patents.princeton.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:fe:5f:9f:2d:c0:20:25:b7:1d:2d:2b:b4:c9:5a:22:a2:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=patents.princeton.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fe:5f:9f:2d:c0:20:25:b7:1d:2d:2b:b4:c9:5a:22:a2:46
Serial Number (int): 435007968087689618834076353833723406492230
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:b9:15:2d:ee:64:a6:4e:1e:64:28:af:ea:f7:27:c8:23:67:49:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:87:7b:6c:bf:e7:e5:5f:35:fc:5e:96:6c:89:22:f9:eb:f3:6e:6a
Fingerprint (sha256): 00:f5:40:18:0f:7f:d9:81:77:fb:99:13:c4:95:ce:dc:ff:74:96:47:c6:66:dd:b2:6e:56:27:28:7e:7a:ee:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate patents.princeton.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for patents.princeton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

patents.princeton.edu

Other certificates including the domain name princeton.edu

(limited to 100 certificates)
libimages.princeton.edu
webspace.princeton.edu
5648269346603008-fe1.pantheonsite.io
svn.princeton.edu
msl.cs.princeton.edu
test-web-lws.edu.help
5729327995944960-fe3.pantheonsite.io
unsupervised.cs.princeton.edu
garlock.princeton.edu
filmstudies.princeton.edu
dss.cs.princeton.edu
aisob113w.princeton.edu
pemm.cdh.princeton.edu
us.prod.campusgroups.com
5739407210446848-fe1.pantheonsite.io
5701241594183680-fe4.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
securesendqa.princeton.edu
proteomics-r.princeton.edu
deepcompletion.cs.princeton.edu
5739407210446848-fe1.pantheonsite.io
cluster3.technolutions.net
6328556195938304-fe4.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
5648269346603008-fe1.pantheonsite.io
5757334940811264-fe4.pantheonsite.io
cluster3.technolutions.net
scholar.princeton.edu
5764144745676800-fe3.pantheonsite.io
5679413765079040-fe4.pantheonsite.io
interacdome.princeton.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
5664902681198592-fe4.pantheonsite.io
etc2.princeton.edu
nartc.fcm.arizona.edu
5685057352105984-fe4.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
nphoto.cs.princeton.edu
5648269346603008-fe1.pantheonsite.io
dss.cs.princeton.edu
middleagesforeducators.princeton.edu
faces.cs.princeton.edu
cgi.math.princeton.edu
5707324073181184-fe2.pantheonsite.io
eos.cs.princeton.edu
5665370564198400-fe2.pantheonsite.io
5675267779461120-fe4.pantheonsite.io
patents.princeton.edu
5761253830033408-fe3.pantheonsite.io
lizard.princeton.edu
5764144745676800-fe3.pantheonsite.io
swebapps.princeton.edu
pac.cs.princeton.edu
das101w.princeton.edu
banking-business-review.com
5729327995944960-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5747976207073280-fe2.pantheonsite.io
class1985.tigernet.princeton.edu
5750031617359872-fe4.pantheonsite.io
tigernet.princeton.edu
uaps2007.princeton.edu
faces.cs.princeton.edu
5659313586569216-fe4.pantheonsite.io
gea.princeton.edu
5645784439586816-fe4.pantheonsite.io
*.ezproxy.princeton.edu
phubqa-vip2.princeton.edu
5163657986048000-fe4.pantheonsite.io
5631639635886080-fe4.pantheonsite.io
vst.cs.princeton.edu
gradfutures.princeton.edu
citeak.multidevcom.uaf.edu
psrc.princeton.edu
ais324l.princeton.edu
www.design-engineering.princeton.edu
5699257587728384-fe4.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
smirk.cs.princeton.edu
5739407210446848-fe1.pantheonsite.io
cchri.princeton.edu
cluster3.technolutions.net
5739407210446848-fe1.pantheonsite.io
mediacentral.princeton.edu
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
tableaud.princeton.edu
obj-manip.cs.princeton.edu
lineshape.cs.princeton.edu
nyao.princeton.edu
dpd.cs.princeton.edu
deepcompletion.cs.princeton.edu
banking-business-review.com
5761253830033408-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
5724313353191424-fe4.pantheonsite.io
opr.princeton.edu
5769720821186560-fe3.pantheonsite.io

Certificate

The complete raw certificate details for patents.princeton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nYDN0a2v1+RPF17yH+C
EDVIaaSKW0fiMi/Yt4eFepLYFcTVfhg5YonkHAFvjMs37rCMfOfUfRMkC38a3hSI
p4C3spiXojTZMMWqFi/Ke5N6WEOK8LtYzd4rOtAOkI2R3vwsr5suU93286EiJfXn
Df3qXXbZEgti7ex6T+ENgbGMjjJcfqRbmL1r9k0ae0PXkWEzKjw4jF1b+pfyVeEF
8W4bm/wZIgAgff4G8FsSV/ro+5Wx4eSkPdlLJJ7+70MPL+pvfabclqPfGKv3nBVR
4fh7l5c1wCTu1/nFLG64s4bHoWfZzfSy0Wdp/BmbPzXQc4hfNQki4M6lZxrV03+m
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435007968087689618834076353833723406492230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 20:42:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 20:42:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'patents.princeton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26568238206218449440012486056983071069788037565362277448996254343198913523057040282718008273100196851153995374074431388102101997113775559596171250878761781366942445797526592950056456169214990961437779589241186694647768634963038106181140197198554313419200748109553381591365379577646075189307518639090175609071820218240759407119980155322274327036852143233673063562786446731838013567880363237367445964125880664909589275331331968856624879681806857664681584890889517093658917566082495266115449356410396547032217469930926827726405474543462095433441914021971016938659039644739095304045839009681398881843479711762485044291201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18b9152dee64a64e1e6428afeaf727c823674959
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patents.princeton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187a09e4312000004030046304402207e3de6225886ad0fb679e00c103b64383edac18e100055d2a9baadb6cf169822022046ce91d6794fa8e4f7231f71abdf28dc1e5e78708cee7d57aff45b5754c55e10007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187a09e4306000004030047304502205777e2820d199eebd6f58e39a4079f254e525e8928e5d24b6d54dc6f3fe185b7022100ee72dbe624249c2e06cbe3b15e813ba77c4cabfb5b8cd8728cc621adff5fff1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a38fbfce97c150e78eaad09a721897751c36095a50ae18273f20183d4273032e6b1dd63d753d0cf7f8c8f2f9c67a8d418f0b5cb739a283bdb22c18b9c0cf1af029a49dea2e7780076634351df18af40b8a0ebdd8f0b4e71708e95de60304e7cbcd5e2431d26c8427ab5e60b750478cfab503b8bc2fb169f60adc6274ef8e1e118d63b5fbbda230ad4f258153bb46efbad96ad8911d753e09a9aee8966a5abd51dc302dcbe7cdf30d939fa3ac2fc4c06fb5a0983189b764693d0ed3985ee45371858412d52783d61531b1daa55d5457818a815c3c29bdaa869d5faa7a449ccdacd8c13fb4d4e25b9f30433ceb3935687b631bd74080545fbe1ab5b3473707af0