materialsresearch.wsu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:01:4a:f6:86:9d:25:ac:98:69:65:ed:24:09:65:f2:1b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=materialsresearch.wsu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:01:4a:f6:86:9d:25:ac:98:69:65:ed:24:09:65:f2:1b
Serial Number (int): 299790483715448073771428601546672888476187
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:f7:76:13:8e:d0:a8:ff:05:30:33:41:28:3b:83:72:8b:4b:5b:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:a5:e9:b2:77:87:fc:25:c5:0d:6c:37:75:56:e8:17:c9:95:58:77
Fingerprint (sha256): 02:35:47:e8:64:b1:5e:20:5c:23:67:59:24:f3:5e:1d:14:9c:4e:69:cf:7c:43:88:ae:9b:33:92:8e:11:86:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate materialsresearch.wsu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for materialsresearch.wsu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

materialsresearch.wsu.edu
www.materialsresearch.wsu.edu

Other certificates including the domain name wsu.edu

(limited to 100 certificates)
is-apc.it.wsu.edu
wiki.cahnrs.wsu.edu
fndistribution.french.wsu.edu
convocation.wsu.edu
bfwm-itb.net.wsu.edu
m.wsu.edu
hires.french.wsu.edu
people.wsu.edu
up.vetmed.wsu.edu
asis-tcp1.ad.wsu.edu
journey.vancouver.wsu.edu
dev-authenticate.cahnrs.wsu.edu
dahlia.wsu.edu
foundation.wsu.edu
boeing.online.wsu.edu
network.status.it.cahnrs.wsu.edu
archive.wsu.edu
gua.foundation.wsu.edu
bses.wsu.edu
nursing.wsu.edu
directory.business.wsu.edu
its.wsu.edu
dev-personnel.cahnrs.wsu.edu
globalhealth.wsu.edu
legacy-wsunix.it.wsu.edu
stage.oeo.wsu.edu
boeing.online.wsu.edu
farmfinder.cahnrs.wsu.edu
redcap.spokane.wsu.edu
markets.cahnrs.wsu.edu
sbs.wsu.edu
fsus-6.freshservice.com
mountvernon.wsu.edu
stage.ansci.wsu.edu
san-30-s12.tlsprovisioning.exacttarget.com
purchasing.em.wsu.edu
cbn.wsu.edu
db.status.it.cahnrs.wsu.edu
seedingrate.cahnrs.wsu.edu
start.earlyoutreach.wsu.edu
it.cahnrs.wsu.edu
eucaps.wsu.edu
connect.murrow.wsu.edu
sts.wsu.edu
cstst.wsu.edu
go.onlinegrads.wsu.edu
gradschool.wsu.edu
legacy.voiland.wsu.edu
futurecoug.wsu.edu
tricities.wsu.edu
cahnrsdirectory.cahnrs.wsu.edu
privacy.cahnrs.wsu.edu
stage.cashier.wsu.edu
amploadvance.com
foundation.wsu.edu
expressway2.wsu.edu
akindi.tricities.wsu.edu
stagejira.esg.wsu.edu
learn.wsu.edu
wp.wsu.edu
askdruniverse.wsu.edu
webserv.wsu.edu
president.wsu.edu
*.em.wsu.edu
pan2.it.wsu.edu
dev-lmsrecertstatereport.cahnrs.wsu.edu
asis-tcp1.ad.wsu.edu
safety.wsu.edu
materialsresearch.wsu.edu
cvm.wp.wsu.edu
scalefundercert.net
csprf92pr.wsu.edu
canvas.wsu.edu
guestwireless.housing.wsu.edu
stage.summer.wsu.edu
drought.wsu.edu
dtc.wsu.edu
openjournals.wsu.edu
f50304-legacy-wsunix.it.wsu.edu
yoo.chem.wsu.edu
seedingrate.cahnrs.wsu.edu
zuniarchives.libraries.wsu.edu
ciser.wsu.edu
api.it.wsu.edu
www.chebe.wsu.edu
van-share.vancouver.wsu.edu
smallfarms.wsu.edu
mail.vetmed.wsu.edu
tier1vpnlab.it.wsu.edu
universityevents.wsu.edu
nezperce.libraries.wsu.edu
innovators.wsu.edu
campaign.wsu.edu
blacklisted.energy.wsu.edu
www.biofilms.wsu.edu
zuni.libraries.wsu.edu
archive.wsu.edu
computerquotes.it.cahnrs.wsu.edu
it.cahnrs.wsu.edu
git.tricity.wsu.edu

Certificate

The complete raw certificate details for materialsresearch.wsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299790483715448073771428601546672888476187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 14:04:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 14:04:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'materialsresearch.wsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786603206300007892024645489987297549452635601592989318069262002123249343334299691981673323059794558437867962545069454577092058075129125668511736819099424056099073224401535024847018857577296692035343124049840086596701795287279397402741881094997266617969528989299570861666694543310557666049102200841080521305967988549959381033808449637417735085522506643693917929734155117505027887194268213418115324230310012417039356214606138685552788495720842466774640598744282938847138933494652405758439920275493040851808789332291458738693176235386283307293852902518916766275439699510928784302975721539007642816516323649395753710900857895372722019496367655112064809107100049203175747089749524906644762134822536187182433857278275986407330779351406106172049876409223720549844097296633275862621059032704206002865994558198066286660087639171033114812960745554663280125759225519349956809102419842404478786082875258959472942221198924343833538859266382633365432156999252897617682897943137903181768610860171730788350361230240032188724652251025382476844671775024963382736753540139295343900822030028015252800722614593731555397143957315581834184905727036270774742716326984562303850719283407398383513204758865272052369182127476999527861312333162329279175668419547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6f776138ed0a8ff05303341283b83728b4b5bea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materialsresearch.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialsresearch.wsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d071adef300000403004730450220556d135e36c93cf4777743ab303d7fb01309fcf25603f254d293207354eed2c9022100f6781d5e33608ca316949fb1d16f2ee30e82980de2f04923f7c73d6d8a52cc8e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d071ae0da00000403004630440220199f9296a73f051e6d6ac1574ebc843d2d9024b308ed2ee73c5904d78db669c30220016162d9c0603208a5a58207e2f3ddd2d77ec93132bb2825f0a64e06782cac77
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085ea63d9c2cc3f1c05681c4c4dd655ed5f61bb184b24047205855cefc545ef8b2002189a98afa53a26fd219372cd41a289d7cb9631b0d80af273a5e9ba52eb9212867910871a7b3087bbe7697ba669ec01110be1ac9fd88ac3f9ade431187d6f36e1a2f4cfb95539eaf8ec3922fc1a9ca5911f689a99f9ecb36a1046b77f9295bb1c51a9548ef227796d636673cc9448e436817867ec7f682ef44aebafe0ff54a97f17179b41d47f79f0ee4574547a733365a8c0e8f65c72d7f71842aca17a40e70c316cd7ae66367cf40df1aa3f051ebd4e644949c8dbc9a9d778ea5607d3ee502276f3dcf5aac4f8cd24f40e81697fbed4bfdd8cabb616b5899dbe9d120b28