www.modarres.umd.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b1:a1:77:5d:b4:1b:54:b4:06:b7:c7:f2:1a:29:6f:cd:cd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.modarres.umd.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b1:a1:77:5d:b4:1b:54:b4:06:b7:c7:f2:1a:29:6f:cd:cd
Serial Number (int): 408893748163228252606895055931362339966413
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ec:ee:42:a3:a3:23:e7:b0:7d:8b:a3:ef:75:04:43:b7:4d:d1:2f:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:3f:95:36:e9:31:ce:77:9b:45:e0:ae:ce:7e:e2:0e:d4:68:83:6f
Fingerprint (sha256): 01:5c:95:3d:01:46:d7:5c:90:1c:be:73:c2:a5:d1:b9:48:86:8e:06:7b:e1:09:db:6d:c9:8a:17:da:be:37:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.modarres.umd.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.modarres.umd.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

modarres.umd.edu
www.modarres.umd.edu

Other certificates including the domain name umd.edu

(limited to 100 certificates)
grades.cs.umd.edu
sims.eng.it.umd.edu
sfunder1cert.net
www.see.umd.edu
www.bioscience.umd.edu
legacylamp-faculty.elb.it-prod-cots.aws.umd.edu
calce.umd.edu
test-web-lws.edu.help
kfs.umd.edu
www.recoveringdemocracyarchives.umd.edu
bsos.umd.edu
*.givegab.com
www.umdphysics.umd.edu
view.e.rhsmith.umd.edu
bfs-trans2.qa.umd.edu
oer.umd.edu
hcixdementia.umd.edu
vicarious.cs.umd.edu
user.eng.umd.edu
tin.umd.edu
www.temperamentandnarrativeslab.umd.edu
aast.umd.edu
*.rhsmith.umd.edu
me.umd.edu
universityhonors.umd.edu
lasonline.umd.edu
msmc.umd.edu
rcpsl.ece.umd.edu
ercimpaqt.umd.edu
publish.lib.umd.edu
qa.ccebh.umd.edu
akamaisan.qualtrics.com
www.aast.umd.edu
jmail.umd.edu
diversity.umd.edu
dns-vetting1j.map.fastly.net
umeg.umd.edu
nartc.fcm.arizona.edu
apphosting-tools.qa.umd.edu
*.ibbr.umd.edu
item.umd.edu
copier.umd.edu
umincentiveawards.umd.edu
infosci.umd.edu
cfar.umd.edu
5703789046661120-fe2.pantheonsite.io
dcicblog.umd.edu
balldoolinglab.umd.edu
icdldev.lib.umd.edu
experts.umd.edu
smart.bgr.umd.edu
phr-app4.umd.edu
dev.vaslavehousing.umd.edu
cgunupd1.umd.edu
ITFHR.UMD.EDU
voyager-mac.umd.edu
pm.umd.edu
*.ibbr.umd.edu
jqi-wiki.physics.umd.edu
*.proxy-ce.researchport.umd.edu
diversity.umd.edu
webmeeting-dev.umd.edu
*.givegab.com
viz.umd.edu
tls.automattic.com
sbnpsi.astro.umd.edu
evidlab.umd.edu
dev.msac.umd.edu
checkio.reslife.qa.umd.edu
www.modarres.umd.edu
openknowledge.umd.edu
dev.studentaffairs.umd.edu
sophie-test.umd.edu
*.givegab.com
5639026912526336-fe4.pantheonsite.io
wireless.umd.edu
www.tt.umd.edu
marylandrha.umd.edu
icecube.umd.edu
congo.umd.edu
maestro2-public.it-dev-cots.aws.umd.edu
tls.automattic.com
5639026912526336-fe4.pantheonsite.io
www.arhu.umd.edu
sophie-test.nflc.umd.edu
*.givegab.com
qa.studentconduct.umd.edu
oitap254v.umd.edu
dev.education.umd.edu
fastbreakers.umd.edu
gened.umd.edu
*.cbcb.umd.edu
agnr.umd.edu
eit.umd.edu
ctg-ws.umd.edu
apm1.qa.umd.edu
nxterra.ucop.edu
float.umd.edu
prosamservices.dev.umd.edu
mim-dev.umd.edu

Certificate

The complete raw certificate details for www.modarres.umd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvdkf2YhFZEaujzYQXf1v
H2eM3x/qaLvXL2FjDeHAkPS/zKFhRItog3ywbY9koEDsREtfbCUEcYY0Iz/YmH4T
NPWS9lp4YgRjb8+ZQv1FgDru+KpHJeg3RwBtvKV0fgiM+1KLTzouMCSlKuFC7Bms
YW8Z4xTerZ/lZJnvV9eCuf1QGIefK086gPbYJweLYh8yKXlO4stUxuR0ZJ5hsBmx
f590N+RZ0dXXu0N3Uop/TLN7WM8fdOYItXhObclT03J6clvfMdhbhujSaJnrYirs
LQnDOpnShgZa4QRRyGbFlAbmZ8zfReU/mRkjJPHSagBO68vU7fUFutPai1J3dvAw
m4lVu7lMNBLXN/1oYMfyzAhD4ZqYkzMG1ETu/YuE3D2FwZHL0z+19GPisCBX8aBC
KKdrr/eKR3dMFtTM4p+ivGH0ksxoEurQtmnxgcpg047qOT2BRXDLhnL+mIFnfxZV
bautNFUCAOU0cjsJN0BOglVb73NDw0HDmxn5G+mxK4XwMIYsgJtTu31hc4pWPmdC
F3CAGr/tcTNwwnuZnVET0Z2B2mF2PT4OQ5nM5RENdvvWpKvNsrl3xLwRRO2rpDLP
U1dvDlZEtMRNam5PFup9x75JxHtzpG22kdVkmh6CptK3+QDCEfBBVwgOuq34L5Ym
CUms4Fo1oD3JIRLMGhNltxcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408893748163228252606895055931362339966413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 10:36:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 10:36:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.modarres.umd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774512847307517357873454152058447922246680095141015332102915086614808894524065206789487673955219228157122785403857362794416075045220262118979518777683332558159590684252154064079780300161173263313856812804627189176173818211553296616686915961425455456982453949286203049848665147970856429015462373865133457037528958794989416749850320491174209193421916221667832659243959052652640047059772777497736922940655807421785081107181340704185031959988354672449494590340447481531673859317942992215768321391412489526624199496683370035755518552611714905302561097924493245818473694053250143915860292818606786924701681120229711353150694131275106765480391664315080368143056805954406824616048575083188571052004745989234130128745597219325253698957472701381019202236951768777399010665552838137639502316684643883649244995467443495210637871839811336317659433891257248570347463657551326380663817313795178776483461511971214440064360733959181531912980752024753642394122280575131177012262843877929293923042019273191533231694142941155643533537549170351639407303856794871782727898656056002991915852263626872736707205899176721946809768913968768194151626289579095099896629896133505948184161214172232863035676578590173181148120156059412754299743332200175817795680023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecee42a3a323e7b07d8ba3ef750443b74dd12f6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modarres.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modarres.umd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b465331a10000040300483046022100cb191514b3b3c551534fe2a2a8ee2404a27678f8c6833670b0e18301b7415073022100d234598bda0af7921ec41c9f83b2fb2521829e9db774e8eea4f961ba23208c46007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b4653319a0000040300463044022031bf2dc13cfe025470dbb720587833b6592c341ea858d16d9e166934a657dcb102204285bf64f00979a6074ca3a3df65d0fee997ade93781119630c09682800506b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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