castleton.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:76:72:7d:8c:dc:30:9a:ae:72:80:e8:af:35:c0:7d:28:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=castleton.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:76:72:7d:8c:dc:30:9a:ae:72:80:e8:af:35:c0:7d:28:34
Serial Number (int): 301642360977560858434738147051444295772212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:6a:50:40:7d:17:a3:83:b6:5f:97:f7:d2:5a:e1:e5:3a:18:37:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 87:d6:af:06:5a:35:33:37:8f:00:f8:d9:36:d1:39:3d:22:f1:32:66
Fingerprint (sha256): 19:4c:24:45:4b:29:f0:65:f3:ed:74:9d:bc:a8:3b:6c:b4:23:b3:df:12:f8:7f:64:33:71:b5:99:56:44:d5:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate castleton.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for castleton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

castleton.edu
www.castleton.edu

Other certificates including the domain name castleton.edu

(limited to 100 certificates)
cluster3.technolutions.net
libguides.castleton.edu
connect.castleton.edu
explore.castleton.edu
cluster3.technolutions.net
libcal.castleton.edu
cluster3.technolutions.net
events.vsc.edu
castleton.edu
libguides.castleton.edu
undergrad.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
castleton.edu
portal.vsc.edu
cluster3.technolutions.net
libcal.castleton.edu
libcal.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
libguides.castleton.edu
explore.castleton.edu
cluster3.technolutions.net
castleton.edu
castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
castleton.edu
portal.vsc.edu
connect.castleton.edu
cluster3.technolutions.net
undergrad.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
localweb.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
explore.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
explore.castleton.edu
cluster3.technolutions.net
castleton.edu
cluster3.technolutions.net
events.vsc.edu
libcal.castleton.edu
castleton.edu
info.castleton.edu
cluster3.technolutions.net
events.vsc.edu
cluster3.technolutions.net
recruiter.vsc.edu
explore.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
events.vsc.edu
explore.castleton.edu
cluster3.technolutions.net
cuairwave.castleton.edu
libguides.castleton.edu
micollab.vsc.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.castleton.edu
blogs.castleton.edu
castleton.edu
grad.castleton.edu
libcal.castleton.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
connect.castleton.edu
cluster3.technolutions.net
libcal.castleton.edu
cluster3.technolutions.net
blogs.castleton.edu
libcal.castleton.edu
libcal.castleton.edu
grad.castleton.edu
explore.castleton.edu
cluster3.technolutions.net
undergrad.castleton.edu
libguides.castleton.edu
explore.castleton.edu
grad.castleton.edu
cluster3.technolutions.net
libguides.castleton.edu
cluster3.technolutions.net
www.castleton.edu
castleton.edu
connect.castleton.edu

Certificate

The complete raw certificate details for castleton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54lNL4S/M9Qf82uGvlZd
70TxVfcHnWFHTfaSZbn1xFANZDGLsiSWW7ABd0HbE5Ft3HMQ6PvEJKSUCVYMhDUD
+hX0srQQvrVzaJ0xfASewbExcAnt6S+esPLXw/aMmjLvj/rAqXqZRLikhWwDQBUw
ZA5Ij+TGchLUeH3d729zMivy951WfmS+4yt5CcMg8fm+iuwi/Fy2iqNkscbgEUzD
MsKCWuht70pFiq9nnnA8yVtZRMaW7s30eRtKcK4IEiLmcXZnNTy5y3mCRKmL28ex
pWbS8esCQt4XcZbpHc2rYw/CU/bQNGx3UNYFkqhkToJv35gSWpcB9DcivkMkhI7l
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301642360977560858434738147051444295772212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 14:22:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 14:22:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castleton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29228754343361913610562279252449301745797886395657163088714639164716032942221633032780309317161591543470834882051186646138126080050110274352227851789461273734316731479345743399793842351065989250727096481385456940796108659593687231431052212062186218870423493452286111302489887512433742281530576859512116920987423417024126535081086736083739386930610425071712140362902565137369035864376829272764436930269541626707351584305095440415169565993405675487101744051945009649426640300790190249512787732711362178138226942707677936986885014808175957122014483291321742267644283394209218027756240713894088900839596615191216583009611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb6a50407d17a383b65f97f7d25ae1e53a18379c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castleton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castleton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1b0072750000040300473045022100fd72b2095803ec45abb418d2b185c8009b1ae51407b274b706dfb8e87056635902205d7609bddb01d674f17843b3c8cbab802cac37d13f298c8fd634eff0433cf810007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f1b00727b0000040300483046022100bcb185ba841988b033871042810ed643033faf232c2734dc7397af8e4d79b9dc02210088d7d5926d872ef9831845292261abc7e02873101618242484ddc12c088a849e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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