brochure.cua.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:8d:c0:9a:97:47:b7:5b:d4:6c:d4:1c:0a:b2:f1:7b:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brochure.cua.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:8d:c0:9a:97:47:b7:5b:d4:6c:d4:1c:0a:b2:f1:7b:3c
Serial Number (int): 332644293685636117233488472961600122354492
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:83:88:b7:96:ea:5f:cc:64:b5:35:df:37:0a:c8:b4:af:41:41:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:98:99:84:db:eb:fd:56:3f:97:83:a6:75:fe:3f:8c:ab:5f:57:32
Fingerprint (sha256): 0b:a1:69:22:ad:28:92:16:4c:d1:2e:a2:43:7a:12:0e:ac:fa:98:ba:7d:a3:c6:62:14:2d:24:1d:e7:26:db:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brochure.cua.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brochure.cua.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brochure.cua.edu

Other certificates including the domain name cua.edu

(limited to 100 certificates)
brochure.cua.edu
us-east-1-san5.blackboard.com
css.cua.edu
discover.cua.edu
web.offcampuspartners.com
*.cua.edu
libguides.law.cua.edu
columbo.law.cua.edu
*.cua.edu
honoringmary.cua.edu
collegiatelink.campuslabs.com
www.lib.cua.edu
libguides.law.cua.edu
techsupport.cua.edu
star.lib.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
ts-wiki.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
www.offcampuspartners.com
honoringmary.cua.edu
secure-cua.cua.edu
n003.offcampuspartners.com
guides.lib.cua.edu
star.lib.cua.edu
goabroad.cua.edu
brochure.cua.edu
web.offcampuspartners.com
libguides.law.cua.edu
*.cua.edu
cardinalstation.cua.edu
iseadmin01.cua.edu
n003.offcampuspartners.com
us-east-1-san5.blackboard.com
archives.lib.cua.edu
www.vsl.cua.edu
hcmcs.cua.edu
libguides.law.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
star.lib.cua.edu
css.cua.edu
offcampuspartners.com
star.lib.cua.edu
techsupport.cua.edu
mail.vsl.cua.edu
us-east-1-san5.blackboard.com
archives.lib.cua.edu
home.cua.edu
nest.cua.edu
guides.lib.cua.edu
mail.vsl.cua.edu
nest.cua.edu
hcmcs.cua.edu
*.cua.edu
wirelessauth.cua.edu
techsupport.cua.edu
libguides.law.cua.edu
hcmcstst.cua.edu
us-east-1-san5.blackboard.com
us-east-1-san5.blackboard.com
css.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
www.offcampuspartners.com

honoringmary.cua.edu
us-east-1-san5.blackboard.com
www.lib.cua.edu
brochure.cua.edu
vpn.vsl.cua.edu
css.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
mail.cua.edu
descubre.cua.edu
*.cua.edu
us-east-1-san5.blackboard.com
popeindc.cua.edu
libguides.law.cua.edu
secure.cua.edu
www.vsl.cua.edu
columbo.law.cua.edu
libguides.law.cua.edu
goabroad.cua.edu
discover.cua.edu
css.cua.edu
mobile.cua.edu
guides.lib.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
*.cua.edu
web.offcampuspartners.com
mail.vsl.cua.edu
guides.lib.cua.edu
Collegiatelink.Campuslabs.com
web.offcampuspartners.com
Collegiatelink.Campuslabs.com
goabroad.cua.edu

Certificate

The complete raw certificate details for brochure.cua.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332644293685636117233488472961600122354492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 19:39:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 19:39:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brochure.cua.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861839069576861932784650909119094842053129373504137502037687891242658187902764794904835388248972392297887148993736371112724887803476842130631104247085524031439732583508711495344449728753479927911173721840611576302460970937471452690239076658134107347372464888290874179171793572233091979642156701925231630513358937579805933682703790218563312433973111639831203510713365941695329338144278816987913204186796278985726495001806307395749550096141806237436057855116802841095972106289396912291187120463737524818206651094323093382359485567666157274192592571598494325509299785488685270202029152725491920617843005998381167278204746920169451745782387596451481159864786998782385193747345699365016436514511235957738675212248745609379518179188209379719844006621673744878197833185482686715509214651694336888718444503963810941979454218839535007511735516124638472571773457186455616890446111841621723090401076312573428511979829785942297560068674462305969493536356213399969524211445314666722211733657046950026882934252394082709380822390073948043278496259384354050537818570038494934853123372376462869307295119082953080259043322535069511059307807397895194659068185286700973945132775517431791133834231197979921539536915999677714873934900207000746334657933981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a98388b796ea5fcc64b535df370ac8b4af414178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.cua.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f3ec921bd000004030048304602210090e08b841d964355fbc0d4a0aef463df11c18885c5b12c17505a6f954842c73e022100b9f02b3ea657b92b99e14fe19b47fa05838444ec96ff155dc0928ed3c4369bf900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f3ec921e000000403004630440220280d52c34f399e49c0df98c5f9d024a17520eed10f39a70ee22665d258f41989022039871e3d3a8c264a5bb1cbc66f8a8723ab906e5da089c774fac972e9f7352cf8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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