www.usuhs.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:26:4e:04:55:29:1b:fe:8f:55:46:1d:79:19:33:80:0e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.usuhs.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:26:4e:04:55:29:1b:fe:8f:55:46:1d:79:19:33:80:0e
Serial Number (int): 269894832719175749003025504557020092792846
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:11:cc:1b:36:5d:13:05:e5:36:9a:c8:92:d6:a6:01:e6:6e:04:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:5b:a1:23:18:5d:ad:ac:2c:75:6f:c8:29:4b:d7:e6:c1:2f:d3:b7
Fingerprint (sha256): 01:5a:a0:7b:1f:f1:41:7e:2a:2f:d6:65:61:39:cb:d1:35:90:24:1f:da:fc:ab:1b:37:43:23:11:3a:f7:da:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.usuhs.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.usuhs.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iwcp.usuhs.edu
www.usuhs.edu

Other certificates including the domain name usuhs.edu

(limited to 100 certificates)
www.usuhs.edu
usuasoexweb2.usuhs.edu
www.lrc.usuhs.edu
puppetmaster.usuhs.edu
my.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
www.usuhs.edu
portfolio.usuhs.edu
echo-ess.usuhs.edu
usuhs-vh-03.usuhs.edu
carlosdev.usuhs.edu
er.lrc.usuhs.edu
desxi28.usuhs.edu
usuhs-vdi-03.usuhs.edu
scholar.usuhs.edu
drupal-centers.usuhs.edu
stage-fac-dev.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
mneat.usuhs.edu
usuhs-vdi-01.usuhs.edu
lmsdev.usuhs.edu
desxi32.usuhs.edu
stage-sakai.usuhs.edu
news.usuhs.edu
www.usuhs.edu
eduapp1.usuhs.edu
usuimpact.usuhs.edu
usuasodevweb.usuhs.edu
stage-fac-dev.usuhs.edu
stage-redcap.usuhs.edu
ususecureauth2.usuhs.edu
caslocator.usuhs.edu
usu-awx.usuhs.edu
slides.usuhs.edu
canvas.usuhs.edu
eduapp2.usuhs.edu
usu-conn-srv-02.usuhs.edu
desxi29.usuhs.edu
usuexweb2.usuhs.edu
usuasostage.usuhs.edu
lrc2.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
cas.usuhs.edu
slides.usuhs.edu
usuhs-voip-02n.usuhs.edu
content.usuhs.edu
cfapps.usuhs.edu
kcoeus.usuhs.edu
usuasoweb.usuhs.edu
servicenow.usuhs.edu
panopto.usuhs.edu
dental.usuhs.edu
im.usuhs.edu
lb.usuhs.edu
doc.lrc.usuhs.edu
usuexweb1.usuhs.edu
usuasoexweb2.usuhs.edu
usuasostage.usuhs.edu
certificates.usuhs.edu
usuasoexweb2.usuhs.edu
pathslide1.usuhs.edu
*.lrc29.usuhs.edu
usuexweb1.usuhs.edu
usuasodevweb.usuhs.edu
eduapp2.usuhs.edu
usuhs-voip-04a.usuhs.edu
www.usuhs.edu
erdev.lrc.usuhs.edu
cac.cas.usuhs.edu
ususolarwinds.usuhs.edu
mta-sts.usuhs.edu
usuhs-biz.usuhs.edu
usuasoexweb2.usuhs.edu
CER-MC-CPC1-SUB.USUHS.EDU
iwcp.usuhs.edu
*.lrc28.usuhs.edu
usuexweb1.usuhs.edu
cf2.usuhs.edu
usuaperio1.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
epicc.usuhs.edu
my.usuhs.edu
redcap.usuhs.edu
epicc.usuhs.edu
www.lrc.usuhs.edu
usuasoexweb1.usuhs.edu
usuhs-vh-01.usuhs.edu
stage-sakai.usuhs.edu
usuexweb2.usuhs.edu
maintenance.lrc.usuhs.edu
er.lrc.usuhs.edu
www.usuhs.edu
apps.usuhs.edu
content.usuhs.edu
usuehshpserver.usuhs.edu
stage-drupal-centers.usuhs.edu
foreman.usuhs.edu
lrc-web.usuhs.edu
ncdmph.usuhs.edu
RCS28.lrc.usuhs.edu

Certificate

The complete raw certificate details for www.usuhs.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269894832719175749003025504557020092792846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 16:08:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 16:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.usuhs.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833658028015319085036153030637171467583977443330954698125231504069558564787962447773927335994068477266372496803215954619059140759142315171907140131645894312956503472273824767890918972560489886739586756874037746887445087098073531280923686350923186658605540871521473229451671912151497519352434575242989946096436986424523983075331189989923966359279983724850040629761595802111939399371897917564264936607345156838607257626542739030265866706660780956861376936815148448591296734621087253608217214835016951023882311944161285840900858999520538444824784430447412278428377067326157136587815240148307486836363446949311113840685900778936899399300884211425744113043514603846377036324957294007920624258953258491276863019779114836029801880513132936860969475383953518585611056252539436709066613764629529277342309232288212411779352293770840981443916558385243436310041811874302762480772833671000955616952653819507224429168849481559802163210555064771274963893385222680122458827518028578142081135852544366710591844393904688424958843239493482973709981286730975072082269317189335942503887729741365032574818884181061831478692987261747216203938537266471180760396287504531118360329943789015751772513687307408978465607575426516638524545944924161351526676430011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a511cc1b365d1305e5369ac892d6a601e66e043a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwcp.usuhs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usuhs.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168d8614cd80000040300473045022100d6ab9ac3cc082212dd1e6d95f751278a285056ef2a2dc724a43c78b6f8fcd1f50220236695cb627fe070dce10f5b8b47753b0be190856c062429a77ae1d1b073972700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168d8614b0a0000040300483046022100bdea73d1a3932d954a8cb0fb47542c34a9e8550f7faa035aa28f7fc94c53c3ea022100a44cf7a781ec67525e3e5540fc3c5a4f5ffcae002818dcea693fc80ffa7a5beb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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