discover.sopa.tulane.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:1b:ed:5c:db:44:2e:c5:7a:76:78:00:26:8d:d4:79:49 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=discover.sopa.tulane.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:1b:ed:5c:db:44:2e:c5:7a:76:78:00:26:8d:d4:79:49
Serial Number (int): 341680618002217635450342829529073385240905
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:1b:11:ed:37:53:a1:ce:b5:c1:57:35:cf:32:e9:35:2e:d0:2d:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:48:be:f7:8e:7b:e9:69:65:26:2b:76:4c:35:12:bf:13:fa:33:b1
Fingerprint (sha256): 04:d8:d8:e0:ca:f6:7a:10:30:ef:a4:cb:5f:51:1f:eb:f2:12:b2:c7:58:ff:30:ca:a9:7c:ee:78:22:cd:f4:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate discover.sopa.tulane.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for discover.sopa.tulane.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

discover.sopa.tulane.edu
www.discover.sopa.tulane.edu

Other certificates including the domain name tulane.edu

(limited to 100 certificates)
www.stmaryelyria.org
sfunder1cert.net
wfmo.tulane.edu
bannerinfo.tulane.edu
visix.tulane.edu
libguides.law.tulane.edu
tulane.edu
sspr.tulane.edu
ems.law.tulane.edu
listserv.tulane.edu
sni31194.cloudflaressl.com
stjameswashington.org
www.stmaryelyria.org
matas-lib.tulane.edu
bbreports.tulane.edu
securedns.planmygift.org
applysopa.tulane.edu
taylor.tulane.edu
cluster2.technolutions.net
tuoms2p02.tcs.tulane.edu
degrees.tulane.edu
apply.tulane.edu
adfs.tulane.edu
sni31194.cloudflaressl.com
stjameswashington.org
socialwork.tulane.edu
stjameswashington.org
liberalarts.tulane.edu
entapps.test.tulane.edu
plannedgiving.zaytuna.edu
pcfmindandbody.tulane.edu
library.tulane.edu
stjameswashington.org
sni31194.cloudflaressl.com
securedns.planmygift.org
polyrmc.tulane.edu
sopahmls.tulane.edu
plannedgiving.zaytuna.edu
sni31194.cloudflaressl.com
n002.offcampuspartners.com
tulaneurbanbuild.com
ars.test.tulane.edu
5629499534213120-fe1.pantheonsite.io
sopahw.tulane.edu
discover.sopa.tulane.edu
clue.tcs.tulane.edu
wfds.tulane.edu
requestinfo.publichealth.tulane.edu
n002.offcampuspartners.com
5629499534213120-fe1.pantheonsite.io
biloxi.tulane.edu
stem.summer.tulane.edu
stjameswashington.org
primate-prod.tulane.edu
www.stmaryelyria.org
amploadvance.com
r6phtc.sph.tulane.edu
cluster2.technolutions.net
info.law.tulane.edu
digitaldesign.tulane.edu
*.tulane.edu
emsapi.tulane.edu
sopaundergrad.tulane.edu
www.stmaryelyria.org
apply.tulane.edu
cmvss.tulane.edu
stjameswashington.org
nextcatalog.tulane.edu
securedns.planmygift.org
sopa.tulane.edu
stjameswashington.org
tuebsdb1d01.tcs.tulane.edu
tls.automattic.com
cluster2.technolutions.net
giving.tulane.edu
tugms1p09.tcs.tulane.edu
api.tulane.edu
sni31194.cloudflaressl.com
securedns.planmygift.org
5629499534213120-fe1.pantheonsite.io
5629499534213120-fe1.pantheonsite.io
sni31194.cloudflaressl.com
cluster3.technolutions.net
sfunder1cert.net
publichealth.tulane.edu
apply.tulane.edu
tubanda1t01.tcs.tulane.edu
www.stmaryelyria.org
vce7.tulane.edu
idp.tulane.edu
cps.tulane.edu
sphfieldstudy.tulane.edu
tubxeadm1t01.tcs.tulane.edu
culinarymedicine.tulane.edu
tudwapp1t01.tcs.tulane.edu
libguides.law.tulane.edu
vpn.tulane.edu
freemanalumni.tulane.edu
securedns.planmygift.org
info.tssw.tulane.edu

Certificate

The complete raw certificate details for discover.sopa.tulane.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WZ/RH+gdIcM5J0YJNt4
2C6LKdAkDPQCSL0BKiB0yRp6wFmaJqTDELEb0fhcR9+TEnU06M65GrGNwCqzKR2w
h9EsZ6EvingKUSqQlumR9xOvUW4gmdB/KRUSG27UxEVyKBc28iuvQHZveQoTu8Va
vjWQKOWdlClkvRV6lUPI0Vc0oPQxoPriP9rkYN0jN9FV191nFXKcsuMNPshfijgA
gyMyXqqiySxZuAIfooHMRf5dzLutmXmGAqL4wtCcO3Z1dR4qwWi1uk+W9V/fbtb0
5g7A2ieqRvMuVKU8z7zsoAtpvYlGvlPKHqh/XzhoPJslmywKIpY1sB2f36nzYP3w
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341680618002217635450342829529073385240905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 17:49:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 17:49:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'discover.sopa.tulane.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28454161840353522679540029873471486724386966811210871377455339013063524510039251228994797850183968591767255022733727759463324292268771315984106874103230674036646395105084182032775459245089989731341304480599856332013925458418489327887373518315112445149434459906677719518968733885844299041036173249044060439359458379226231174817287561630966711888668731103013316804732950441885486957538180406911287529450259133611594456327806287154476196554050058611401838613354742150785318582094903475894576037902022715889288407772129236417207880189064790086388277832681915844714481522717973619765628494825221045851949431639570261078031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							471b11ed3753a1ceb5c15735cf32e9352ed02dc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.sopa.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discover.sopa.tulane.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001684db281290000040300473045022100d07e537802a7605cb9dcbd902dfca6f1793bcefb87c990dbd01aa8b2906bb4b30220140a8b2ed94ce029258631debefdc15171c388b1e704f1ecffb16a4c7aa4c6fd00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001684db2817c0000040300483046022100c03052a4946ff569edd86df5505f0deb546838a8f1f4db6d3d1423c78bc14219022100b3062e814e1fe9fe73fd206b9799e454894e41ad88db4752da480a5698976db3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00499b6bf801beacb344efbd66d0c00e8f0121b85744a580b15e37e11333775724247926b423660003b4648e66dbc405716c25061304ef58cc14c58dbcd650a510f800fabbfbd32eb57cbcac953fd5c87ee1c0bcaf0cab3ede4cf902c679b4a076e7dfbdf095ac9122fd10e87a5ba2fff25b9920c549cb051c3c6097dfb16e84962e4313963512b59c0edbc95451b3f19290bedf393bc9e54be5997b07d194590c00c144a55bd58f364687f728d8273a51291b52aa168ed0250e64c3f0d0d9fa0046ec868405c1c06b2e83488277ad8ed8970524813ad1d453c893f84f0870cc23f14745c5c07285889dc070309707425b8fa621774972fd0ae3e06cb0a60f311a