn.edu
stg-webfilesdev.ad.umn.edu
sni.cloudflaressl.com
p.acm.umn.edu
futureservicesinstitute.umn.edu
www.ncfpd.umn.edu
ceed.umn.edu
sni.cloudflaressl.com
www-test.hhh.umn.edu
ur.umn.edu
sni.cloudflaressl.com
www.finpack.umn.edu
test.statefair.umn.edu
bema.dash.umn.edu
research.cs.umn.edu
fmp.cla.umn.edu
sni.cloudflaressl.com
*.psepbizplan.umn.edu
msa.umn.edu
sni.cloudflaressl.com
www.claoit.umn.edu
nutnet.umn.edu
givingday.umn.edu
sni.cloudflaressl.com
incapsula.com
lawandinequality.org
sni.cloudflaressl.com
umartauth.umn.edu
umconnect-v9-test.oit.umn.edu
1819subfield.dash.umn.edu
itg-dev.oit.umn.edu
dairyknow.umn.edu
oreapps.d.umn.edu
sni.cloudflaressl.com
sl2-dev.d.umn.edu
cla-comm-copy-lw.d.umn.edu
sni.cloudflaressl.com
www.bellmuseum.umn.edu
provost.umn.edu
sni.cloudflaressl.com
controller.umn.edu
www.psych.umn.edu
usvcs-pvve022l.uservices.umn.edu
sni.cloudflaressl.com
umnd801.umn.edu
www.plantinfo.umn.edu
ds.umn.edu
fmresident-database.umn.edu
*.charfac.umn.edu
5659822271758336-fe3.pantheonsite.io
www.ahcs.umn.edu
camp.dash.umn.edu
clagency.umn.edu
requests.cseit.umn.edu
cpheo2.sph.umn.edu
p.acm.umn.edu
prodtest.extension.umn.edu
cf-test1.crk.umn.edu
printing.umn.edu
viviendasite.mbc.dash.umn.edu
cascw.umn.edu
sichl.dash.umn.edu
pias02-r.uservices.umn.edu
drivenvolunteers.umn.edu
madyun.dash.umn.edu
umnstandard.umn.edu
ecrt.oit.umn.edu
acm.umn.edu
sni.cloudflaressl.com
ici-risp-dev-api-01.oit.umn.edu
rt.msi.umn.edu
sunfish.biostat.umn.edu
pilot.cap.oit.umn.edu
emis-hub.ahc.umn.edu
aux400.auxs.umn.edu
sni.cloudflaressl.com
cpheo1.sph.umn.edu
sni.cloudflaressl.com
mnlink.org
drupalmigrate.umn.edu
incapsula.com
ihrca.dash.umn.edu
*.elevator.umn.edu
sni.cloudflaressl.com
*.law.umn.edu
www.msi.umn.edu
ahcauth.ahc.umn.edu
research-innovation.umn.edu
grouper.umn.edu
chan-lab.umn.edu
www.ofyp.umn.edu
www.afrotc.umn.edu
careers.cvm.umn.edu
lcms.ahc.umn.edu
sni.cloudflaressl.com

Certificate

The complete raw certificate details for www.bellmuseum.umn.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370719799553744906245129904056276407212318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 22:07:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:07:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bellmuseum.umn.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732479403998861230065605538136306154472400982433781733503872298195083261756338079106262950488752029331393529004791693354579519036322417373562160949201775871931791958036969012471909624113339225759258515347250274352269951324959287112350340463592894871351780606974691021666184029213829344953016305580353687158829778602342769797678322098699585584950158181445091800524367379666562249614154742045119854198311770735299527110620672478263955494491122048784752809408643556482936954169508665201473129098747078547793325755535941926728884171593296878290934196783606304307149635396666907107635052258383526807144826807123531417943296109794130726104061895773123056203734000287815658611062452580772344454069661979677588909956711648335639392535330073399255607545262100146777551833180577006096845423628763392005314768255071888987874054682553203233868021963766542889056296700843220170330887508507615706680020548571827022749387388629228730572075709784733556640234112942642331308810530550099044908181568833348049570247300250576752691090688761820834328801763477544949299400661267235801900836497475196860720832284682106017886817993984247325047452484433700815725016288026910862540021935241013101353616668181156823181361581599443911584355633413566749232292161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da33050ce748d4179aa7308b79b8a1a27a2cf358
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellmuseum.umn.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf961c382000004030047304502206d42dce2caaee743a8f4af1d72bbe16bdfa2c5fee1ee5b8607ecb6b75ddd4e8f022100d39b500422d164f78fe524568941471fa1501c6e56556ab55fe957aaf587da4c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cf961c38300000403004630440220040f769b56576f2b0df9b2b2dab94ec9cf7419fe662c8144b7667260baa27cd002205ab893a016a9127ef3ed06b872f1c7a18f8a98738f0d8ef222971b8bfff2416d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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