lisa.luddy.indiana.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:ee:9b:b9:3c:b2:2d:45:5d:9a:3a:d8:dc:ef:64:ab:35:28 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lisa.luddy.indiana.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ee:9b:b9:3c:b2:2d:45:5d:9a:3a:d8:dc:ef:64:ab:35:28
Serial Number (int): 429643339199551031624178036157245601559848
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:c1:58:2a:32:be:6b:42:3e:96:42:f0:cb:9b:d5:70:13:f7:2e:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:97:0d:6d:aa:84:46:70:41:af:e5:ed:46:07:d0:8e:29:6d:6b:46
Fingerprint (sha256): 04:87:15:f6:85:ea:1a:12:c8:a0:dc:40:9c:71:b9:5a:a6:08:e8:19:f8:66:01:1e:72:1d:a7:48:1f:3e:23:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lisa.luddy.indiana.edu

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lisa.luddy.indiana.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.iuni.iu.edu
botometer.iuni.iu.edu
botometer.osome.iu.edu
cnets.indiana.edu
dev-lisa.luddy.indiana.edu
fakey.iuni.iu.edu
fakey.osome.iu.edu
hoaxy.iuni.iu.edu
hoaxy.osome.iu.edu
lisa.luddy.indiana.edu
oauth.truthy.indiana.edu
osome.iu.edu
osome.iuni.iu.edu
scholarometer.indiana.edu
tavern.osome.iu.edu

Other certificates including the domain name indiana.edu

(limited to 100 certificates)
floorplans.service.indiana.edu
bl-s4b-dirpool.ads.iu.edu
cid.indiana.edu
alumni.indiana.edu
patshih.sice.indiana.edu
opera.imu.indiana.edu
info.educ.indiana.edu
owa.exchange.iu.edu
iuware-test.uits.indiana.edu
sgis.indiana.edu
www.vpfaa.indiana.edu
test.fims.indiana.edu
vole.luddy.indiana.edu
storefront.document.indiana.edu
physics.indiana.edu
mfodev.music.indiana.edu
iuhssis.indiana.edu
kemprd.iuf.indiana.edu
franklin.chem.indiana.edu
list.indiana.edu
iufedocs.iuf.indiana.edu
nwb.slis.indiana.edu
www.cs.indiana.edu
mysite.sp.indiana.edu
uconnectlabs.com
rps.indiana.edu
maps.indiana.edu
sustain.iu.edu
vdi.ait.indiana.edu
www.iumj.indiana.edu
apps.indiana.edu
uconnectlabs.com
read.indiana.edu
iujur.iu.edu
unitedway.indiana.edu
munger.indiana.edu
www.informatics.indiana.edu
iubshutdown.indiana.edu
utilities-dev.registrar.indiana.edu
chemical.inventory.indiana.edu
apps3.indiana.edu
test.pe.registrar.indiana.edu
ccsrv1.psych.indiana.edu
earm.registrar.indiana.edu
fatalii.uits.indiana.edu
ucso.indiana.edu
alumni.indiana.edu
holtzlab.psych.indiana.edu
dev.citl.indiana.edu
iontrap.physics.indiana.edu
ella.ils.indiana.edu
iu-cv-xa7psf-02.uits.indiana.edu
external-relay.indiana.edu
housing.indiana.edu
college.indiana.edu
residency-test.indiana.edu
dev1.igs.indiana.edu
datainnovation.soic.indiana.edu
robotclothes.luddy.indiana.edu
projectdox.vpad.indiana.edu
uconnectlabs.com
josotl.indiana.edu
carina.indiana.edu
kb.indiana.edu
batch.iuf.indiana.edu
test.histdegr.indiana.edu
fast.oem.indiana.edu
uconnectlabs.com
grades.indiana.edu
wsa001.uits.indiana.edu
provost.indiana.edu
echo.uits.indiana.edu
snowy.luddy.indiana.edu
partnership.publichealth.indiana.edu
websurv.indiana.edu
www.document.indiana.edu
rt-spam.uits.indiana.edu
uconnectlabs.com
iumusiclive.jsom.indiana.edu
www.dailyrental.motorpool.indiana.edu
api.insite.indiana.edu
lisa.luddy.indiana.edu
www.repository.law.indiana.edu
alumni.indiana.edu
oemservices.indiana.edu
soco.sice.indiana.edu
key-qa.jsom.indiana.edu
calmweb.chem.indiana.edu
hydrogeochem.earth.indiana.edu
engagedlearning.indiana.edu
bksan2.bus.indiana.edu
monitor1.soic.indiana.edu
lmicdata.bio.indiana.edu
rosvall.lab.indiana.edu
fims.indiana.edu
wiki.dlib.indiana.edu
blog.provost.indiana.edu
dgrc-chris.bio.indiana.edu
bugs.dlib.indiana.edu
drugs.indiana.edu

Certificate

The complete raw certificate details for lisa.luddy.indiana.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hll2sWcottfKa9IVW1P
3qA/hQwR/f+S0iQpe6uwN6yOLO8rKv2lTrVgcRJKcP16auSlvcLpeMxD4e7OuNQd
q20qgEKHNq+d83ojy+a3BD8V21wNb77J1Nd0LzSjhATCVkC3rWEPXPFwFEP3MPjq
S/GRxHEdA9wXefJQcgkzSs/vGC1cS3syknEiOAcvEXMM6wnsMvH9TxcxFOpWbZC8
GDnDJ2X1pEyFhb9vySMJJPMzUwQgHnh0K9b3Dgwykyv1TT0PDjbrSU9/Eukg9JaW
eyW/gZ5S0seFBYFTTTX71K2L6vK7uCu0EHaU2sOytpvjygjBn2XsXhwVS56bnOiJ
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429643339199551031624178036157245601559848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 02:40:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 02:40:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lisa.luddy.indiana.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26522568199077137239284639425954134653260009571978050209359945519575593389923752031991045777698558450746826216084994788909497951014596755599086480061954765704261543111543385792465514427389886381411466529052232065878730180654810428511628212877590759554525840082526495193589328208534108116422655479059119493090090718004010189139347079491686264407899517653958700363553880874607541181741286463913748146534990067462733572549225220258966272802817110822476799311350397848307716906560220321282150710291791533753827450225139215849909921950410058622293356574305677221445340809203324026359410014337839594756075888690847227087151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4c1582a32be6b423e9642f0cb9bd57013f72eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.iuni.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botometer.iuni.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botometer.osome.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnets.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lisa.luddy.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakey.iuni.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakey.osome.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoaxy.iuni.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoaxy.osome.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisa.luddy.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.truthy.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osome.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osome.iuni.iu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarometer.indiana.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tavern.osome.iu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a825369500000040300483046022100c8a38678141c9a535a33fd3e3f2f0231cd279c4428463f341a753ee087b54d92022100d35c757b842702b25557a24de84688d4863b04b65c2d0693658d91ef42fcd24c007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a82536966000004030046304402205c1dd3aaba770e5421d767ce9fecb7045f5e2efb3a1b5e4eaf0fa2e7b6d64d5902202df4053b335658be608fafebd2ddc0a0e068f69a3d5ea4a48ecff80f284f27de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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