dayofgiving.purdue.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:35:e0:af:ed:d0:e6:6f:fb:47:37:3a:2c:fb:b4:57:90 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dayofgiving.purdue.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:35:e0:af:ed:d0:e6:6f:fb:47:37:3a:2c:fb:b4:57:90
Serial Number (int): 317214781696850966909240094066521408821136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:fd:31:ed:38:81:1f:e1:25:3e:b5:dd:de:e2:d6:d3:43:8a:c9:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:6d:9b:22:e2:ab:98:7e:81:f6:ae:62:ab:cc:29:0d:48:7b:c3:ef
Fingerprint (sha256): 02:94:d2:2a:00:e0:59:f0:79:c2:32:02:ae:e3:eb:46:5f:0d:c6:bf:69:8f:1a:a3:6c:94:24:57:1b:fd:09:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate dayofgiving.purdue.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dayofgiving.purdue.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dayofgiving.purdue.edu

Other certificates including the domain name purdue.edu

(limited to 100 certificates)
dev.boilerpress.itap.purdue.edu
srv-fna.student-orgs.purdue.edu
frodo.lib.purdue.edu
dayofgiving.purdue.edu
icds28.cs.purdue.edu
buddy-boy1.ecn.purdue.edu
dev.www.purdue.edu
wqvwebasp02-05.www.purdue.edu
roger.ecn.purdue.edu
pc.cs.purdue.edu
webvpn.purdue.edu
itap-netedge-asa5555x-01.tcom.purdue.edu
givingisgorges.org
dev2.hort.purdue.edu
dev.wp.www.purdue.edu
freedom.cs.purdue.edu
wdvwebasp03-01.www.purdue.edu
cmsdev.pha.purdue.edu
www.math.purdue.edu
npdn-dev.ceris.purdue.edu
dns-vetting1l.map.fastly.net
amarillo.nserl.purdue.edu
author.www.purdue.edu
npdn-dev.ceris.purdue.edu
www.purdue.edu
bionum.cs.purdue.edu
webdav.bio.purdue.edu
5684961520648192-fe4.pantheonsite.io
wqvwebcfm02a.www.purdue.edu
sp-dev.itap.purdue.edu
one.purdue.edu
wqvwebasp03b.www.purdue.edu
5757715179634688-fe2.pantheonsite.io
dns-vetting1l.map.fastly.net
cluster2.technolutions.net
dev.www.purdue.edu
owl.english.purdue.edu
one.purdue.edu
aribaqa.itap.purdue.edu
blackmesa.cerias.purdue.edu
dayofgiving.purdue.edu
5684961520648192-fe4.pantheonsite.io
www.ag.purdue.edu
wdvwebpec02.www.purdue.edu
www.bio.purdue.edu
cancerresearch.purdue.edu
5767874312404992-fe2.pantheonsite.io
dev.boilerpress.itap.purdue.edu
givingisgorges.org
www.eaps.purdue.edu
wpvwebdls01-01.www.purdue.edu
lacuna.cla.purdue.edu
www.purdue.edu
www-old.pharmacy.purdue.edu
wdvwebinf03.www.purdue.edu
redirect.www.purdue.edu
dev.boilerpress.itap.purdue.edu
napis.ceris.purdue.edu
polytechnic.purdue.edu
wpvpfrmft01.itap.purdue.edu
Collegiatelink4.Campuslabs.com
dns-vetting1l.map.fastly.net
phishing.itap.purdue.edu
5684961520648192-fe4.pantheonsite.io
cancerresearch.purdue.edu
erp-reporting-sbx.itap.purdue.edu
deleuze.cla.purdue.edu
5750683647082496-fe3.pantheonsite.io
incapsula.com
assets.lib.purdue.edu
www-new.foodsci.purdue.edu
www-new.foodsci.purdue.edu
jafcidev.chem.purdue.edu
weldon.ecn.purdue.edu
wpvwebasp03-01.www.purdue.edu
cancerresearch.purdue.edu
saraswat.rcac.purdue.edu
bmew.ecn.purdue.edu
n002.offcampuspartners.com
www.cs.purdue.edu
n002.offcampuspartners.com
dev.wiki.itap.purdue.edu
*.math.purdue.edu
collections.lib.purdue.edu
sharepoint.purdue.edu
incapsula.com
givingisgorges.org
bejih.com
cos-7apollo.boilerad.purdue.edu
dev.wp.www.purdue.edu
exchange.purdue.edu
dat2-100-asa5506-01.tcom.purdue.edu
offcampushousing.fau.edu
givingisgorges.org
givingisgorges.org
dev.sharepoint.purdue.edu
www.itap.purdue.edu
webapps.krannert.purdue.edu
dns-vetting1l.map.fastly.net
wpvwebasp03b.www.purdue.edu

Certificate

The complete raw certificate details for dayofgiving.purdue.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxx46jmxz9QBtZ5J2dic+
hr9vDSi7RDqnWnJI16UyMmPpwqUWcn+3kGoDxtFNI1bDfHn4M3j8SOUvAAWu1vQd
FdR/90fGnVrtFP1g1jv/8Z4Fc7mXskRJ72w+erzkPyDqF8+IdmUJpkSi/2I9B2LQ
UupZcl0arUQNywsD6mBE1ZntyGYWf937t81091AyNoo7J1pd98/L2/wjQc0fbvax
b98RpgJLd2AQ0nEdfUfHY+n4XHxBswAiryB4YfGZUr5BTIh0Cb5ul86AcUFtXiZi
mi4HnngcBjWCmigqnj2qi568dPWasGhGp/eJRzIg5mTqrjSVMh/ssWxwsRTllXpe
pN7LsomTmL+Wm7xA6Ygoo/8SRtLXCwtvvQegU2PnLZ7mb3ClVBOT4fziKsjY71sc
BF7w1fi+mnfnusH5XGh4yyId3bq5eX1pU2siudNprX2QCUynGggaEA1IO+A5wMwe
6IcsHuYDQ2Xov8WzkWOEwTYSy+tXuNVBBYGa7+ePY0oQEHJYhx8D2HoHvYG+IE7m
LaN0vRyFa3osvo3kSPDLIGKzd8PdK4blowoF7miGM7btw0bf3EcvMuaS4RP1TtIr
LGyOQQTRMM53g57LIWPlUfmIraX/mkssI8rLW51PSABTLl4auVpp1fJIe+Ku84Yf
TOQaIDWhLZ1kc9bs5QPCh0cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317214781696850966909240094066521408821136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-06 13:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 13:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dayofgiving.purdue.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812330897982617081549536179586146821251086652800620489774058114103942678975981680542774734730595046715347826271463445308195905573983233960319746440785964846303146128238560260902017966574648126018792049625073314557814223931687966049581993199755234971078159459443114073791977087996494926369468197123700284876685528410305468052100576415587951368203884822508185978188127019201881073904591776877350599669773627512342663320136292467162090354334836721733415723217333146250816776753069122731514916549115127110453324415826877242752902257071792516392924666340193297904141349935077984264093487229748517064285716889630936450776949479110913048119785509795134074138938475679400846021990579625654222390989696175791174099477005412818354720640611043844695877908333566311771032133248020851772772251825232482855960167879979473045475150629976753193061577856162309762996534852817890270651717594768698809267034050085488841891162819030830999250573677227388983992624153483871832947720980990373179619120469274812883861066103473293837761526728617841219614091274934514833705915852925961849700235895619453348344680859446004866052296883991431295374816927771373178820152073579693211349736844841819574929952254930270131740873001031634963043789921753920595017500487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ffd31ed38811fe1253eb5dddee2d6d3438ac9ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.purdue.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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