tedx.gmu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:57:04:d5:75:dd:4f:12:54:f1:b8:84:73:71:a1:9b:ff:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tedx.gmu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:04:d5:75:dd:4f:12:54:f1:b8:84:73:71:a1:9b:ff:2d
Serial Number (int): 290947848979192212863438024873623066246957
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:93:0c:f5:9a:55:55:d2:98:53:f5:92:86:aa:87:29:2a:e6:46:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:c7:ad:df:9c:b0:2a:aa:bc:dd:e1:a0:94:3a:79:0d:de:36:42:23
Fingerprint (sha256): 02:38:f6:96:ec:d4:a2:2d:a5:7a:a6:b0:e7:82:50:27:41:68:b6:d0:53:3a:c7:1b:bf:34:b2:37:83:2b:1c:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tedx.gmu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tedx.gmu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tedx.gmu.edu

Other certificates including the domain name gmu.edu

(limited to 100 certificates)
lynda.gmu.edu
www.gmu.edu
administrativestate.gmu.edu
dshi.gmu.edu
mix.gmu.edu
eaglet.gmu.edu
www2.gmu.edu
surveys.c4i.gmu.edu
us.prod.campusgroups.com
stat.gmu.edu
healthcareers.gmu.edu
malthael.mesa.gmu.edu
club.gmu.edu
mars.gmu.edu
pbk.gmu.edu
corolla.mesa.gmu.edu
www.mix.gmu.edu
chhs.gmu.edu
us.prod.campusgroups.com
tls.automattic.com
*.physics.gmu.edu
ati.gmu.edu
volgenau.gmu.edu
campusimpactforum.gmu.edu
eastgermanposters.gmu.edu
gazette.gmu.edu
provostit.gmu.edu
mats.gmu.edu
qmc.gmu.edu
irr.gmu.edu
welcome2mason.gmu.edu
ularlington.gmu.edu
gec.gmu.edu
fiscal.gmu.edu
coursemedia.gmu.edu
docushare.gmu.edu
securedns.planmygift.org
casper.gmu.edu
jacklab.chss.gmu.edu
ott.gmu.edu
fndtadv1t.mesa.gmu.edu
gazette.gmu.edu
socialcomplexity.gmu.edu
test.gmu.edu
ncbid.gmu.edu
ippp.gmu.edu
anhpham.gmu.edu
computing.gmu.edu
gradfellows.gmu.edu
adr.gmu.edu
tedx.gmu.edu
cashiersoffice.gmu.edu
ready.gmu.edu
orientation.gmu.edu
cie.gmu.edu
publicservice.gmu.edu
greenmachine.gmu.edu
mvets.law.gmu.edu
iflood.vse.gmu.edu
explore.gmu.edu
us.prod.campusgroups.com
learningsolutions.gmu.edu
engage3.campuslabs.com
smfund.gmu.edu
transportation.gmu.edu
socialmedia.gmu.edu
edge-uc2.peopleadmin.com
socialcomplexity.gmu.edu
vision.gmu.edu
patriotlife.gmu.edu
ssac.gmu.edu
randed.gmu.edu
administrativestate.gmu.edu
test.gmu.edu
eip.gmu.edu
calendar.gmu.edu
pbk.gmu.edu
dining.gmu.edu
crdc.gmu.edu
chssweb2.gmu.edu
soa.gmu.edu
securedns.planmygift.org
gstf.gmu.edu
carterschool.gmu.edu
mason.gmu.edu
favs.gmu.edu
scylla.gmu.edu
aubreygrant.gmu.edu
ulbranding.gmu.edu
campusimpactforum.gmu.edu
edge-uc2.peopleadmin.com
robinsonprofessors.gmu.edu
pb.gmu.edu
web.offcampuspartners.com
artsmanagement.gmu.edu
printservices.gmu.edu
ventures.gmu.edu
csps.gmu.edu
call2.gmu.edu
assip.cos.gmu.edu

