dmat.msu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:4c:76:97:ca:aa:df:01:8c:bd:65:f7:61:e0:dd:2c:80 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dmat.msu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:4c:76:97:ca:aa:df:01:8c:bd:65:f7:61:e0:dd:2c:80
Serial Number (int): 263480189094216152465382393260691299314816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:70:ff:ee:85:8a:cf:2e:57:93:2c:0e:cc:ca:f7:8c:f0:ba:f7:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:ca:79:c1:88:cd:b0:e5:ec:69:f3:cf:40:25:f6:44:c6:1d:3b:ab
Fingerprint (sha256): 01:37:5e:fa:ef:af:a7:7c:17:97:20:97:a0:d3:52:92:02:67:1f:77:76:af:7b:e4:96:c3:ed:bf:32:21:2b:a0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dmat.msu.edu

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmat.msu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brainatlas.msu.edu
dmat.msu.edu
gamedesign.msu.edu
www.brainatlas.msu.edu
www.dmat.msu.edu
www.gamedesign.msu.edu

Other certificates including the domain name msu.edu

(limited to 100 certificates)
paw.itservices.msu.edu
shiny.stt.msu.edu
vdi.msu.edu
intranet.nscl.msu.edu
tls.automattic.com
www.licensing.msu.edu
cosmetic.msu.edu
5651276360581120-fe3.pantheonsite.io
dinglab.natsci.msu.edu
addrarch.ais.msu.edu
imperva.com
ooialt.qual.ebsp.msu.edu
dev.labeldat.vudat.msu.edu
www2.pa.msu.edu
mystuinfodirectdeposit.msu.edu
neurology.msu.edu
cj.msu.edu
eamcweb3.usfs.msu.edu
sw.msu.edu
tls.automattic.com
it.uahs.arizona.edu
civilrights.msu.edu
mystuinfo.test.itservices.msu.edu
soviethistory.msu.edu
5651276360581120-fe3.pantheonsite.io
unifier.msu.edu
share.rhs.msu.edu
imperva.com
www.h-net.msu.edu
web.cal.msu.edu
mistt.msu.edu
africanactivist.msu.edu
crm.test.itservices.msu.edu
www.collegelifeel.msu.edu
panorama0.itservices.msu.edu
edassist.hr.msu.edu
nartc.fcm.arizona.edu
nowlin.qual.psm.msu.edu
research.chm.msu.edu
rice-alt.test.ebsp.msu.edu
vdi-b-cs1.campusad.msu.edu
exchange.pa.msu.edu
imperva.com
dev.undergrad.msu.edu
animalhealth.msu.edu
5651276360581120-fe3.pantheonsite.io
5746985747349504-fe1.pantheonsite.io
wwdev2l.math.msu.edu
dmat.msu.edu
imperva.com
www.effs.msu.edu
incapsula.com
incapsula.com
plantbiology.natsci.msu.edu
uconnectlabs.com
dmat.msu.edu
5639955095224320-fe3.pantheonsite.io
reporting.anr.msu.edu
incapsula.com
news.jrn.msu.edu
systempassword.test.itservices.msu.edu
web.natsci.msu.edu
lms.advancement.msu.edu
ww2.math.msu.edu
mcfscholars.msu.edu
5658638538506240-fe4.pantheonsite.io
vita.msu.edu
mail.campusad.msu.edu
imperva.com
vegetable.ent.msu.edu
web5.cal.msu.edu
rdgateway.ipf.msu.edu
burgueno.egr.msu.edu
vp.research.msu.edu
glg.msu.edu
oauth2.qual.itservices.msu.edu
asset.itservicedesk.test.itservices.msu.edu
actsciclub.natsci.msu.edu
wwl6.math.msu.edu
cstat.research.msu.edu
search.msu.edu
bps.broad.msu.edu
rose.canr.msu.edu
imanage.itservices.msu.edu
wwl2.math.msu.edu
sgp.msu.edu
scholendow2.dev.ais.msu.edu
chems.msu.edu
rio.msu.edu
help.anr.msu.edu
jira.test.itservices.msu.edu
varietytrials.msu.edu
msu-water.msu.edu
epri-trac.egr.msu.edu
5651276360581120-fe3.pantheonsite.io
confrooms.pa.msu.edu
marcom.cal.msu.edu
oemi.msu.edu
netprint.msu.edu
5651276360581120-fe3.pantheonsite.io

Certificate

The complete raw certificate details for dmat.msu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86p7LKVNQme7OSbwmgTy
slLyLlVKianRoaINoXMUCHgCmt8TmqPW++gEA0Z2/MHa9t7xfDYZd7PZY1VjhPZT
q4YF8KE7MkwLz22cJYr/qGxgiTuXnb8XryoRR3+KTC9Jmo2CW5SVzBGWSQw+Eg6I
80hryB1MuH62B8G6U0khffqLoqPYSj07vrKwyVwXoV+ZMWvMdQXnDL6sqouX2wQ0
Lg+BXvx/OQ+DTjkF2dVTO9MrdU11BkVj8ZOftL5pVh/H8vuwvy7GX+REgtah9YeP
Dd00A56rHsYsT/C/AgmSTT44L7ipstu6mHAwBlQ6zcpnZsN4fTSyqR6xhibsFgk2
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263480189094216152465382393260691299314816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 08:16:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 08:16:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmat.msu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30759975495046524650484446860181088831082447529773554712701179739030757814077434700896140852025424792360548884931079121787324355336150072067303507056380411878110773773029695490120377962148191349361793354395663330307622155104531961560746960524984752609142713070249029838047841474033626589615684656755059455527319285159205716743208575915837448919051980439185514651882533238132234828279034996132099896279266428232521074318985676912230292334281683885423339916260110035774818255904797667965533701484074879143042166815264415099065028206302667679628676538202590775257660882467116944129741103840940390846812660558068628141581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f070ffee858acf2e57932c0ecccaf78cf0baf7e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainatlas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmat.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamedesign.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainatlas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmat.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamedesign.msu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001686a8bde3a0000040300463044022059a510f934696c1adeb05f599aa3016fc007f9e6912159dc3d2e533d30c5440f02207eade7ef5758cf40c671e25d475d34cf4f5ff2f6203de65f514e302050456fa6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001686a8bde430000040300473045022100e7695675ba754d502079dd949b880ca193bb73cfba93b66dc3e25fb21bcdd01e02202a70f3fc8aa50d673b4be58420e1b266a1cf67a199a48e5cbf28c3191e6f6cb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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