secure-cua.cua.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:18:09:64:e7:7a:ef:bc:56:5a:71:ac:52:f8:96:61:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure-cua.cua.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:18:09:64:e7:7a:ef:bc:56:5a:71:ac:52:f8:96:61:c0
Serial Number (int): 325341893025568448765213505171715521929664
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:c8:55:b4:59:17:b5:29:f7:18:01:31:11:43:81:5b:ef:03:7f:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:e0:b3:c4:3f:85:a1:46:cf:bd:ad:6c:12:04:d6:73:c0:a3:61:57
Fingerprint (sha256): 0f:ea:99:31:a9:b2:7c:ae:fb:e3:f2:53:4e:df:bb:7e:30:36:2e:03:88:49:3f:fb:73:7c:b0:e3:54:b7:37:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate secure-cua.cua.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-cua.cua.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-cua.cua.edu

Other certificates including the domain name cua.edu

(limited to 100 certificates)
brochure.cua.edu
us-east-1-san5.blackboard.com
css.cua.edu
discover.cua.edu
web.offcampuspartners.com
*.cua.edu
libguides.law.cua.edu
columbo.law.cua.edu
*.cua.edu
honoringmary.cua.edu
collegiatelink.campuslabs.com
www.lib.cua.edu
libguides.law.cua.edu
techsupport.cua.edu
star.lib.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
ts-wiki.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
www.offcampuspartners.com
honoringmary.cua.edu
secure-cua.cua.edu
n003.offcampuspartners.com
guides.lib.cua.edu
star.lib.cua.edu
goabroad.cua.edu
brochure.cua.edu
web.offcampuspartners.com
libguides.law.cua.edu
*.cua.edu
cardinalstation.cua.edu
iseadmin01.cua.edu
n003.offcampuspartners.com
us-east-1-san5.blackboard.com
archives.lib.cua.edu
www.vsl.cua.edu
hcmcs.cua.edu
libguides.law.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
star.lib.cua.edu
css.cua.edu
offcampuspartners.com
star.lib.cua.edu
techsupport.cua.edu
mail.vsl.cua.edu
us-east-1-san5.blackboard.com
archives.lib.cua.edu
home.cua.edu
nest.cua.edu
guides.lib.cua.edu
mail.vsl.cua.edu
nest.cua.edu
hcmcs.cua.edu
*.cua.edu
wirelessauth.cua.edu
techsupport.cua.edu
libguides.law.cua.edu
hcmcstst.cua.edu
us-east-1-san5.blackboard.com
us-east-1-san5.blackboard.com
css.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
www.offcampuspartners.com

honoringmary.cua.edu
us-east-1-san5.blackboard.com
www.lib.cua.edu
brochure.cua.edu
vpn.vsl.cua.edu
css.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
mail.cua.edu
descubre.cua.edu
*.cua.edu
us-east-1-san5.blackboard.com
popeindc.cua.edu
libguides.law.cua.edu
secure.cua.edu
www.vsl.cua.edu
columbo.law.cua.edu
libguides.law.cua.edu
goabroad.cua.edu
discover.cua.edu
css.cua.edu
mobile.cua.edu
guides.lib.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
*.cua.edu
web.offcampuspartners.com
mail.vsl.cua.edu
guides.lib.cua.edu
Collegiatelink.Campuslabs.com
web.offcampuspartners.com
Collegiatelink.Campuslabs.com
goabroad.cua.edu

Certificate

The complete raw certificate details for secure-cua.cua.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325341893025568448765213505171715521929664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-19 14:43:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-18 14:43:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-cua.cua.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649713070102376336279163465524296905314411755802241169243906685850989975546983010807531904603177488013427709790972656168317219494690240003667524344353693465921351322455000327875833407462274160093389730559622928375125624558267323044267134923439156129239423248129203366506110951556642101918362367210220976557482087527310414969200370027259784276791760375915031871033706787480737909163343333950965557873623423876593858505573720278560689206924985696352428295695110545383564297200714899400765827692899313684447407153257146008058367349400540031728001407834949278814977180714448802801557011213087336174700454102059880185586989145851743887178606262832886993645051544899023855056292247650427957901827324757159339087924893189174666547847029639272877462180016769882200257277073627068891740871338116324432605875629079812284637917492024835266116250227136665289923498333407394704629965935089822174028643972936098178346672222979910340517190063834936884541477632434280891338123368852553082994204416613806005770875777971664992747731431314102310346001036167566208536972996061110188401388045598480347715144789980967944623712875812120832598073014801687640506353042914163861904654499852461573803417213616738660318396219645612874130170107450547971050954681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75c855b45917b529f71801311143815bef037f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-cua.cua.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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