Certificate

The complete raw certificate details for tedx.gmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAroM5iP9uDExU67Acp/10
186ocaCVnRujQWmu/HS8UWs7XaPlLpceNW3/HtgUtvwEQnESX9BTFcokTl4IBRvl
DA0g4YJTN6oUlxbhPNNhZSfPOaGU7bPO5hWEh6hRCH+DNfBE9QKv9PADs8Xj5b2s
7h5ze3lEijfougXlx+5nSGWJB4YTftp4dMO8UElvnGsM3gJ9a2t8gskWT0LcMrj3
FV4TntoOKmPqvFyGob6wCfiIhMJhAMCtMj74XQ8qU3pT7UslajZ5uV+5jZddjmOP
nXhnLFptW38DyYBDGdXW9E1waHJsyAOXWz/Wj1AvcyYRxR/Y/0aHXG/YDEnIobwH
J6O8KSFHfrd20C07rj7paPnGEBMpuIoxjdLy731PcXi58jdtv9w4poW7jDLvpUqP
XgZ9HS0h6jKF3yR80hkCJN7xqoh2NhBP8fHL6qvMBfGXF8QcT1FWaVQFudkD43Sa
usTusecanlijsbEOKAsfRcWhHi8x5XXFz+gUDJ2jiySXxRAFi1YRFNeTtys0BGsP
G+7TJ+ZMbYH0zosF0r3j8HmtHS3BFj6UvOOnha9eDdSC77LXJJdaynVfh/m/33iN
rU19NojSxZJOU1QuZ3fknZAYVoEW/hTAhJDc+5g9Ole4FyEUWMtf/gyPCcBTMSqT
LokKRwMTO+NLgFBHwUNYWN0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290947848979192212863438024873623066246957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 04:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 04:49:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tedx.gmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711949279786010675725149845420196655092346737801745703761097784979516899015395714239303260886425943747677055077893467164106432491509372770541718659708489591043003456134297519355755455959622242416957625495305809831180123313995221808487254907180101922941492365542613417831380337792523665822767103654400166009122213865892599863332831537383809147789057288833171810874369551725474168070962802722546971436670518973775143713082362728364727107511333966694955325247161495332241501141699899119314873908197090654062598498454817999790657669493882405101114603335064196454675561734611932822715757677048346948327252243669426476207574446767528615697985344124998365173282073126798896025616335632736219353314158621502480984902993853255475713991403407054466533674151292091576625144921330455380584037927246456755842559838692188834107379106854425111478789657596098852009613669106779859022338463562556900604233642994767711144931857058901641088163646403660823240595505933284462553394909339371370227329997632794435044995614270188156268531117014195491724167087850352867968794266253958907232433183994305774180981064258299921717218943195947064590950155765911672137348775992850209481362846033387642455675918519579934767800127339018280767550699096396251537103069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75930cf59a5555d29853f59286aa87292ae6466e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedx.gmu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fb7335020000004030048304602210087320f44c139e4835274ddc8a6099e63470f4b8218af59f9e3b2a3956ea769e6022100ede488c0b8cd25cc377099baf4d7229cdaddd6e4b278a4755098f0017ce1103700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb733503e0000040300483046022100b255a7e50b63cb79659ea6a4606605a8bc63789fd761610daff96655557ba3fc02210085ccec225cd679ca5dcb928213d1665fbd448a4485ea6e0ea446ab1d028fcdda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00919ef8b6252b29a621bd64cee0d881dd7db677acbbc4f96ed511ba384703a33815f933022c6fa03186a80d3f2b6a006a18434cc4990816ea3fa307b647ac06c4df565cc275efe466a38b3a323e4eb796a2c62132b8475792f1e4b1001fb7b027a369b92be71abf6aa8842c8545165c81e26482e6fbd63388dbdbc5547fa9b26032191db777f74a18f474f8b79c9f0620ba94356acfd0be3931a5489af8b61d1cfee8851aecec5c6c188f0bba8369ed9ed414067e6f8c5ec730751a54ce6203286fceb993246f369c2266c7e4eb7517bf84ee3e364fe4793b0fc1e96372c8a483e323b9e57ca937a12e9f8b029cae709d9b3a61dad6899975da1c7bf5d2a9da48