github-test01.fit.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:7c:22:51:37:a4:35:20:70:2d:4e:d8:64:85:a5:fb:59:db was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=github-test01.fit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:22:51:37:a4:35:20:70:2d:4e:d8:64:85:a5:fb:59:db
Serial Number (int): 303577486749921726644115604844777775520219
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:32:c1:81:f8:8e:91:4c:f2:d9:4a:86:4e:94:76:bd:3a:23:6b:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:14:ab:b8:ed:e1:bb:88:1d:6e:63:27:f2:8c:16:53:22:27:87:0d
Fingerprint (sha256): 15:8b:93:66:ec:d9:09:cf:d3:98:aa:ab:d6:24:9e:da:a6:6f:1c:b7:7c:f3:be:c7:0b:af:ad:99:3a:44:c9:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate github-test01.fit.edu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for github-test01.fit.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.github-test01.fit.edu
avatars.github-test01.fit.edu
codeload.github-test01.fit.edu
gist.github-test01.fit.edu
github-test01.fit.edu
media.github-test01.fit.edu
pages.github-test01.fit.edu
raw.github-test01.fit.edu
render.github-test01.fit.edu
uploads.github-test01.fit.edu

Other certificates including the domain name fit.edu

(limited to 100 certificates)
*.fit.edu
*.fit.edu
fit.edu
vote.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
adastra.fit.edu
fitv.fit.edu
*.fit.edu
cs.fit.edu
give.fit.edu
*.fit.edu
www.cs.fit.edu
blog.fit.edu
pf.fit.edu
cs.fit.edu
cs.fit.edu
*.lib.fit.edu
alumni.fit.edu
ciglean.ro
rocketchat.cs.fit.edu
*.fit.edu
register.fit.edu
*.fit.edu
nssb-p.adm.fit.edu
*.fit.edu
*.fit.edu
ecurrent.fit.edu
sekai.fit.edu
rocketchat.cs.fit.edu
cs.fit.edu
*.fit.edu
rise.fit.edu
github.fit.edu
vote.fit.edu
github.fit.edu
vote.fit.edu
*.fit.edu
libguides.lib.fit.edu
vote.fit.edu
vote.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
tls.automattic.com
cs.fit.edu
*.fit.edu
cs.fit.edu
portaltest.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
tls.automattic.com
vote.fit.edu
*.fit.edu
vote.fit.edu
*.fit.edu
*.fit.edu
cs.fit.edu
info.fit.edu
webinars.fit.edu
*.fit.edu
github-test01.fit.edu
rocketchat.cs.fit.edu
*.fit.edu
cs.fit.edu
*.fit.edu
crimson.fit.edu
github.fit.edu
register.fit.edu
cs.fit.edu
*.fit.edu
*.fit.edu
amploadvance.com
*.fit.edu
github.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
github.fit.edu
*.fit.edu
*.fit.edu
*.lib.fit.edu
*.fit.edu
*.fit.edu
cs.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
vote.fit.edu
cs.fit.edu
*.fit.edu
*.fit.edu
give.fit.edu
HQ-JGEXPE.fit.edu
info.fit.edu
hq-jgexpe.fit.edu

Certificate

The complete raw certificate details for github-test01.fit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xfCxhrrcNvsrkrgyNay
vjtNv6tgQr9Z6M+QAifwVeyQ92dDPDn6FPFbt99ZNVTbGkFOZ7tXs3ZtcTDSPBBm
IZXdfDuZSvfjQ9wpF5NFE1nuk1WIhMiTZ5yl7b1YI4rJrTJB7yg1v2qpsX8ORkID
PBkjzZrzN7Y68NUtr/J2rBSIF6otYOyuVAwlYeTYjPRRFGgUkRzOOiX8rAmSYRaP
8vac5yB4d+ULaHYU10KqKvuK/fRMIpukTwD510Ksul/K7aj6CGlwDEm7BBFHmPBE
IEYefUtA4aVbu3m5EvDWcdTWFK7/1RH4CzhGvitGcfpmWaY43bixKQBQTJiHhrkT
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303577486749921726644115604844777775520219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 00:42:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 00:42:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'github-test01.fit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27152952472306126275084822847709268477196053597518476030651339129589510659256382693312272430384975351767421436961667186543352923757355222545574541960392791455455347112213512083245043908746096858710521764286278554016489441799333539122498178385530280951813646834420397745844446382088665327684194103152112891484909911862180591118297714359500402704937143919737508213170488515796258313440449693096202874729301053924596112397219594910239703783820135176170840936620661408351007043730631323641594164086123862206080433248921139505945457400615059594703288389199074842280424926120772354827797022629289180751246421250230143488869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f32c181f88e914cf2d94a864e9476bd3a236be1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatars.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeload.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gist.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raw.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'render.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.github-test01.fit.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001856afed45f0000040300483046022100fe45a6e3545a34f8f03374dc84f6b7573c089a63ebbeb7e4e4a21a60a592f63d022100a4c71083a6476a2b68a80a1ff7f9a4164016cec9ca34cd8773135e6a35c4e9f10075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001856afed6690000040300463044022059fc620b20aee0a2cc2985ac8d06c46518c54c8ed79b0429d416eaef4ae5a8dc02200e43a124bc53d59bf69323c8635410f42514ea216a4bd1284cd94133790ef718
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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