niamrre.cvm.iastate.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:1e:c3:25:79:e1:7f:60:5c:95:ce:0d:08:fd:ef:72:e2 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=niamrre.cvm.iastate.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:1e:c3:25:79:e1:7f:60:5c:95:ce:0d:08:fd:ef:72:e2
Serial Number (int): 421650742712909269113877577889745145393890
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:30:ad:0d:10:66:d4:34:2e:2b:53:a5:ad:34:8d:97:c1:8a:3c:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:df:ab:f3:0b:bb:1c:24:9e:31:d1:5d:f0:a8:5f:f2:34:4d:df:3e
Fingerprint (sha256): 01:17:6c:99:52:4a:37:62:30:46:96:62:ad:1d:51:f1:db:54:8f:70:66:d6:da:d3:17:80:c9:22:02:d4:29:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate niamrre.cvm.iastate.edu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niamrre.cvm.iastate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nationalamrinstitute.org
niamrre.cvm.iastate.edu
niamrre.org
www.nationalamrinstitute.org
www.niamrre.org

Other certificates including the domain name iastate.edu

(limited to 100 certificates)
boa.cs.iastate.edu
kuali-das01d.its.iastate.edu
croptesting.iastate.edu
photostream.iastate.edu
www.stugov.iastate.edu
vdpammsg.vdl.iastate.edu
codinfo.design.iastate.edu
*.ece.iastate.edu
www.biology.iastate.edu
itsdb002.its.iastate.edu
cypoint.iastate.edu
etg.ece.iastate.edu
www.cpnpestmaps.ent.iastate.edu
ampp.intrans.iastate.edu
ceah.iastate.edu
accessplus.iastate.edu
navy.iastate.edu
lasonline.iastate.edu
dietetics.iastate.edu
ecsel.ece.iastate.edu
www.physastro.iastate.edu
vwh-man-db02a.its.iastate.edu
*.mse.iastate.edu
niamrre.cvm.iastate.edu
*.sws.iastate.edu
www.wallacechair.iastate.edu
www.sadow.chem.iastate.edu
nristatereview.cssm.iastate.edu
webfront01.engineering.iastate.edu
sws.honors.iastate.edu
portal.iastate.edu
abe.iastate.edu
web-courses-vm1.jlmc.iastate.edu
www.schnablelab.plantgenomics.iastate.edu
cchange.research.iastate.edu
dev-02.exnet.iastate.edu
www.agstudyabroad.iastate.edu
vpn.foundation.iastate.edu
my.foundation.iastate.edu
honors.las.iastate.edu
*.openshift.its.iastate.edu
web.ent.iastate.edu
isaachdev.cvm.iastate.edu
vollbrechtlab.gdcb.iastate.edu
cystart.its.iastate.edu
zoo.ent.iastate.edu
scalefunder.net
ieop-db.ieop.iastate.edu
www.roundtable.ag.iastate.edu
lib.dr.iastate.edu
www.biorenew.iastate.edu
berzerk.cssm.iastate.edu
www.iahees.iastate.edu
www.ilas2017.math.iastate.edu
*.grad-college.iastate.edu
yearbook.lib.iastate.edu
www.psi.iastate.edu
www.design.iastate.edu
classclimate0.its.iastate.edu
language.iastate.edu
www.it.iastate.edu
bbdev0.its.iastate.edu
vwh-stu-db01d.its.iastate.edu
www.sustainability.cals.iastate.edu
request.hs.iastate.edu
streaming.stat.iastate.edu
www.plantgenomics.iastate.edu
www.awpc.cattcenter.iastate.edu
forensicstats.org
secure.design.iastate.edu
owa.eng.iastate.edu
sws.gsb.iastate.edu
ppacman.bb.iastate.edu
universitycounsel.iastate.edu
canvasext.its.iastate.edu
www.digitalaccess.iastate.edu
loi.ece.iastate.edu
microscopy.biotech.iastate.edu
masters.agron.iastate.edu
www.ppem.iastate.edu
campusclimate.iastate.edu
datateam.agron.iastate.edu
www.digitalaccess.iastate.edu
mesonet-dep.agron.iastate.edu
www.center.iastate.edu
dso.iastate.edu
pslp-2.imse.iastate.edu
tableauapp1d.its.iastate.edu
sdmay23-40e.ece.iastate.edu
www.psi.iastate.edu
www.econ.iastate.edu
lync2013pool.its.iastate.edu
arch.iastate.edu
uachievewb.its.iastate.edu
nlp.engl.iastate.edu
www.sites.iastate.edu
quicksearch.lib.iastate.edu
iowastate.a2hosted.com
www.adrc.iastate.edu
ctlt.iastate.edu

Certificate

The complete raw certificate details for niamrre.cvm.iastate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUu3BeV1qibObiqySBOY
4Q9afv80V3k+LXyoVlBTFDbdlRVrDC2Axq+Pbp/pV8oYnN+FXwjFsLE6bFBJzBra
ELgk01LjXHTBeAzhDSoKj2BFG2yj6uEGjZ1j0S+RrJm7gY0g5tWornAdDWKq8rqo
AY1jiKPlTymOOKdyzeqRQVZwwZF6SRXWHW9Op/TFxKh/tPAWMHGfCOGS5Nj6SgdQ
0Hcsws5fZcKwdy5nQd1J6MCkwkQ45++ddo//FR2sVoolW9lNJkua227rZqaAKBVm
JIUKm5m4ye8E4TMRhWZZNoYscmI4r5/DnTg1c69DhOqC0IOrGDwNVWspCGaPrFIB
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421650742712909269113877577889745145393890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 17:47:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 17:47:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niamrre.cvm.iastate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21371609964629266089408987071764421690427801856300081669283257399661133793463579404259304771603604417424406690164255116509440692994099310473025474372400460706782470905443503893765529720071206148708808110908270055646879718561728309558963466574764492709560014057053797205392816101719892748238173872233888297075357565727289226096931783161091456726579181463167729562772610878905232440061137946826770116377619332442671114718163394859895025682685412294126635782467343378856387234018181452681469769764272834278295287935738799314360927039029401055606579795610133208339552328385417943676696250539154606684523136634361973178663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc30ad0d1066d4342e2b53a5ad348d97c18a3ca9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalamrinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niamrre.cvm.iastate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niamrre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalamrinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niamrre.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db33ecc0100000403004730450220523e295945856f5071389c05e3dfe932523e335eda99d1fd54075b7faf3510e4022100a33f6023fd4f80e417798bb7a194013aed5e4d2727df8d55d063e6080eba67dc007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018db33ecdff0000040300483046022100f5a3b74263e11fd021b93b8a351530d4450521487bb6a9c26d67555317e46512022100d71ccd7275f15c02a21bb198968e1f79bc52f9d5ab00a122241d1f9171bef8ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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