ap.cs50.school

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:a2:f5:b3:ef:dd:f2:bf:37:a7:51:0d:7e:23:04:cc:f3 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ap.cs50.school

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:a2:f5:b3:ef:dd:f2:bf:37:a7:51:0d:7e:23:04:cc:f3
Serial Number (int): 418423639643436408545442471405541759700211
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:e3:9a:7f:db:ac:92:dd:2f:70:c1:30:fc:d3:09:63:a1:fd:da:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:35:d9:88:73:af:79:c5:ee:1e:a3:2c:1a:ff:b2:0e:80:30:80:1f
Fingerprint (sha256): 0f:f6:cf:d9:56:52:e9:09:70:d9:a4:ec:e6:05:18:c7:78:a1:08:d7:83:6b:79:d4:6a:01:31:e3:b7:6c:6e:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ap.cs50.school

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap.cs50.school

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap.cs50.school
cs50.ca
cs50.io
cs50.net
cs50.tf
mail.cs50.net
manual.cs50.net
office.cs50.net
photos.cs50.net
redirects.cs50.net
reference.cs50.net
www.cs50.ca
www.cs50.io
www.cs50.net
www.cs50.tf

Other certificates including the domain name cs50.school

(limited to 100 certificates)
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school

Certificate

The complete raw certificate details for ap.cs50.school in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylpD1fqSzt3cCPXOwRZH
zDVk4avut2bQW/+gOUn/1wDowyFhHsWk7P+vwpr55jdrbLOn7e5PSFvW4ukA41uZ
W//WBEKUPWknPoAtQMV5EGG3HZHo2zpi/jMsKt5QCZxibEBrpf5Uk5sS8tLA3v7a
c8FHiG1IT5T6A5HVw3v01ytEPfLWVHxnTU0PNi/QmYO1PRHeKh+6eFxj0Fvll5rJ
r077APuiEO1U2Sf/9XdMQFY35H31vwCKilPHT15dHMFDUGkKodZu795X6NNdEMjK
TMccSWTHF4RxuuCcKnDgFHVAeVtnoFRK3AEQy2xg3hUlvUZJcAluppNSYv4/YAsz
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418423639643436408545442471405541759700211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-02 18:01:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 18:01:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap.cs50.school'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25544648925618984417377260115630821201126759233578408505231237366280873319854903344966516318255196589005109478536337814923052826912040903728662266043033648562485899928906838328644587932800176171876272365085386866407174158853267522741725227275010598429693777044684864804364778644800254560625002765449674362731986162155517118782631805628337037013498744451991173001671803821948628063591409491394314231146418270624922769818897029594825676419336078402031773281662614632421468356361038876395406122238151871585247006006927552716571530210435125489407800194394151629464748691637162220560571119809311702138616195229366218339173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ce39a7fdbac92dd2f70c130fcd30963a1fdda6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.cs50.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs50.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs50.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs50.tf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reference.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs50.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs50.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs50.tf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000176c479f0890000040300483046022100c310eeb33deff0f5252bc109948852037a49e2e50fdaed1d15a5af09f773d839022100a9f9431766fd23ecd28570e52c1a87ede2e1958ad70087ece6cc1f46efb8763e0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000176c479f0b4000004030048304602210099750013c06d964bf8e3f40739fcfcc4d9a8f7a58f1f7c43e7a6b8bf6a529d8e022100bdc37d67c38e7e441c03284ceeebd63b14fac3103258e4fc19c432b8e59a2b58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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