cms.cci.drexel.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:41:65:61:33:f3:c4:48:82:76:ea:65:81:b5:59:51:a3:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cms.cci.drexel.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:65:61:33:f3:c4:48:82:76:ea:65:81:b5:59:51:a3:2f
Serial Number (int): 283589968379227374444320970127551816114991
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:c2:c5:d4:27:36:2a:36:b5:7c:0b:b1:ac:6b:67:b2:78:ef:4d:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:5a:eb:09:0d:75:24:35:9c:33:8f:03:74:3f:34:86:e4:32:bf:c6
Fingerprint (sha256): 02:fd:7c:34:73:ee:d3:07:dc:bd:4a:bf:31:c7:bd:f7:ed:f2:bf:4a:d5:35:ec:77:18:c3:aa:4c:b3:3e:88:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cms.cci.drexel.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.cci.drexel.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.cci.drexel.edu

Other certificates including the domain name drexel.edu

(limited to 100 certificates)
aw-svl-web02.westphal.drexel.edu
libcal.library.drexel.edu
cs550.cci.drexel.edu
www.materials.drexel.edu
ozark.coe.drexel.edu
cti-kpwgen020.irt.drexel.edu
remote.westphal.drexel.edu
icereport.drexel.edu
content.soe.drexel.edu
scgold-t1-pub2.irttest.drexel.edu
icinga1.library.drexel.edu
dsview.irt.drexel.edu
fragilehedgehog.bioscience.drexel.edu
admissions.drexel.edu
image.partnerapp1.myworld.com
researchdiscovery.drexel.edu
dragonspot.drexel.edu
cluster2.technolutions.net
webcampus.med.drexel.edu
wireless.ece.drexel.edu
participation.irt.drexel.edu
bioimage.coe.drexel.edu
viz.drexel.edu
n1-15-148.dhcp.drexel.edu
*.moss.drexel.edu
cms.cci.drexel.edu
lcb-hvcs4.lebow.drexel.edu
termmasterschedule.irttest.drexel.edu
participation.irt.drexel.edu
banner2nolijbutton.irttest.drexel.edu
webapi.irt.drexel.edu
cs.drexel.edu
nextcatalog.drexel.edu
Collegiatelink4.Campuslabs.com
grand.irttest.drexel.edu
bannerssoxe.irttest.drexel.edu
irttest.drexel.edu
employer.steinbright.drexel.edu
vonreynlab.biomed.drexel.edu
gitlab.cci.drexel.edu
duphy4.drexel.edu
fmweb1.coe.drexel.edu
snipe.soe.drexel.edu
cti-xtwscc009.irttest.drexel.edu
discuss.coe.drexel.edu
du-coeus.irt.drexel.edu
web.offcampuspartners.com
icereport.drexel.edu
id.cci.drexel.edu
www.lebow.drexel.edu
*.mossdev.drexel.edu
learn9.irttest.drexel.edu
istapps.ischool.drexel.edu
epm.drexel.edu
test.irt.drexel.edu
discover.drexel.edu
esmupdate1.irt.drexel.edu
www.lebow.drexel.edu
events.drexel.edu
pan1-mgmt-kor.noc.drexel.edu
pan02-mgmt-urb.noc.drexel.edu
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
n001.offcampuspartners.com
cloud.cci.drexel.edu
www.math.drexel.edu
exchangeweb.drexel.edu
help.math.drexel.edu
duapp1.irttest.drexel.edu
bulldog.irt.drexel.edu
lambda.cs.drexel.edu
image.partnerapp1.myworld.com
illtest.library.drexel.edu
tls.automattic.com
info.soe.drexel.edu
pod-hill.coe.drexel.edu
scgold-pub2.irt.drexel.edu
kplascg01.irt.drexel.edu
cluster2.technolutions.net
glide.soe.drexel.edu
charmatz.westphal.drexel.edu
dragoncard-dc.irt.drexel.edu
pve2.cci.drexel.edu
learn.dcollege.net
dragonfly.drexel.edu
coot.irttest.drexel.edu
nulab1.physics.drexel.edu
orclpwr.drexel.edu
cti-xpwscc017.irt.drexel.edu
docss.irttest.drexel.edu
westphal.drexel.edu
cti-ztwweb001.irttest.drexel.edu
cluster2.technolutions.net
discovery.irttest.drexel.edu
neumann-learn.irttest.drexel.edu
intranet.cci.drexel.edu
www.cs.drexel.edu
intranet.lebow.drexel.edu
jcf.irt.drexel.edu
esm1-t.irttest.drexel.edu

Certificate

The complete raw certificate details for cms.cci.drexel.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qyPw86lOiOCVaTuliom
WHEHL0kONed8cfBIVplAD1l+71ZyEURnX2TVTUvrv0/epWy78nL9EJm17Yk47YLC
22l1p0cmK406SHK3zckHWKac6gOLWl1dujeTv5Def230htN4sMTBIxgMTnZR/fMj
sIPqwwrsJvKmt98GloNQZu1qKLC9TFxh4+SOwjZCALj+8cRPaHk5iJ4YcQbonVnf
jTC8kXYWRGPnq3fr8v48oRwX+SS9NQAWTc+GZ2vA5wt1psiIpyKiyG5L665LiUvz
kCGSddXsBpj6bWj00bIqXzgX0sUUhvrZM7mhDzMkkP5Tr5XYg3aJxByQrYKbSK64
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283589968379227374444320970127551816114991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 10:38:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 10:38:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.cci.drexel.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31139716308973555370374242051230620869776948214782970023968895680134589771715028039152788658662903741255822193984039268274633206416774539897766837579130127384314973241876639128441973893031446915984492404952243644471425954226741425745779143267507616715397606809196159769537005219022081469644184264062336263463913796472815514544606231387099777474699743220714907499172546336619152891002116569298182382346525919066528649612605062456552146740856667042260342606898091840608253300225049474529880956472976627213854973891743740246352836540521941982903919090603699114139722182807126202522288279235269984579361042729686224779517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fac2c5d427362a36b57c0bb1ac6b67b278ef4db0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cci.drexel.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b858766ed00000403004630440220329e9b6f9eedaf534d3535e7cf9c6e8aadb5f8d9d7337221d291ef771ac42f000220655dc5853bfa42fc26202656a3ae23ecbb5d7dabf6aa3c0ff503ec25cfb845c6007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b858766f50000040300483046022100ed36d8fabf217a54a349eb6fa21f58d5fcccc983ba1b0f75c96a85f2a9e60f22022100a610237b73cf9784ffeb0cba740b6f8d4d54db8f494f50beae86dd6c769a5b2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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