cmuhistory.veridiansoftware.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:b6:e0:91:ac:c3:bd:94:45:f9:73:9f:48:38:9b:9d:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmuhistory.veridiansoftware.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:b6:e0:91:ac:c3:bd:94:45:f9:73:9f:48:38:9b:9d:d4
Serial Number (int): 326233593034625429734211944319002814946772
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:20:3c:5c:0d:d9:fb:ad:f4:ac:1e:c6:7b:a5:34:07:4d:6c:05:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:09:78:78:53:54:70:1f:e2:d2:b4:84:d7:53:4a:cc:6e:30:b0:55
Fingerprint (sha256): 19:ba:ba:ab:01:83:9b:a8:04:29:3f:b0:12:1c:e8:7f:b4:6e:b3:39:5a:cb:64:8e:83:cf:f5:4d:04:ad:95:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cmuhistory.veridiansoftware.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmuhistory.veridiansoftware.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmuhistory.veridiansoftware.com

Other certificates including the domain name veridiansoftware.com

(limited to 100 certificates)
washington.veridiansoftware.com
crra.veridiansoftware.com
cdsun-cornell.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
prn-cornell.veridiansoftware.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
leftnews.napubcoonline.com
vidette.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
veridiansoftware.com
yale.veridiansoftware.com
athena.dlconsulting.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
demeter.dlconsulting.com
scholarly.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
clarkedigitalcollections.veridiansoftware.com
leftnews.napubcoonline.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
montana.veridiansoftware.com
eastview.veridiansoftware.com
veridiansoftware.com
exponent.lib.purdue.edu
leftnews.napubcoonline.com
cmuhistory.veridiansoftware.com
cmuhistory.veridiansoftware.com
archive.theexonian.com
scholarly.veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
washington.veridiansoftware.com
veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
exponent.lib.purdue.edu
eastview.veridiansoftware.com
washington.veridiansoftware.com
vidette.veridiansoftware.com
eastview.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
digmichnews.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
hojishinbun.hoover.org
archive.theexonian.com
archive.theexonian.com
vidette.veridiansoftware.com
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
hojishinbun.hoover.org
osu.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
vidette.veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
washington.veridiansoftware.com
hojishinbun.hoover.org
montana.veridiansoftware.com
hojishinbun.hoover.org
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
exponent.lib.purdue.edu
veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
montana.veridiansoftware.com
veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
digmichnews.veridiansoftware.com
vidette.veridiansoftware.com
washington.veridiansoftware.com
washington.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
archive.theexonian.com
osu.veridiansoftware.com
scholarly.veridiansoftware.com
veridiansoftware.com
demos.veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
scholarly.veridiansoftware.com
exponent.lib.purdue.edu
nnyln.veridiansoftware.com
exponent.lib.purdue.edu

Certificate

The complete raw certificate details for cmuhistory.veridiansoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R6fPNLKsbUGTc7/Z+Zw
taWWkYjD7K8eTN8S1aINM6M47dOG6RctRQ1YuMvjMQViihKcvFMTfMx7b4WWrSE/
2Ae7crqJWIcVUSIpq3lnnR5b0wZy+iUDJa/y6nz7jVRrZlnEMA9vyJm01lJeiPkl
l7m82w0KnXzowZKz6lrVu+ZgHDmDZrei9dYArGOuuP3iSwoh69n3xRefPJMLodLi
6KUl5YTe3GTKKfEij4kZWRLVox2Sa0Hb5LGbJVx1zxz6whidVwx0QjX7Godnq7x7
y6TXvnNsVF2iPFLsM/2IleItxG5xHpzZg6NulCOTFEI/6UVCfpNvQOleGtagvAJ4
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326233593034625429734211944319002814946772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-16 12:01:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-15 12:01:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmuhistory.veridiansoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28923672118992682981600832682290667786458712415838178881256922211136772989794615753170400852183551286787727616997095094639292933420214082784850942342569041111927560436228521085226105752988012246549929628573657451034343340351179324568419167467556519994818584038599407970662127656864177829824597609413115710586438614470911730536255592508796390694394636774003377859737087983156302156251961215008297629519392795889224143899034704696123825877687452026321270459578725451306890631217856348145997862917449637948355420447315990882363105139966057397183193820644060090781036359265155623533061207602346933982662123791179772491807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06203c5c0dd9fbadf4ac1ec67ba534074d6c0521
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmuhistory.veridiansoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162ce8be2600000040300473045022100ab3820012f9fb7dd55c9837aea61fab5153db5f98438f026532307d047c482c702205a6672f269244daf8df6b4cfc71901218bbe482ca6cee08312febbca39183b9b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162ce8be28a000004030047304502204797dfad18d218e5fc46c0cbe8f6abe84a265472d5a2ee028cdc3ea5136d63b6022100b2e947e560599ec6a2806489ab88444c6880c67495e1674aa1962a9b5cfbff71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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