collegian.richmond.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:d0:0f:d5:9f:77:f8:a2:3a:79:e9:28:9a:a5:46:26:2a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=collegian.richmond.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:d0:0f:d5:9f:77:f8:a2:3a:79:e9:28:9a:a5:46:26:2a
Serial Number (int): 303808432933840902646756470102822587082282
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:21:b4:b3:0e:cf:10:86:00:34:48:22:f6:10:77:7d:2d:38:dd:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:4b:23:ca:34:e7:e4:38:0b:cf:f8:6b:ff:3a:26:42:75:dd:72:01
Fingerprint (sha256): 12:fe:e1:9c:2d:b1:75:02:ea:20:03:b8:1d:55:20:ed:e4:dc:85:bc:a6:29:c3:c3:f8:87:cc:45:d1:48:9b:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate collegian.richmond.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for collegian.richmond.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collegian.richmond.edu
richmond.dlconsulting.com

Other certificates including the domain name richmond.edu

(limited to 100 certificates)
smtp.richmond.edu
lawreview.richmond.edu
ems.richmond.edu
codingbootcamp.richmond.edu
collegian.richmond.edu
spiderchallenge.richmond.edu
cygnet.richmond.edu
connect.richmond.edu
spdr-rw.richmond.edu
blackboard.richmond.edu
md.richmond.edu
spidertechnet.richmond.edu
www.lawinfo.richmond.edu
lawreview.richmond.edu
spdr-vm.richmond.edu
king.richmond.edu
blog.richmond.edu
onecardweb.richmond.edu
effect.richmond.edu
libguides.richmond.edu
connect.richmond.edu
secure-usea1-1.tessituranetwork.com
bootcamps.richmond.edu
spidertechhub.richmond.edu
webapps.richmond.edu
webapps.richmond.edu
collegian.richmond.edu
spidergiving.richmond.edu
sorry.richmond.edu
masterplan.richmond.edu
avs-ess-sessmgr-sm100.richmond.edu
cassini.richmond.edu
secure-usea1-1.tessituranetwork.com
bishop.richmond.edu
askboatwright.richmond.edu
secure-usea1-1.tessituranetwork.com
*.richmond.edu
dsl.richmond.edu
libsystest2.richmond.edu
libcal.richmond.edu
secure-usea1-1.tessituranetwork.com
www.student.richmond.edu
secure-usea1-1.tessituranetwork.com
idp.richmond.edu
lawreview.richmond.edu
effect.richmond.edu
jerkshistory.richmond.edu
emstest.richmond.edu
policy.richmond.edu
archives.richmond.edu
sprd-vm.richmond.edu
securessl-est1.tessituranetworkhost.com
dsl.richmond.edu
secure-usea1-1.tessituranetwork.com
websecure.richmond.edu
libcal.richmond.edu
xblog.richmond.edu
testapp.richmond.edu
secure-usea1-1.tessituranetwork.com
webpass.richmond.edu
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
tickets.modlin.richmond.edu
collegian.richmond.edu
codingbootcamp.richmond.edu
xemq20u1.richmond.edu
emstest.richmond.edu
securessl-est1.tessituranetworkhost.com
avs-cma.richmond.edu
scholarship.richmond.edu
testforms.richmond.edu
exchangemail.richmond.edu
sailaway.richmond.edu
richmond.edu
bannerweb.richmond.edu
codingbootcamp.richmond.edu
xeadmu.richmond.edu
scholarship.richmond.edu
collegian.richmond.edu
secure-usea1-1.tessituranetwork.com
askboatwright.richmond.edu
securessl-est1.tessituranetworkhost.com
asords24p.richmond.edu
secure-usea1-1.tessituranetwork.com
spdr-cms.richmond.edu
collegian.richmond.edu
urhere.richmond.edu
idp.richmond.edu
secure-usea1-1.tessituranetwork.com
xess19u1.richmond.edu
avs-ric-avp2.richmond.edu
helping.richmond.edu
upgradeweb.richmond.edu
*.coursedog.com
bootcamps.richmond.edu
xemc20u1.richmond.edu
libcal.richmond.edu
avs-ess-avp.richmond.edu
metcalf.richmond.edu
wwws.richmond.edu

Certificate

The complete raw certificate details for collegian.richmond.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCVwnKM8fBiUZc6CRMvz
8eN8xHYqOSe80mu/N/ecsJiL4oTlbboEI6T8LSiNfP3MqgN5Awe84uB/jC9InmHS
RQyZ6Ehmd34VUVNBPVC5xjeF0FHp/t9ToCotR5Yn9PgnfalA66lu3pAiBbbsgySz
hSkvPEDlDoKbTBV+WuvVj1Yg5s6ZGu90C502wufuewGLqAPPQPc5Kdv2WdxwVEzU
T0bHH5bsmXT4J94Q5DY/v9n7ef3IqLJBuRI41WoBqykHkCox1wbRKSj6pY9oJWv4
XgtAlN5GdfAWtHW9u9O36ziHaMukXe/vS8hmLZrc5d+NtfUWmXM+6oJio7p5ILt7
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303808432933840902646756470102822587082282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 12:08:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 12:08:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collegian.richmond.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24761170071255427938703597161004280832323164145891438702745108963201543988593719832889502802011007768536927983715845249293059831463422589069610297242425678144268373938656905738514613241835607231900040359423937203583475937626965795925569772539830635105493567404214202954047333042608390404194960863517454753242108038575555288009432806367761514669837207156275891610663252035430381003626851704587136971235346514531466149809896846548304458120826104494126068800034320698465310538370232370176748256668783750625200501939650957807194227542370226043993989353702390403948146013637621058214022284525994025808557973378404666014679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a21b4b30ecf108600344822f610777d2d38ddbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegian.richmond.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmond.dlconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001714a74e66e0000040300473045022100d2f6b91a92414f9ed6bc9f99125526fe5f14f2e2ec3d62808469e0e2260b590d022070d0c436227bfeb7ff390a4f2646ec5e6efa5fa091ffac6ff0469903e865866f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714a74e6a0000004030047304502200fa1dd4113e82a1b05d7fcd6399f6491f76e04cf3201e3003ca5b228ef4d8b06022100d7bfb0958b3e282b4cbbe7d80a1505a72f06499fca0bf937740f38d369138942
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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