grigoryanlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:03:6a:85:64:6b:d4:7d:12:19:b4:52:d5:41:4c:79:1c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grigoryanlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:03:6a:85:64:6b:d4:7d:12:19:b4:52:d5:41:4c:79:1c
Serial Number (int): 347092555032328257488042381550727776205084
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:e1:bd:81:24:63:b7:d7:62:4c:8b:f1:64:15:1c:b2:7a:7a:d5:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:7c:4b:50:f5:e0:83:24:ad:9c:5a:35:af:24:be:00:08:7e:73:51
Fingerprint (sha256): 04:ac:f1:6a:be:51:53:72:50:f3:4b:6f:ba:e8:d4:e3:1b:13:b9:6e:89:a6:15:50:2a:09:59:52:ed:55:13:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grigoryanlab.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grigoryanlab.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arteni.cs.dartmouth.edu
grigoryanlab.cs.dartmouth.edu
grigoryanlab.org
www.grigoryanlab.org

Other certificates including the domain name grigoryanlab.org

(limited to 100 certificates)
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org
grigoryanlab.org

Certificate

The complete raw certificate details for grigoryanlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISA/wDaoVka9R9Ehm0UtVBTHkcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzAxMDQ2NTFaFw0x
OTEwMjgxMDQ2NTFaMBsxGTAXBgNVBAMTEGdyaWdvcnlhbmxhYi5vcmcwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXw50/rTvAp86cQnw8Nc7SijbUBKG
/hiiIlAmcYWlM2VrtHpGLbIf9oZnhXVONrWX7Djkt/+CsBTjyVlV4kP8lg6Z57/X
F6Ks6E9j5BQwCGELXHsBFVgHY3NqllaukBjx1nLXhdCyiRggQ+RPo++jGHQPrViA
0phdDXXUbsYsxm8kq2TbZzbzvydOOLLx+XPwqooqOTHb/LxWOY/V+cMrEH9bVb5S
OhOaXCo7gE8tE/niKtavUjhc3ASCQZbb2/4HFxgx3+dgmrW0icxWaytjm4gYMqTb
yfA/st4xzkK0UFuDsNf2jlPBKI7dd5ACplD5M+MMzuKhYU1Nr09gR5GFAgMBAAGj
ggKyMIICrjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMDhvYEkY7fXYkyL8WQVHLJ6
etV1MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8waQYDVR0RBGIwYIIXYXJ0ZW5pLmNzLmRhcnRtb3V0aC5lZHWCHWdyaWdv
cnlhbmxhYi5jcy5kYXJ0bW91dGguZWR1ghBncmlnb3J5YW5sYWIub3JnghR3d3cu
Z3JpZ29yeWFubGFiLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPuk
jyiTAZ3d8dv+AAABbEK0WB0AAAQDAEYwRAIgRTg/WIkj8sOf0tDhdGXEjxHyKyqN
TJnrLOBb8HRSJg0CIAp/y6BRwXeronhvzcgyaSaKHXChXl9cLQGCQF3AqRHCAHYA
Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFsQrRYKwAABAMARzBF
AiAE0jI0+a2gPq0SQfT6mfxvHItmvdajoC87GYeXQkVFUgIhALcNtQfENAFdHYwD
IB16gCckgxYwCOKPu9ss1C2/7KgnMA0GCSqGSIb3DQEBCwUAA4IBAQBvv51DK4YB
XW6tWrKTXIUgSX/mdlOh6iJ5L4KLoQWMo4C0ZfKQb1Ob/GSFgp6b1AVTLYXn0QOd
1+trxuf5xix6uu9w9u0gTKvtg8QaAIcJRDTk9idij/2Zp6dNC8OrJJvDrQlKglWS
rfefb9dfrvPkacygINHEhW27HyuWpYng67VB9qtA7yJSKG/o1hss1FJbciCU3AEx
E7YwFTb0GkCfqYhM1CVZ+mAUisUFygUC3gnIQf2yIkENHa6L9cWsg6N4xTjArWr6
qBkVxIi4uXPX1RaIg0Hmu7wyLS4n8a5I6/QxDFP7t/RQNnT5HbzLpV1tbJWYuFGn
feFrz58m6iEw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8OdP607wKfOnEJ8PDX
O0oo21AShv4YoiJQJnGFpTNla7R6Ri2yH/aGZ4V1Tja1l+w45Lf/grAU48lZVeJD
/JYOmee/1xeirOhPY+QUMAhhC1x7ARVYB2NzapZWrpAY8dZy14XQsokYIEPkT6Pv
oxh0D61YgNKYXQ111G7GLMZvJKtk22c2878nTjiy8flz8KqKKjkx2/y8VjmP1fnD
KxB/W1W+UjoTmlwqO4BPLRP54irWr1I4XNwEgkGW29v+BxcYMd/nYJq1tInMVmsr
Y5uIGDKk28nwP7LeMc5CtFBbg7DX9o5TwSiO3XeQAqZQ+TPjDM7ioWFNTa9PYEeR
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347092555032328257488042381550727776205084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 10:46:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 10:46:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grigoryanlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21507385937940343513923715160656552743813685099752919340562422372366366295933359632337205689297310443939330884820544349570721034542239532961199317571603818244316741018577168044392151799775058683878050060075690509069083646847952651855616151001317099816446516852334531600114217473397510478196611728604429967051438750407088140799772869385144597687227903959567941581925075648511868928221019915907802568035970398034709899098454532569570894016338010516301683535094490782661966970098282108548618090009688372160197815702260322092732966217100579280380297304493224353084978029934778631753709667651694952191383252361611498197381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0e1bd812463b7d7624c8bf164151cb27a7ad575
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteni.cs.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grigoryanlab.cs.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grigoryanlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grigoryanlab.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c42b4581d0000040300463044022045383f588923f2c39fd2d0e17465c48f11f22b2a8d4c99eb2ce05bf07452260d02200a7fcba051c177aba2786fcdc83269268a1d70a15e5f5c2d0182405dc0a911c200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c42b4582b0000040300473045022004d23234f9ada03ead1241f4fa99fc6f1c8b66bdd6a3a02f3b19879742454552022100b70db507c434015d1d8c03201d7a80272483163008e28fbbdb2cd42dbfeca827
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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