dra.american.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:89:4b:01:9c:06:66:d2:49:d0:8a:dd:63:fb:4b:2e:9f:8a was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dra.american.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:4b:01:9c:06:66:d2:49:d0:8a:dd:63:fb:4b:2e:9f:8a
Serial Number (int): 308055242519993125498399184496930390450058
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:bf:72:8e:98:fc:45:70:16:64:5c:25:94:2f:77:81:40:e8:7d:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:48:94:70:90:91:3a:e0:4a:04:09:31:97:ee:93:57:a7:a9:37:2e
Fingerprint (sha256): 02:26:51:67:80:c9:93:3d:62:6d:0b:34:7f:db:7a:44:30:3f:c5:9c:03:41:0b:94:63:1b:12:74:e8:fe:50:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dra.american.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dra.american.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

audra.american.edu
digdc.dclibrary.org
dra.american.edu

Other certificates including the domain name american.edu

(limited to 100 certificates)
titaniumcc.american.edu
2factor.american.edu
dra.american.edu
digitalcommons.wcl.american.edu
dra.american.edu
statcrunch.american.edu
biapp-qa.american.edu
mobileapp.american.edu
landing.online.american.edu
biapp-qa.american.edu
research.american.edu
intern.blogs.american.edu
dra.american.edu
wwwredirects.american.edu
au.blogs.american.edu
domino.american.edu
jobs.american.edu
programs.online.american.edu
papercut-test.american.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
subversion.american.edu
alumni.blogs.american.edu
goed.american.edu
offcampushousing.fau.edu
recfit.blogs.american.edu
spdev-sivakumar.american.edu
onlinebusiness.american.edu
wipar.blogs.american.edu
apply.soeonline.american.edu
recruiterprodapp.american.edu
listserv.american.edu
n002.offcampuspartners.com
www.american.edu
americanmag.blogs.american.edu
auinfra.american.edu
offcampushousing.fau.edu
clockwork.american.edu
vcsandbox.american.edu
spam.american.edu
offcampushousing.fau.edu
webwork.american.edu
calendar.library.american.edu
*.american.edu
openbooks.american.edu
fsmigrateorch.american.edu
privacybasics.american.edu
online-orientation.american.edu
niwaplibrary.wcl.american.edu
aumail7.american.edu
informer.american.edu
us-east-1-san3.blackboard.com
socdeansintern.blogs.american.edu
keysystems.american.edu
informerbidev.american.edu
aumail3.american.edu
blogs.american.edu
*.ironline.american.edu
library.wcl.american.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
www.american.edu
auaccess.american.edu
desigoems.american.edu
bbts.american.edu
*.ironline.american.edu
spweb201.american.edu
vpn.american.edu
careeradvisor.blogs.american.edu
soeonline.american.edu
rctugtst19sqlag.american.edu
incircle.alumni.american.edu
ems.cas.american.edu
webnow.american.edu
cloudfront.american.edu
sccmwks.american.edu
landing.online.american.edu
mediaspace.american.edu
ufund.american.edu
n002.offcampuspartners.com
sccmwksdp1.american.edu
aumail6.american.edu
ironline.american.edu
offcampushousing.fau.edu
digitalcommons.wcl.american.edu
jamfproxy.american.edu
iisredir.american.edu
digitalcommons.wcl.american.edu
colprdapi.american.edu
*.onlinelaw.wcl.american.edu
iisredir.american.edu
2factor.american.edu
intern.blogs.american.edu
offcampushousing.fau.edu
online.american.edu
auadfs.american.edu
colprdssweb1.american.edu
offcampushousing.fau.edu
splunkprdjs.american.edu
*.ironline.american.edu

Certificate

The complete raw certificate details for dra.american.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaJVLu9OUy/RjiZ9Euxv
8bEdq1MRDNqjw0P5NVWQRAr7MkhuzR/TL5B7qiGmKAW7SWO5rj3GkGfh5RMW80Jl
1WxplACcvgoPzGq6sV0dZSSON8kFzU8YUjBBhKnN4KmZiwr/aJ+xvCgnOniCUn2d
0I3T2tEMbUbIg8gaqqtysUD3RB3yjRmBM876vlzojpM0JvjQhNOhHBPBfcBWfYuB
g5ftdLRXnN6RCUnK9E2zQLIKwsj8B0WxWYeWAVQiix3kriElYd4lgpMMqHLYxfyN
VADwrkIYTa7Cz5seTow9Kyj+zfUwYvaI9JOy1zt4H0QYFar0xv+9t4YlbC+rzdoh
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308055242519993125498399184496930390450058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 22:55:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 22:55:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dra.american.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22929182460085271299423723165657278810941204352910887382662389589696284298626576924772832530882587154296531257339676176320791800958851748346098123183679497285237052308714497167386923905735766531658696485429544747973934652066712102594493289698501990209320380904565772533757563184787992574280354507710695720441971220008898175234813416357468789974555425185193539586535176465310602632414354551972162107833790260010351484365526776826173783905143365556891449973507487806432648730768910085615051039832010873576756560258845432958289199768512807405840514709662017612830808378275644074990344002369885517083120448874109071925707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dbf728e98fc457016645c25942f778140e87d69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audra.american.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digdc.dclibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dra.american.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d19d9f0a60000040300473045022100f5d794b96fda3a162e53d5b020f3412e0ba1f491a17a33ec6b369084d3f7119702200b809bda4adf8af717d43254dc0fa36674bd116f7df4baea1f58817b80efee3600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d19d9f1320000040300473045022077bda2924a32ebc3697afc1a941332e87fcabcc4e12526b1d4bbc067162a5163022100a0e4e34b078c238a22fe682184a3b50da502565ac024222f780d9109d9c4bc92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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