wluparis.omeka.wlu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:5b:f2:16:73:8c:58:a0:a7:33:28:b8:85:d3:5e:b6:da was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wluparis.omeka.wlu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:5b:f2:16:73:8c:58:a0:a7:33:28:b8:85:d3:5e:b6:da
Serial Number (int): 378516208754907449158980106752442008254170
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:da:a6:be:6a:22:8c:f1:76:f6:62:e5:16:90:0e:09:f1:84:95:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:59:cd:84:95:ea:68:0c:7f:4c:ae:99:36:ff:d9:8f:69:a1:fe:80
Fingerprint (sha256): 0e:0c:81:ef:e9:2d:2c:20:2b:2f:74:7e:10:f3:13:e2:2e:c3:28:9c:04:0b:89:bb:a3:9c:89:81:93:8f:d6:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wluparis.omeka.wlu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wluparis.omeka.wlu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wluparis.omeka.wlu.edu
www.wluparis.omeka.wlu.edu

Other certificates including the domain name wlu.edu

(limited to 100 certificates)
cluster.technolutions.net
*.bus321.wlu.edu
wlu.edu
academic.wlu.edu
Archive.wlu.edu
libdev.wlu.edu
*.blogs.wlu.edu
libdev.wlu.edu
cluster.technolutions.net
cluster.technolutions.net
americancentury.omeka.wlu.edu
cluster.technolutions.net
sf30.ad.wlu.edu
greatwalloflosangeles.omeka.wlu.edu
remembering.omeka.wlu.edu
cluster.technolutions.net
papercut.wlu.edu
*.ad.wlu.edu
scholarlycommons.law.wlu.edu
omeka.wlu.edu
cluster.technolutions.net
ellucianwebapi.ad.wlu.edu
*.itliteracy.wlu.edu
libdev.wlu.edu
vicula.wlu.edu
cluster.technolutions.net
wluparis.omeka.wlu.edu
dspace.wlu.edu
romancoins.omeka.wlu.edu
catalog.wlu.edu
cluster.technolutions.net
webnow.wlu.edu
cluster.technolutions.net
florenceasitwas.wlu.edu
annie.wlu.edu
libtrack.wlu.edu
technolutions.com
scholarlycommons.law.wlu.edu
cluster.technolutions.net
academic.wlu.edu
libtrack.wlu.edu
repository.wlu.edu
libguides.wlu.edu
cluster.technolutions.net
cluster.technolutions.net
mappingapostolicauthority.omeka.wlu.edu
cluster.technolutions.net
wluparis.omeka.wlu.edu
paris2018.omeka.wlu.edu
omeka.wlu.edu
academic.wlu.edu
sharepoint.wlu.edu
literaryrailway.omeka.wlu.edu
library.wlu.edu
webnow.wlu.edu
americancentury.omeka.wlu.edu
cluster.technolutions.net
sharepoint.wlu.edu
miocid.wlu.edu
libdev.wlu.edu
access.wlu.edu
cluster.technolutions.net
cluster.technolutions.net
bluenile.omeka.wlu.edu
cluster.technolutions.net
vicula.wlu.edu
historiclexington.omeka.wlu.edu
cluster.technolutions.net
wluva.hostexp.com
cluster.technolutions.net
miocid.wlu.edu
cluster.technolutions.net
*.wlu.edu
plugins.omeka.wlu.edu
historiclexington.omeka.wlu.edu
*.wlu.edu
academic.wlu.edu
store.wlu.edu
letthemeatcake.omeka.wlu.edu
cluster.technolutions.net
scholarlycommons.law.wlu.edu
bluenile.omeka.wlu.edu
webnow.wlu.edu
repository.wlu.edu
selfservice.wlu.edu
romancoins.omeka.wlu.edu
teachingwithucah.omeka.wlu.edu
*.wlu.edu
minfr1.ad.wlu.edu
imaginingafrica.omeka.wlu.edu
scholarlycommons.law.wlu.edu
cluster.technolutions.net
cluster.technolutions.net
repository.wlu.edu
colonnadeconnections.wlu.edu
repository.wlu.edu
www.wlu.edu
sinkhole.ad.wlu.edu
*.archivesspace.wlu.edu
plannedgiving.wlu.edu

Certificate

The complete raw certificate details for wluparis.omeka.wlu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zSkz6N9pJgzIGlazTVf
ZbQL6ESRlpeg4IN7FKGWBskl30Z2pJOqJJfhAGEkq/AJFgmJP0RuhtSILEA9iBbC
8XG5PsuADdtpzoP9U3WWN20jSfHWST+YGBz7PUb8Z/3voIqV/yJWYL0FcNB1Qs5p
un8uPkV261zDmgswKpY1rqixxMbsC0BjV/sEskxxOJ8MQATzB7qcukKUorUD+vFh
IGOoJm5WCeiAUHlI7TznZQXNciqLvLEIQ7c7EA+QJSIt5waQuupIYz0dU4B1xp+h
z9gJjSpJ9KvgJ3O8UyZn0jyszbYdYSFbKn9Eb1rPrVXc9JJwLxkL71wfJ8G6VyDe
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378516208754907449158980106752442008254170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 18:38:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 18:38:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wluparis.omeka.wlu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30701867728763813148381283273321749104179234384365845765414247456157321984894778805083296912709860751629190791899898475974019952423886422118519412735199937764061225451782586886299528344896289506950226140134616746808223226122795820312890969757281302204818687156548540590598431383699350721984190068199615134949804959897435949053762330452341252360804574482914649044638920030782915574830861664079080384161782225925507950213143675626412211486669944182898666935670210838707852550904525121183234574601186703075288351249262888789693768804959575990673168648012007697030093427821313526194958188178571744272553187092741113306677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85daa6be6a228cf176f662e516900e09f1849582
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wluparis.omeka.wlu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wluparis.omeka.wlu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016539f2bf8a0000040300473045022100c7fb305b5a2ed9bb82cdfddc977c22b3aa2ca15afe80c15d3bbfa0c2cb6f57bf02206e3839b1822efa1e07c24cdefc64d8accd0ec805df241bba3006abab7aa25a11007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016539f2bf750000040300473045022100af72c737b9aa60e45452cf5a282da4095d7bd111f517d440e595357d00503f8402206fc3a80e352b57efc713d18ab3549f6b34214e57753d94bcbfc120bd8bc73354
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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