archivesspace.ben.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:8a:f6:df:57:1e:11:37:0d:17:37:23:78:aa:9f:6c:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=archivesspace.ben.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:8a:f6:df:57:1e:11:37:0d:17:37:23:78:aa:9f:6c:f1
Serial Number (int): 317668163635560601484454565397464958856433
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:0a:fe:93:f7:cd:d7:13:e1:71:5e:cc:61:65:6c:33:4d:34:b8:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:bc:64:e0:9e:5f:fc:9b:4f:70:97:b0:25:82:58:c6:0a:cf:5b:29
Fingerprint (sha256): 07:ad:5c:7e:2a:9b:11:ae:dd:c8:35:5f:47:b9:d7:8f:fb:4d:db:0e:b5:10:b2:20:50:fb:05:27:7f:51:14:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate archivesspace.ben.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for archivesspace.ben.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archives.ben.edu
archivesspace.ben.edu

Other certificates including the domain name ben.edu

(limited to 100 certificates)
*.libweb.ben.edu
benueagles.com
benueagles.com
benueagles.com
myfin.ben.edu
servicedesk.massageenvy.com
benueagles.com
live-web-bdt.edu.help
adfs.ben.edu
servicedesk.massageenvy.com
benueagles.com
*.libweb.ben.edu
archivesspace.ben.edu
benueagles.com
secure.ben.edu
servicedesk.massageenvy.com
webvpn.ben.edu
benueagles.com
landing.online.ben.edu
servicedesk.massageenvy.com
forticlient-ems.ben.edu
illiad.ben.edu
landing.online.ben.edu
alumnicommunity.ben.edu
mybenu.ben.edu
online.ben.edu
illiad.ben.edu
webvpn.ben.edu
landing.online.ben.edu
servicedesk.massageenvy.com
*.ben.edu
*.BEN.EDU
servicedesk.massageenvy.com
alerts.ben.edu
*.libweb.ben.edu
landing.online.ben.edu
servicedesk.massageenvy.com
mybenu.ben.edu
servicedesk.massageenvy.com
servicedesk.massageenvy.com
wirelesscert.ben.edu
*.libweb.ben.edu
online.ben.edu
helpdesk.mercurymed.com
5639274879778816-fe4.pantheonsite.io
servicedesk.massageenvy.com
landing.online.ben.edu
benueagles.com
servicedesk.massageenvy.com
benueagles.com
lisle-ipt-cuc01-ms.ben.edu
servicedesk.massageenvy.com
alumnicommunity.ben.edu
benueagles.com
helpdesk.naa.edu
lisle-ipt-cer01.ben.edu
helpdesk.countrypure.com
benueagles.com
alumnicommunity.ben.edu
archivesspace.ben.edu
www.ben.edu
lisle-ipt-cimp01.ben.edu
online.ben.edu
benueagles.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
online.ben.edu
servicedesk.mazakcorp.com
www.ben.edu
servicedesk.massageenvy.com
helpdesk.countrypure.com
vbenise.ben.edu
benueagles.com
researchguides.ben.edu
servicedesk.massageenvy.com
servicedesk.massageenvy.com
benueagles.com
researchguides.ben.edu
benueagles.com
www.ben.edu
researchguides.ben.edu
servicedesk.massageenvy.com
live-web-bdt.edu.help
housing.ben.edu
researchguides.ben.edu
www.ben.edu
landing.online.ben.edu
benueagles.com
benueagles.com
servicedesk.massageenvy.com
online.ben.edu
help.gmfus.org
print.ben.edu
servicedesk.massageenvy.com
alumnicommunity.ben.edu
servicedesk.massageenvy.com
archivesspace.ben.edu
catalog.ben.edu
leaservicedesk.lea.co.bw
benueagles.com

Certificate

The complete raw certificate details for archivesspace.ben.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NVdOv1NcQaXKrwgjf/N
Sl77Z4ZAxv0MFAzvIabFJUofoNVnNz2hPRA32tDS0ucyp2KdxsFp3v7+etbMTIxg
z1onEASOFs7kJyvaTpmXE9KLeyln926qRDNhktuCRQHOWKes4pdpymggq1Gy592O
6OWqOETawGUI8jO2ScBj4eYp4lsvjKGMXlO7lWy1UYj5+VGQ7EMijmcZDEtc/zUL
Qv8x4Lqn0mylys4tfvDq0EFyYb101wrnkMCbd18CSXCMy4Vwre9q9yMktp5IihjG
ONtd38KvRxC/Qmla98xw45GLNo/d0Zk9dtigpaLIqZAKE7gEmyHpbNNL/hpQuS0u
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317668163635560601484454565397464958856433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 02:35:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 02:35:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archivesspace.ben.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27372687671868177252189070061116944646561729083918700407624797478397628841468538192451839446773186959116055674880605186722537755042042504397346735466067192237981632197996290437123038548884852979038290557978688753442041731782580136464958936590588273433966658181907871056632770773522911978477080743481767223190640742365177128451027130639495021517987916120871569827394756623439625939274998901039308835824551387312735487145719038583952335073768740877904157521564052393969357767096638319079392587096232373543752686112254360965834375790340514943125843593752735050348005727571525105855763767140586974169542969920497566690981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be0afe93f7cdd713e1715ecc61656c334d34b844
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.ben.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivesspace.ben.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001712981cea800000403004730450221008725886e36d9619d970ce036d3d93d235e0fca4a41db6792872b6d0ecf01e96c02200c7493c0fc0b831bdf3d09e03df1613ed8f2079563528e9745ff2820a41462df007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712981ce9e000004030046304402201e0e58e5cb1588fc1e7d76d8a0e26af41d0076e357f25c953351b2c46ff0aa11022028e9be5d002463df66a1f7356bc3a1a0a547c9eac0298f2b9267fa756109d81b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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