open.oregonstate.education

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:86:b3:0d:c6:62:fd:49:ae:d5:34:c8:37:f9:03:05:a5 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=open.oregonstate.education

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:86:b3:0d:c6:62:fd:49:ae:d5:34:c8:37:f9:03:05:a5
Serial Number (int): 333315483467560748954207116296054930343333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:65:9d:32:9c:c1:be:9e:67:a6:96:15:1c:73:65:53:99:1a:dc:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:c0:7b:0c:33:75:53:32:9e:a4:e2:58:60:09:ad:63:25:cc:15:0d
Fingerprint (sha256): 02:9b:21:7b:95:f7:fc:55:e2:3a:55:df:e7:38:2f:1d:b8:98:c3:61:dd:7c:ad:4d:17:01:cf:97:2b:e2:e1:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate open.oregonstate.education

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for open.oregonstate.education

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.open.oregonstate.edu
library2.open.oregonstate.edu
open.oregonstate.education
openoregonstate.pressbooks.pub

Other certificates including the domain name oregonstate.education

(limited to 100 certificates)
open.oregonstate.education
open.oregonstate.education
open.oregonstate.education
openoregonstate.pressbooks.pub
*.oregonstate.education
mrkt485.oregonstate.education
oregonstate.education
oregonstate.education
open.oregonstate.education
oregonstate.education
*.oregonstate.education
open.oregonstate.education
openoregonstate.pressbooks.pub
open.oregonstate.education
*.oregonstate.education
oregonstate.education
oregonstate.education
*.oregonstate.education
oregonstate.education

Certificate

The complete raw certificate details for open.oregonstate.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333315483467560748954207116296054930343333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 03:31:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 03:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'open.oregonstate.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745331797826157896560618030024720788232364926347386446796621516112135302741760331378861412346827904153773952576260768568710330467035042263873121484820344488636521097146431033875990023977457290795107349700905196951009075179823353339954347399124780966589624174616072000387507930268829848472909051382731864626215475861435497664849587743564135817420060317406307481518019692488092993358946587563900082334493849711474736916230814316989924583541308938074001984069845678952392656997603405016886894324429872965089500962229499283859057945665077799214269940943914998003424779517364821886476867926734506135779889752485388459546976598458337610423833746580261984206291334714832315705480533841982871932446738305198344817569128312151069492810450901385420755374996857787379498201414001822693784087532940574086052211842245899345288642879510643427091954555587130510073858937871324057656418429731668085401305174486472431278663549177950200699391668869446854862241440964585301421791150448718702775164209118477405148488064146197922457885324793518223209551186216979547608146570712019530417604877241275659126555345067345065221663398110895554942988197622085380637493200409373216503485232371679054599391110231375785248024731933245692090123008120810087005502113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7659d329cc1be9e67a696151c736553991adcc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.open.oregonstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library2.open.oregonstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.oregonstate.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openoregonstate.pressbooks.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170c7dcf40e000004030046304402207d3beec73fd8bff7c45d2d50743c67373f15fd64259ace960d3001014a4c21980220046b945234b20fc9b716481a5a42770d6940d399e957880373314a76c17a208c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c7dcf4090000040300473045022010c954db9203247bee6fb0b407886845065829e7c58dd13c6f0efbbb13c1c361022100bc6feb92e076423dcc39743b73d01ae221cd54c08c8ece5b1e7954ea0f3eb587
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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