psm-ns-bda.colostate.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:b7:72:23:15:73:b9:b7:fa:e6:a0:3a:6e:34:ab:7c:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=psm-ns-bda.colostate.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:b7:72:23:15:73:b9:b7:fa:e6:a0:3a:6e:34:ab:7c:a9
Serial Number (int): 347331855616011688144568618796377761873065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:f3:f9:46:d8:d8:18:c6:52:32:86:c9:96:c9:2f:68:d0:25:c4:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:d3:11:7c:b0:10:9c:85:b3:f5:eb:3e:95:86:12:63:af:ab:43:7b
Fingerprint (sha256): 05:5c:f5:86:d7:2a:ad:d2:2a:de:df:9a:dd:56:26:85:9a:75:7c:ad:fc:3c:0d:1e:14:c7:71:be:9d:93:6e:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate psm-ns-bda.colostate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psm-ns-bda.colostate.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psm-ns-bda.colostate.edu

Other certificates including the domain name colostate.edu

(limited to 100 certificates)
webcms3.colostate.edu
dsawptest4.colostate.edu
webcms3.colostate.edu
customviewbook.colostate.edu
high-speed-video.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
cluster.technolutions.net
cnee.colostate.edu
www.csurecdashboard.colostate.edu
coloradoencyclopedia.org
connect.colostate.edu
cnee.colostate.edu
csal.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
apps.cnhp.colostate.edu
tmi.colostate.edu
cloudsat.atmos.colostate.edu
taurus.cnr.colostate.edu
www.todossantos.colostate.edu
nibbler.math.colostate.edu
biz.source.colostate.edu
aresprod19.colostate.edu
secspc.netsec.colostate.edu
advancing.colostate.edu
lawncheck.colostate.edu
police.colostate.edu
securedns1.planmygift.org
securedns1.planmygift.org
northernipm.colostate.edu
it.colostate.edu
cr-laserfiche.acns.colostate.edu
lsccms.colostate.edu
www.diversity.colostate.edu
webcom.colostate.edu
wptest.agsci.colostate.edu
cluster2.technolutions.net
speedtest.colostate.edu
wsnet.colostate.edu
bushewett.BUSINESS.COLOSTATE.EDU
warnercms.colostate.edu
mail.business.colostate.edu
secspc.netsec.colostate.edu
buselab2016gw01.busdom.colostate.edu
www.webcms2.colostate.edu
chunglab.colostate.edu
lsc.colostate.edu
vprwebdev.research.colostate.edu
atmos.colostate.edu
directaccess.chhs.colostate.edu
fsus-23.freshservice.com
filehold.research.colostate.edu
railbender.nrel.colostate.edu
gradadmissions.colostate.edu
fsus-24a.freshservice.com
san-7-s11.tlsprovisioning.exacttarget.com
teams.cvmbs.colostate.edu
coloradoencyclopedia.org
cluster.technolutions.net
vetmedbiosci.colostate.edu
ocl.colostate.edu
webcom.colostate.edu
sccoldfusion.cvmbs.colostate.edu
ramcamps.colostate.edu
commitment.colostate.edu
cluster.technolutions.net
tls.automattic.com
onishlab.colostate.edu
securedns1.planmygift.org
cluster.technolutions.net
*.agsci.colostate.edu
illiad.library.colostate.edu
ob1-p1.advance.colostate.edu
pgrcourse.colostate.edu
coursedev.math.colostate.edu
warnercms.colostate.edu
baacc.colostate.edu
atrc.colostate.edu
www.admissions.colostate.edu
engagement.colostate.edu
www.ascsu.colostate.edu
www.cmb.colostate.edu
agsci.colostate.edu
help.canvas.colostate.edu
apps.natsci.colostate.edu
dsawptest5.colostate.edu
drought-net.colostate.edu
www.admissions.colostate.edu
otp.colostate.edu
san-7-s11.tlsprovisioning.exacttarget.com
agsci.colostate.edu
psm-ns-bda.colostate.edu
helpdesk.appareluae.com
ramcareertools.colostate.edu
studentcasemanagement.colostate.edu
dvmhousing.cvmbs.colostate.edu
southcampus2.cvmbs.colostate.edu
singlesites.dev.colostate.edu
intro.online.colostate.edu
monroe.cnhp2k.colostate.edu
warnercms.colostate.edu

Certificate

The complete raw certificate details for psm-ns-bda.colostate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347331855616011688144568618796377761873065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 17:03:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 17:03:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psm-ns-bda.colostate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898072767994965066285332876273966963472244213002006190997911078890276844714894084028190643675649839974534447942032808999270883448774494941685774923820247392350123866635043623582558512453184161524092977177523129687470600547611892741019781624747066270323808236657400590621810233892631097426260499010961786501021971083131916162231601674388059952751859323133463575975244093276912452681467153263986993787094388947579437165568640728346673019982973436413083644290034328382078115131298633241874278838547645558292956415190841245127375982210110380179824392100228897616036627415509383915712598750897623883042880381696277833599840365475725070136141512497020603293573614617994402255939736122012412874140204824038056737898089402208766655715035895299138063869098577186165010153791773748214983095997413968615153048251435463283108338188753522943187536446630411151183883247145642024918933336064210072945780039913171090322831968787022257671446918113294973395623671079377086702149102129027878983228232476140544114151784020576300618843764254408003054412114841793479354872628585329335997954168502839568458277955242485479892848429012504048295128310512296554141280011749320535067947265174668160123666893446217644317290600085735895985989672934310785904156879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76f3f946d8d818c6523286c996c92f68d025c457
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psm-ns-bda.colostate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001670e3dafad000004030047304502210084af3aee4f30f1def219ebdf4dec2d5c6d3176c2f69fc785ca96e04444f387a002201dd938601cc3294d66b225a06bbe5da1d9ad43d37b76d42ed0561a30c5cc66bd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001670e3db0210000040300473045022003c3132c661822c06c9aef3143b8b4577c49c5879dbede746b20b83cf155e7e0022100f22f480c3def0da87d77062dc05bde62a97feb281daa0f22535902191affb9d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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