oscar.asce.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:a7:98:11:6c:d6:24:81:1d:be:80:7e:30:52:c2:07:91 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oscar.asce.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:a7:98:11:6c:d6:24:81:1d:be:80:7e:30:52:c2:07:91
Serial Number (int): 280275158633774812411715952948149554907025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:a5:38:b5:a9:24:a7:b5:ec:3e:bd:c0:f5:dd:8e:45:f4:55:94:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:04:89:df:74:51:21:ce:30:d1:8c:3c:44:3f:ba:c3:a9:ad:04:d8
Fingerprint (sha256): 0a:2a:ee:41:56:b0:33:3d:96:8f:8d:bd:29:6b:6b:12:59:d1:b6:32:83:41:9d:ad:a6:e5:e7:35:b3:73:f4:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate oscar.asce.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oscar.asce.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oscar.asce.org

Other certificates including the domain name asce.org

(limited to 100 certificates)
adfs1.asce.org
style.asce.org
secure.asce.org
secure.asce.org
cedb.asce.org
collaborate.asce.org
stage.news.asce.org
collaborate.asce.org
eroom.asce.org
eroom.asce.org
collaborate.asce.org
oscar.asce.org
cdn.asce.org
oscar.asce.org
*.asce.org
dagobah.asce.org
dagobah.asce.org
stage.news.asce.org
stage.news.asce.org
careers.asce.org
stage.news.asce.org
go.asce.org
news.asce.org
identity.asce.org
secure.asce.org
careers.asce.org
conferencesuite.asce.org
travel.asce.org
*.asce.org
cedb.asce.org
collaborate.asce.org
cedb.asce.org
ssl98799.cloudflaressl.com
cdn.asce.org
go.asce.org
citrix-gw.asce.org
cedb.asce.org
oscar.asce.org
secure.asce.org
info.asce.org
careers.asce.org
dagobah.asce.org
collaborate.asce.org
collaborate.asce.org
collaborate.asce.org
adfs1.asce.org
adfs1.asce.org
stage.news.asce.org
go.asce.org
collaborate.asce.org
studentconferences.asce.org
eroom.asce.org
style.asce.org
dagobah.asce.org
cedb.asce.org
dagobah.asce.org
travel.asce.org
oscar.asce.org
conferencesuite.asce.org
collaborate.asce.org
conferencesuite.asce.org
collaborate.asce.org
conferencesuite.asce.org
eroom.asce.org
go.asce.org
oscar.asce.org
studentconferences.asce.org
go.asce.org
files.asce.org
ssl98799.cloudflaressl.com
images.message.asce.org
stage.news.asce.org
secure.asce.org
citrix-gw.asce.org
remote.asce.org
news.asce.org
training.conferencesuite.asce.org
careers.asce.org
adfs1.asce.org
sp360.asce.org
ssl98799.cloudflaressl.com
collaborate.asce.org
*.asce.org
go.asce.org
join.asce.org
store.asce.org
*.asce.org
citrix-gw.asce.org
eb1.asce.org
mylearning.asce.org
webapps.asce.org
files.asce.org
files.asce.org
careers.asce.org
smp.asce.org
collaborate.asce.org
travel.asce.org
collaborate.asce.org
ssl98799.cloudflaressl.com
travel.asce.org

Certificate

The complete raw certificate details for oscar.asce.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz2rQ5TkePNzH4FdOTNd
LVFA38gidshMcSz1ookB/DVlJR1+VikX/vt4V1CS6jyUnWJb9P4pGOrC4Oz/KexF
40mf4ciF0dwYxmEjtRT9elW8Msn/mySK8GROKMdbtSHM7oYq9QlxFRLON1s43uc6
BdWeIto64RyvhXtOw+F5zpL8JBJD9nSjBG8VJ63Bwzu3DwB/8izl0L1FMZTZtPhM
MxzBGvlnRHM0IrO2IdTOdSqkn+cpYBcNN5wxysmEN7PpQm4LAh/hoN12JkNbJzAC
zyGVfyMQeV/2MDVUyUF6hYSLgeqOQdjHApSfAeMUKn4R+osJh4EMJBxW4je24mei
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280275158633774812411715952948149554907025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 11:12:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 11:12:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oscar.asce.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20102300606885940017348194035863873902968552395559803838178613359552250998234916840773234539414757178450613417157998466017785744209718975059191118839110575931812012340596980080420682904987601930891914346963960098623257155087660196357608014545807275199483184005570135359343992984798541674585000073518846102424614168770210307139893004752664659317430452687159614654766585594278278269325685984550442998952904523862226888327579553193613590598062011817285439077085077183272499706441829996338564030371568124423096910206314036701066674206396234100919067356869576290461776184855580940197957773585457469339230632518701214573283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ba538b5a924a7b5ec3ebdc0f5dd8e45f45594bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscar.asce.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d2fb000810000040300483046022100bc15c8c5ff9d4a3a9f3f66cfcc3cad346ed4e135340014735f2d4a550dad2380022100de8227417f3542e1a40cdc11e15df9dff8b2eea870311f06b076a4f67bee3bf1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d2faffeae000004030048304602210096d9b9853cdbaac7a56323d31802ff715971a76f642885344351475b3e4d33ff022100a4630ea9f044d3dc7f4e8115fa2449518e0f0d5ff3cd27334969c10ecc3d93dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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