castleton.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:c7:a2:7b:12:fc:2a:c5:0e:64:8a:a5:9d:23:42:0f:df:99 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=castleton.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c7:a2:7b:12:fc:2a:c5:0e:64:8a:a5:9d:23:42:0f:df:99
Serial Number (int): 329269022785440356740383408392460364144537
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:2d:f7:d1:4a:0b:ef:01:6d:65:23:77:85:96:55:c2:ff:d8:98:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:d8:c8:f0:7a:b1:22:8b:e0:f4:88:cb:cb:11:24:59:f5:74:43:2e
Fingerprint (sha256): 13:eb:8e:d5:79:fb:d4:1d:01:a8:4c:a2:a4:03:17:84:b7:e0:53:54:c4:dc:fa:46:5a:6f:20:74:e1:74:6c:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate castleton.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castleton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castleton.edu
www.castleton.edu

Other certificates including the domain name castleton.edu

(limited to 100 certificates)
cluster3.technolutions.net
libguides.castleton.edu
connect.castleton.edu
explore.castleton.edu
cluster3.technolutions.net
libcal.castleton.edu
cluster3.technolutions.net
events.vsc.edu
castleton.edu
libguides.castleton.edu
undergrad.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
castleton.edu
portal.vsc.edu
cluster3.technolutions.net
libcal.castleton.edu
libcal.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
libguides.castleton.edu
explore.castleton.edu
cluster3.technolutions.net
castleton.edu
castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
castleton.edu
portal.vsc.edu
connect.castleton.edu
cluster3.technolutions.net
undergrad.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
localweb.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
explore.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
explore.castleton.edu
cluster3.technolutions.net
castleton.edu
cluster3.technolutions.net
events.vsc.edu
libcal.castleton.edu
castleton.edu
info.castleton.edu
cluster3.technolutions.net
events.vsc.edu
cluster3.technolutions.net
recruiter.vsc.edu
explore.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
events.vsc.edu
explore.castleton.edu
cluster3.technolutions.net
cuairwave.castleton.edu
libguides.castleton.edu
micollab.vsc.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.castleton.edu
blogs.castleton.edu
castleton.edu
grad.castleton.edu
libcal.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
connect.castleton.edu
cluster3.technolutions.net
libcal.castleton.edu
cluster3.technolutions.net
blogs.castleton.edu
libcal.castleton.edu
libcal.castleton.edu
grad.castleton.edu
explore.castleton.edu
cluster3.technolutions.net
undergrad.castleton.edu
libguides.castleton.edu
explore.castleton.edu
grad.castleton.edu
cluster3.technolutions.net
libguides.castleton.edu
cluster3.technolutions.net
www.castleton.edu
castleton.edu
connect.castleton.edu

Certificate

The complete raw certificate details for castleton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISA8eiexL8KsUOZIqlnSNCD9+ZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjgxMzIyNDFaFw0yNDAzMjcxMzIyNDBaMBgxFjAUBgNVBAMT
DWNhc3RsZXRvbi5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg
QEd+83g2H34zGs4PoELMquHuubWAP6haa/onM+qZMvvwpYx2CaeXhd436F/tY9jD
Fpo8Gd9VuSiEWsTNOlR14u+Y7LgSvhp1plAE3Kw0tssoWTV0evI4C7B440UtICub
xZoa79L5BMz2pHMSjXU23QRk/OHc5iyZU87ojnGgGl+PSwUHYjvivg+VMgGt+c9s
WGLGHZgkiOd1lv5YQ7qIivbPPk45rJYrIfRCOXuJNLat28YlIeX2b9llxzgjl1d1
P6OpW7Rl2Nx0qjRaVb7dr5Ckow0WwTvNeStdC6phFegYFSPBENl9BJ/idbfd8ee+
QPQkxlaUZSQcaoHsoAUVAgMBAAGjggIiMIICHjAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFPwt99FKC+8BbWUjd4WWVcL/2JhZMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MCsGA1UdEQQkMCKCDWNhc3RsZXRvbi5lZHWCEXd3dy5jYXN0bGV0b24uZWR1MBMG
A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDj
a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMsM5W0AAABAMARzBFAiEA
uod6a2QwS0ZDOMFzvvsgrSfh5VbxRqUFA/CxxJZFkU4CIBijxk8xTfYOgJKRaBN3
pL7H5ymQSW+vuUXiE0B0/E2mAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y
b+H61BcAAAGMsM5YywAABAMARzBFAiEA3E1ohzOwURKHiSLaq5ijJekjomtQmf5j
swM14pa8rdUCIA8UJx9sRvJcizBRBjh1vF+IhfqcmI6AvHuVoHzjke4EMA0GCSqG
SIb3DQEBCwUAA4IBAQA/pTpvgQuyWldwKsFhOApohEhkrmtC8IzmGUp1uwxOZ8Ty
zPO2dqPUQ0WZzoraP44tw48JNZVtsNhzGO1apwI5q7+ioOralYEhfrpjzA3aaXuv
sfMJjTYyJvLU+KMvqsA4F43tdXOciKlOPFPwwrSC6SBArK6sBmbZngiIbnYDoa/N
IkuepMXipVH3zk5t0bos2Zvcw7WFcC8eXMU3WTE7wlnjMnH942rolo/V7BUMOMlh
DZVBeVwy9KfY4bMFQcgDOrj5bbJkghl9vz4ZroL0FytQkZAHvMNvaAn3l4DnSzfy
6jNnA7hdfcA+JSIIOW2RCTxEpwVZ6vyML3X2lAjL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EBHfvN4Nh9+MxrOD6BC
zKrh7rm1gD+oWmv6JzPqmTL78KWMdgmnl4XeN+hf7WPYwxaaPBnfVbkohFrEzTpU
deLvmOy4Er4adaZQBNysNLbLKFk1dHryOAuweONFLSArm8WaGu/S+QTM9qRzEo11
Nt0EZPzh3OYsmVPO6I5xoBpfj0sFB2I74r4PlTIBrfnPbFhixh2YJIjndZb+WEO6
iIr2zz5OOayWKyH0Qjl7iTS2rdvGJSHl9m/ZZcc4I5dXdT+jqVu0ZdjcdKo0WlW+
3a+QpKMNFsE7zXkrXQuqYRXoGBUjwRDZfQSf4nW33fHnvkD0JMZWlGUkHGqB7KAF
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329269022785440356740383408392460364144537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 13:22:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 13:22:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castleton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28309077607168157217037786886368189400984787643058055279190166502427270086549365260887596182326322882328640146925842537579877571315663280777289697556078709767141450604242441253863268277844274069321433726640060132774677982328037115598500832217627370808313977830427063641306495009257618480553912768491943602173878133090994508470796920613174386972796177371117999458238700336166072509449549048840566232870136664979816044337926776273309804381727252298250205848587288612391020666825563822243058510263730130740107336642314843073973545490654598416219645589629164099930934896963632496024749264643008917110045949095482734150933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc2df7d14a0bef016d652377859655c2ffd89859
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castleton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castleton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb0ce56d00000040300473045022100ba877a6b64304b464338c173befb20ad27e1e556f146a50503f0b1c49645914e022018a3c64f314df60e809291681377a4bec7e72990496fafb945e2134074fc4da60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cb0ce58cb0000040300473045022100dc4d688733b05112878922daab98a325e923a26b5099fe63b30335e296bcadd502200f14271f6c46f25c8b3051063875bc5f8885fa9c988e80bc7b95a07ce391ee04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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