clarknow.testing.clarku.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:f9:cb:d4:7a:ef:ca:98:7a:a4:3f:df:af:6b:4a:21:5f:65 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clarknow.testing.clarku.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:cb:d4:7a:ef:ca:98:7a:a4:3f:df:af:6b:4a:21:5f:65
Serial Number (int): 346338103702124967442188738118910216331109
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:50:ae:de:23:5c:a0:65:97:f6:77:a0:25:46:20:fd:4a:22:32:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:85:e8:a9:0d:96:66:11:95:bb:43:5f:aa:58:8f:46:6d:9e:1b:ea
Fingerprint (sha256): 10:8b:57:4a:b0:81:9e:80:80:93:4e:e6:e8:b0:fe:61:a8:15:02:98:d7:73:9e:58:81:1a:fe:13:d0:98:78:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clarknow.testing.clarku.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clarknow.testing.clarku.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clarknow.testing.clarku.edu
testing.clarku.edu
www.testing.clarku.edu

Other certificates including the domain name clarku.edu

(limited to 100 certificates)
cluster.technolutions.net
isso.clarku.edu
mathcs.clarku.edu
gradstudies.clarku.edu
vpn.clarku.edu
*.goddard40.clarku.edu
prodinb.clarku.edu
goddard.microsearch.net
www.clarku.edu
useastucc5.acquia.com
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
cicada.clarku.edu
biscuits.clarku.edu
gradstudies.clarku.edu
www2.clarku.edu
leep.clarku.edu
itshelp.clarku.edu
srwsus.ad.clarku.edu
cluster.technolutions.net
exchange.clarku.edu
www2.clarku.edu
clarkconnect.clarku.edu
apply.clarku.edu
cluster.technolutions.net
simplek.clarku.edu
www.clarku.edu
cuweb.clarku.edu
commons.clarku.edu
cluster.technolutions.net
apps.clarku.edu
biscuits.clarku.edu
exchange.clarku.edu
webfs.clarku.edu
prodxtender.clarku.edu
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
biscuits.clarku.edu
ch003.screenshare.clarku.edu
technolutions.com
cluster.technolutions.net
apps.clarku.edu
apply.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
useastucc5.acquia.com
cluster.technolutions.net
store.clarku.edu
clarknet.clarku.edu
Clarktube.Clarku.edu
goddard.microsearch.net
exchange.clarku.edu
clarknet.clarku.edu
crush.clarku.edu
woodhouse.clarku.edu
clarknow.testing.clarku.edu
goddard.microsearch.net
clarknet.clarku.edu
useastucc5.acquia.com
www2.clarku.edu
news.clarku.edu
cluster.technolutions.net
wordpress.test.clarku.edu
snowwhite.ad.clarku.edu
cluster.technolutions.net
adfs.clarku.edu
goddard.microsearch.net
cluster.technolutions.net
planning.clarku.edu
itshelp.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
commons.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
lists.clarku.edu
useastucc5.acquia.com
moodle.clarku.edu
www2.clarku.edu
access.clarku.edu
cluster.technolutions.net
goddard.microsearch.net
canvas.clarku.edu
apply.clarku.edu
clarkconnect.clarku.edu
www.clarku.edu
mathcs.clarku.edu
cluster.technolutions.net
acquia-sites.com
cluster.technolutions.net
discoverer.clarku.edu
access.clarku.edu
gradapply.clarku.edu
webapps.clarku.edu
www.clarku.edu
apply.clarku.edu
titaniumweb.clarku.edu

Certificate

The complete raw certificate details for clarknow.testing.clarku.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346338103702124967442188738118910216331109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-25 00:37:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-24 00:37:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clarknow.testing.clarku.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869952273454830700725260249936730260138753616101794906098043280382940599593949275973991127829185241919303442644773663781594391741877687075928350834321312407506298203860168877004018153268100393243415799716921449347375637699142992049008733878896550453368743977489760483302728981234683525415168737011832839064497063611381598295294326751926679566344519188439187368309123837294835330337727858780004488121751765884374382522276226626838660197033001388419289328901184449641824398400972954373868243972938677011264773778390547794256219378653794178924701165337422406649061251730154034004490063197981864063099872454819538577637282384686282756448164638364127220308918829784443872433004578494489716076388957496532359998334948348560640983947850221374451729403376380547067842708846048622762272449752325649639209704387631792125100426591046577584142098406498866478272735613069354394430463110108338117086982703981881525863750598628877253450266605410905030659434318130777742550783679297126997046715045104806706113399379912560346550322411144472531845765232602762203602859654914790459227466353046733817854197593822543931533565726971576798088839063649843060424931170848694919904500293642004653094993988052241571282720924203752077215162755981569955087517791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce50aede235ca06597f677a0254620fd4a223207
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarknow.testing.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testing.clarku.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000183724a910b000004030046304402202d724724c4792feb95b22cc58c6d924a8369d5a5ea9925b959016b72b20d84d302207b6178ce2f2c77c08236b561bac902662fb134c672f2c2dac8cf8ec1cc4ca76d00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000183724a913b0000040300473045022100bcd0576ee6cbb6b3c12c922e99208714dbbddfda552d5b0bea4050ff516d942e02202ed7ea88e65f8ef667b6df1294db3c80be6fdd068b762f71539f36259ccf7443
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077b6b9a3bd115b947352439303daf63fc8143c7cd989090bca2cdf1852320240de53fe4d6e186532c802596becf2c4ee7d8e8aa5cbfc4f6a8f537fee388dc40d0a45eab4ecde0621a4cafebcf6932ea732942099ceda7cf576bd6a529057815d9922955bdb3e17391c402f89d1c7765ec142b93f1ffa7e0ebbb97def4d5aa54d5913db05f5fa84da4632627255224c0a5da79bb631929cba227b7edbba258722ba62cfd558bffcb5f8f56a28b2b34a139294f8307ae092f7520a27116a43b89d20f7ae85ee844ec1d8806d2fc014424013724a4bae83c19343d8f49b18249e4043d299db61c7661e9e9384d9d9915214c5447e914c0a9788e1f638bc6fcce806