sacredplaces.nd.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:26:05:9f:83:be:7a:ed:f1:d7:2c:33:93:e5:b7:ee:c7:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sacredplaces.nd.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:05:9f:83:be:7a:ed:f1:d7:2c:33:93:e5:b7:ee:c7:1f
Serial Number (int): 274275062125542886953193448818993397679903
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:55:fa:2b:5b:50:b3:19:40:4e:7d:68:16:e0:b0:40:98:a3:a1:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:ae:be:06:0f:2b:b4:5d:63:42:30:e9:8c:4c:58:fd:90:69:01:84
Fingerprint (sha256): 05:54:0a:fc:ef:3a:e2:6d:ae:ff:18:d3:38:fa:cf:f5:ed:ab:a4:3b:5b:96:ea:01:cf:e7:dd:b4:ea:5e:25:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sacredplaces.nd.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sacredplaces.nd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sacredplaces.nd.edu

Other certificates including the domain name nd.edu

(limited to 100 certificates)
becomingirish.nd.edu
*.library.nd.edu
*.law.nd.edu
*.givegab.com
vpnaccess.nd.edu
ndi-sa.nd.edu
cluster.technolutions.net
enrollment.nd.edu
kellogg.nd.edu
internationalalumni.nd.edu
ndwg-tweak.nd.edu
least.nd.edu
secure.alumni.nd.edu
dns-vetting1l.map.fastly.net
www.swd.nd.edu
login-test.cc.nd.edu
osullivangroup.nd.edu
tls.automattic.com
www.trio.nd.edu
*.ideacenter.nd.edu
*.givegab.com
*.mendoza.nd.edu
myndpilot.nd.edu
*.givegab.com
sandbox-sakai.nd.edu
enrollment.nd.edu
amploadvance.com
parseghianfund.nd.edu
dns-vetting1l.map.fastly.net
cluster2.technolutions.net
myapps.nd.edu
*.library.nd.edu
churchlife.nd.edu
reunion.nd.edu
lwex.law.nd.edu
momlink.crc.nd.edu
www.trio.nd.edu
litchoir.nd.edu
obforms-prod.cc.nd.edu
cluster.technolutions.net
*.cstaging.nd.edu
lib13.cc.nd.edu
dns-vetting1l.map.fastly.net
cluster.technolutions.net
hue.nd.edu
tesserae-social.crc.nd.edu
cluster.technolutions.net
redmine.crc.nd.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
tesserae-social.crc.nd.edu
util-gis2-test.oit.nd.edu
secure-usea1-1.tessituranetwork.com
www.grc.nd.edu
offcampushousing.fau.edu
windy.crc.nd.edu
dns-vetting1l.map.fastly.net
m.nd.edu
ndt.crc.nd.edu
password.nd.edu
securessl-est2.tessituranetworkhost.com
becomingirish.nd.edu
sacredplaces.nd.edu
datascience-info.nd.edu
*.studio-nexus.nd.edu
steds.nd.edu
gradebook.nd.edu
n002.offcampuspartners.com
uc-cx2-p.voip.nd.edu
go.mendoza.nd.edu
securessl-est2.tessituranetworkhost.com
inside.nd.edu
issalink.nd.edu
securessl-est2.tessituranetworkhost.com
www.morrisinn.nd.edu
securessl-est2.tessituranetworkhost.com
i2u2-dev.crc.nd.edu
www.roos.nd.edu
cluster.technolutions.net
offcampushousing.fau.edu
amploadvance.com
m.nd.edu
cluster2.technolutions.net
morrisinn.nd.edu
*.givegab.com
www3.nd.edu
performingarts.nd.edu
churchlife.nd.edu
offcampushousing.fau.edu
amploadvance.com
*.proxy.library.nd.edu
remix.nd.edu
sunapsis1-test.cc.nd.edu
www.osullivangroup.nd.edu
*.library.nd.edu
akamai-san122.exacttarget.com
*.nd.edu
primeradiant05.crc.nd.edu
socialconcerns-apply.nd.edu
mtc.crc.nd.edu

Certificate

The complete raw certificate details for sacredplaces.nd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp17+Df53DRCV/7tMVydD
geRG9MEzsLpAuDzuN3JdCTJhnKfOVHydiWs+78VU26ZzLx7RK5FWZZxrH3P1dB/W
FAESR4HzJ7UhobC4TrK9VuQOXg+Yd/BQt2ouOG4rz1NN/fyUhyndU6P3rEdBFwFM
+kTwLLgKqjM7DAJmZtWj4k/Bn2mQimAN28FkTJFVhAFfMBc0eTb3C8htD7ElwM0Q
jYgpsr9JsnpMk2HrTJiUdGKAVbVapHcKoZk6uqgClrtormi4l6/3ptIfXElUIANH
SjVN+pfMQqTezPrKXJ+jLKMxoMH1JQ5LDfscP0uVzY2EwWMqGuCbFu6ggxqYFdLK
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274275062125542886953193448818993397679903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 18:29:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 18:29:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sacredplaces.nd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21128639428124288933188569734700040058228842775836689397874184350576333682875254192169647013196143675678698376647754412439708652724924090729784499954804321401385838171373459915241157272815664048770202172679188864766817916796988169424469718512485577463976453778011170554848406502677756303134103150886036152129596862610115002049947954887530122589993836442298147004509685218931486252028471845878614423286854600560698703886789119891602312355518545800289081758888573329113069331046678990654656964220157498267989742062477904776325801173676220761367206923203013255640334842763092141526506128740838298133127425142584232823467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5155fa2b5b50b319404e7d6816e0b04098a3a155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredplaces.nd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6bf8d2a60000040300473045022100b51b5c0632e1a5fd57cdaa318d27871c3c29ede359754133eb80c6e6009feaf202203020a21b94ce259eeaa9cd8c31d5739c07e16797fcbeff0f1b807f515f202ba0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a6bf8d2a70000040300473045022100ff04593ba4a5a747517894204aff8cbc77e4caa8200b4a83282e919ec3d122f40220084ec8fad4a26e939c469a9ecad6cbc46444a1c069a8badd9f803d6306f6d136
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ccaa0b324884077de6657dafa9a26d45987a129d29779967836827871ed82035060a90dcb227c2def2901d18757feffc09c9eed0c1579b0480535e2e48192b364557819b5c27bbe1c663b5ea67b8c856acd7406b8d66667e470f63bc55eb2f87294ce527671b0f62fdcc633d0ac2a0ef30ccb49c9d0038a9d93e6f545c4271811246899f73192059531351ff93896d92d48d3c25bab4c877c3db7406b3f317984d61cbca6900109cb5a45751032dda13829e8f2b8b4d31a4d6cf6db11b3c2bc5cdc4ffeec9d5a77a7fceab52ca843d4b8d890ff6f8d63667713cbc1c407bf43de77babdd4d46d41569838fe618161732f7fdff190072e49fbaf358105cc353f