tribetrek.wm.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:41:34:1b:e3:c9:96:b1:f4:91:8d:a3:29:b7:8f:d5:04:54 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tribetrek.wm.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:34:1b:e3:c9:96:b1:f4:91:8d:a3:29:b7:8f:d5:04:54
Serial Number (int): 370636762244776461357933913183662302889044
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:3a:fe:9a:97:dd:22:c9:bf:88:42:61:2f:20:b5:ad:16:d2:45:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:78:86:75:db:1c:75:19:27:6f:a4:da:87:21:cb:d2:cb:97:50:c0
Fingerprint (sha256): 0f:88:4f:33:6f:b3:b6:5a:9a:fa:19:1a:8a:c8:fc:2b:13:9e:ba:83:d6:2a:9d:33:2a:8f:f5:f2:df:38:e4:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tribetrek.wm.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tribetrek.wm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.tribetrek.wm.edu
tribetrek.wm.edu
www.tribetrek.wm.edu

Other certificates including the domain name wm.edu

(limited to 100 certificates)
sql2014dev.campus.wm.edu
info.mason.wm.edu
scholarworks.wm.edu
printshop.wm.edu
tribetrek.wm.edu
umacnas1.campus.wm.edu
image.partnerapp1.myworld.com
dilbert.physics.wm.edu
qliktest.wm.edu
people.wm.edu
blueprod2012r2.campus.wm.edu
image.partnerapp1.myworld.com
scholarworks.wm.edu
tedx.wm.edu
dilbert.physics.wm.edu
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
simpos-sql-prod.campus.wm.edu
blog.oieahc.wm.edu
gp2.wm.edu
stdirector.campus.wm.edu
image.partnerapp1.myworld.com
*.wm.edu
wmvidsquadnas1.campus.wm.edu
explore.mason.wm.edu
image.mktmarathonkids.org
studyabroad.wm.edu
mapi.wm.edu
*.wm.edu
connect.wm.edu
counseling.education.wm.edu
online.mason.wm.edu
catalog.wm.edu
edge-uc1.peopleadmin.com
*.aswp.wm.edu
printshop.wm.edu
vault.it.wm.edu
us-east-1-san1.blackboard.com
san-2-s6.tlsprovisioning.exacttarget.com
onlinemba.mason.wm.edu
scholarship.law.wm.edu
sql-wmpd1.campus.wm.edu
dilbert.physics.wm.edu
stvoicemail04.campus.wm.edu
give.wm.edu
eprint.wm.edu
vpn.aws.wm.edu
wm.edu
blackboard.com
*.wm.edu
counseling.education.wm.edu
onlinemba.mason.wm.edu
visas.wm.edu
getinfo.mason.wm.edu
calendar.wm.edu
tidewaterteam.wm.edu
*.wm.edu
sin.wm.edu
lensec2.campus.wm.edu
image.partnerapp1.myworld.com
*.libraries.wm.edu
itservices.wm.edu
us-east-1-san1.blackboard.com
image.partnerapp1.myworld.com
tribetrek.wm.edu
counselinginfo.education.wm.edu
reservations.wm.edu
us-east-1-san1.blackboard.com
scholarship.law.wm.edu
counselinginfo.education.wm.edu
geolab.wm.edu
online.mason.wm.edu
dilbert.physics.wm.edu
itstatus.wm.edu
tedx.wm.edu
wmvidsquadnas1.campus.wm.edu
visas-test.wm.edu
precollegeonline.wm.edu
helicity.physics.wm.edu
makerspace.physics.wm.edu
www.tidewaterteam.wm.edu
stli.wm.edu
sql-wmpd2.campus.wm.edu
lion2.swem.wm.edu
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
campusrec.wm.edu
image.partnerapp1.myworld.com
it.wm.edu
devl.banner.wm.edu
connect.wm.edu
info.mason.wm.edu
online.mason.wm.edu
mylaw.wm.edu
scholarworks.wm.edu
image.partnerapp1.myworld.com
image.mktmarathonkids.org
masonfiles.wm.edu
msbaonline.mason.wm.edu
blackboard.wm.edu

Certificate

The complete raw certificate details for tribetrek.wm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gis3VRQYMKU3SKiSA/x
e+fiuYMZlBQJEP/wkIPDmCi1BJSU16pprX0SLP9sM4PDY20X3jmb5V46/dAG7B5E
ZX1kBcv1E0PfbZSWZTecm9kpVbtZaLQUJvUm5C/XVxUiR0pmo7GBDQm2u3gqWkjP
jItA2mTxN99NPV00NtHWmV2j2vz78dZn47YUcLPRwmSroluyNSlI3/pGyBuw/qMJ
0Qnz/5873YPu6geBpX10Lz3AwcsU43WHn0dWroJtV1n9ET9Ohs6DTNcnI/fdcC6A
S5dzVix5elz8RaSRI7Jq7XjoWkSn7czBO82Ns6vYDZXJCSD7OCbL7JXosZaaD/z8
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370636762244776461357933913183662302889044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 12:48:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 12:48:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tribetrek.wm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26309184723611602718179846945632863694381704211850489643612976567631459773399262967931911668447010427151957932357235609952376721166164432193944817639382625107371965815374556964469148442621375380840043616579708293587363152554614789896099733688605511929537695452384040791363531672422150067160990573373816510775896490935807287134534443802932089971384529697292218801597418084836422290835833663892575664641264735444352875236993024408476559001564061186600559424141013630696332815897744715707893356885941334517375715406186801617927379295371431077488437894423985453653472055380115535048891042793474558857214037127583313493037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							703afe9a97dd22c9bf8842612f20b5ad16d24551
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tribetrek.wm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribetrek.wm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tribetrek.wm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168dcd106410000040300473045022077b964d809a5b8b6405fd463f73835a923e0e14565ea3120c772eefaef2dad12022100fbb8fa1112bdcbb07ee296bc99ba2ef289a6f80de4fff1524f6bdd62de728d81007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168dcd1082d0000040300473045022100a30f1e1f8a6709eec57b3de5319fbb4530519a0a03514a9d8be13208c29b83e402203ac51134a38d1567a2b97528a4e7ad7ace5982a07a023e1723cc969a11ee18f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0005684771da67a8bbaf716cadeb9110ead31a1bac83930516e6f750a3d8f721bb0df24137ed3f65e2cce75fb2162e31b12ce70ae38fe5c7876f2273febc2df5d6b60be25f1ba61623e8f7783c4d95f7fb04b3642a52022acb01c8ec0d4fea88cf7b19c6ae09a27ca46f579ecda88d8c9260ce7a8134648951546280ed74b1c28f6d454cc6d953c996a4343c6691c4a7d781aa42e67fb773421b230569170d541fa2ce455dfabcb21b49e6c535fbe2bcd1957c9b883280e1dd5eeb233e7a8b95cc26dc560cac11f1a3876b483cc23a7d489902b74c8783ce2812a9260dccc8846a49395748592aed8242b2d1df6b65af2ba505f47053c3f240ac1fc709f225ee3d