sites.law.duq.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:30:ac:47:9a:53:71:f2:5e:2d:30:b9:72:0c:2e:51:9b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sites.law.duq.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:30:ac:47:9a:53:71:f2:5e:2d:30:b9:72:0c:2e:51:9b
Serial Number (int): 416230032215443128663406670160589023498651
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:1a:89:8f:33:00:df:3e:ad:8e:c1:76:92:5a:0f:54:1f:e9:bd:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:b7:c4:5b:8c:3e:d6:86:49:ac:e1:4d:04:f0:76:5c:eb:b0:a4:9a
Fingerprint (sha256): 09:66:18:30:f4:32:a9:14:d3:6c:df:b9:4b:4b:01:88:90:51:f2:7e:fd:88:b7:e7:b7:53:60:c3:6b:b3:89:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sites.law.duq.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sites.law.duq.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sites-law-duq-edu.duqlawblogs.org
sites.law.duq.edu
www.sites-law-duq-edu.duqlawblogs.org

Other certificates including the domain name duq.edu

(limited to 100 certificates)
wpm.ccmp.eu
sfunder5cert.net
ddc.duq.edu
law.duq.edu
scalefunder.net
ask.library.duq.edu
sfunder5cert.net
dsc.duq.edu
sfunder29cert.net
sso.duq.edu
www.dupress.duq.edu
mosaic.duq.edu
sfunder5cert.net
archives-staff.library.duq.edu
*.msl.duq.edu
scalefunder.net
scalefunder.net
www.dupress.duq.edu
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.mathcs.duq.edu
www.sbdc.duq.edu
digital.library.duq.edu
onlinenursing.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
5714315743068160-fe4.pantheonsite.io
duqcrim.com
5714315743068160-fe4.pantheonsite.io
calendar.library.duq.edu
sites.law.duq.edu
sfunder5cert.net
wpm.ccmp.eu
dsc.duq.edu
ddc.duq.edu
scalefunder.net
scalefunder.net
dupress.duq.edu
scalefunder.net
*.duq.edu
ask.library.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
wpm.ccmp.eu
jurismagazine.duqlawblogs.org
quarantine.duq.edu
applications.duq.edu
www.jma.duq.edu
*.authenticate.library.duq.edu
sfunder1cert.net
*.cr.duq.edu
edtech.msltest.duq.edu
dupress.duq.edu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
ddc.duq.edu
winapps.duq.edu
sfunder15cert.net
wpm.ccmp.eu
scalefunder.net
ask.library.duq.edu
calendar.library.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
jma.msl.duq.edu
dayofgiving.duq.edu
archives-staff.library.duq.edu
archives-staff.library.duq.edu
apply.duq.edu
www.dupress.duq.edu
wpm.ccmp.eu
edtech.msl.duq.edu
scalefunder.net
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.dupress.duq.edu
dsc.duq.edu
scalefunder.net
dsc.duq.edu
guides.library.duq.edu
5714315743068160-fe4.pantheonsite.io
scalefunder.net
applications.duq.edu
sedfmweb.cr.duq.edu
sfunder5cert.net
sfunder1cert.net
*.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
view.mail.online.duq.edu
wpm.ccmp.eu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
discover.duq.edu
guides.library.duq.edu
cpass-pub.cr.duq.edu
dupress.duq.edu
mosaic.duq.edu
5714315743068160-fe4.pantheonsite.io
gtm.duq.edu

Certificate

The complete raw certificate details for sites.law.duq.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k0sWf4KqykUWUJPvxjh
cKSBKkVUaotLIW9L4on0bc4nf8Zi/1ogwCUh3xwrTvstzxsG0FlyLbGhzOjDKLc3
cWtS2XqsKtBAmM18yHA06WZcPpXhVvQquXEXL1Ww8PI/3Xodvx1B4vf0fBHfqhsp
AP9cdKmi+mkGKl4K2L02jfeacXq5bl/OjFUxF1FrLYYXqZvtFJAwXR18Gd4mM7Pw
f2G/HlqF8+ReV31SYwLsuLVuch/G5RWIpLsQVWA4hwyKNcCdQgHSoSJoeOK/XVCr
NH43R4qhcMrFOtWx90Jh8NXhspiXpOqwWrw8QKNgrDQWJBjTfxNcWnzkV/mp0q3G
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416230032215443128663406670160589023498651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 04:26:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 04:26:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sites.law.duq.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28062959249489417999545547043663988724343786158294216918115785851264489591847517497625362432590692902716158863575550448600466418478663777217539118379432602065536903644035608656059291564877054544297950478165091939301267616586722741973896571609402061204781124759868425578641534715621910790518562504042573265876529871727300928892448533166656109477634179637190085032235287399142699015160780170064655595320162893370823187843249271801734575835540770695996532643112317691545374837790492645157308160971837305539864993853344122125777347568495345722041986906290894198466864664952960314422649491886354390227016521412909676218037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f1a898f3300df3ead8ec176925a0f541fe9bd40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites-law-duq-edu.duqlawblogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.law.duq.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sites-law-duq-edu.duqlawblogs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001878dadb8010000040300463044022075ffefbaa0f02667c58c6af9976ffcf82bad63847b9838746255e41560b147e102205e6241dbd71f85f869608dc49c018a10d1300dd306c067de6478fa84947eb11e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001878dadb82600000403004730450221009d4467c9c48b1b9424bbb735f8bd04661f5d2e2bad0b91cf8995404562b9b29102207ce7a99d42bfe94dc98c752d1d6878620dd13e04b08c23355990dfd7e5864fad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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