veridiansoftware.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:86:3f:4a:d2:d0:0c:9f:76:01:39:78:a0:2c:41:d8:66 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=veridiansoftware.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:86:3f:4a:d2:d0:0c:9f:76:01:39:78:a0:2c:41:d8:66
Serial Number (int): 314599352218685019601672717062154169210982
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:6e:8e:22:17:95:40:2c:77:4c:d4:86:0c:66:d5:d8:ce:66:14:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:7e:ec:eb:01:d4:d9:5e:4a:af:8d:1d:5d:75:91:2b:99:4f:2e:f5
Fingerprint (sha256): 1c:a6:2d:54:76:0a:d0:2f:29:a1:1e:06:be:57:a8:db:73:a1:85:95:1c:60:9d:12:37:ae:ea:88:5e:5d:cb:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate veridiansoftware.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for veridiansoftware.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

veridiansoftware.com
www.veridiansoftware.com

Other certificates including the domain name veridiansoftware.com

(limited to 100 certificates)
washington.veridiansoftware.com
crra.veridiansoftware.com
cdsun-cornell.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
prn-cornell.veridiansoftware.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
leftnews.napubcoonline.com
vidette.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
veridiansoftware.com
yale.veridiansoftware.com
athena.dlconsulting.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
demeter.dlconsulting.com
scholarly.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
clarkedigitalcollections.veridiansoftware.com
leftnews.napubcoonline.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
montana.veridiansoftware.com
eastview.veridiansoftware.com
veridiansoftware.com
exponent.lib.purdue.edu
leftnews.napubcoonline.com
cmuhistory.veridiansoftware.com
cmuhistory.veridiansoftware.com
archive.theexonian.com
scholarly.veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
washington.veridiansoftware.com
veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
exponent.lib.purdue.edu
eastview.veridiansoftware.com
washington.veridiansoftware.com
vidette.veridiansoftware.com
eastview.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
digmichnews.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
hojishinbun.hoover.org
archive.theexonian.com
archive.theexonian.com
vidette.veridiansoftware.com
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
hojishinbun.hoover.org
osu.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
vidette.veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
washington.veridiansoftware.com
hojishinbun.hoover.org
montana.veridiansoftware.com
hojishinbun.hoover.org
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
exponent.lib.purdue.edu
veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
montana.veridiansoftware.com
veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
digmichnews.veridiansoftware.com
vidette.veridiansoftware.com
washington.veridiansoftware.com
washington.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
archive.theexonian.com
osu.veridiansoftware.com
scholarly.veridiansoftware.com
veridiansoftware.com
demos.veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
scholarly.veridiansoftware.com
exponent.lib.purdue.edu
nnyln.veridiansoftware.com
exponent.lib.purdue.edu

Certificate

The complete raw certificate details for veridiansoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuyJFgz31wgM/PqvyIJGj
y1AsfB9/DzuTu54KCoVXerUAME6kpO8Tug3fQpLkjd/qrDpHTBz3y17HqhFbmX5n
SvBB4rU0BFr+bTsu+BibrI5xa4UPuZDyGajbXY3/T2Z9+YgM57DcmQbE/mYm/8Tg
1O1FqwPd4YryemIzhDYAWC41G6KQTldE1xznlkUrIy1onBzveEzRfe1M4NVNmEG+
p45skm1Semw0T3FhEy7M2tvdJwuthXb8wWrUz5DrxjsENQCKeOxMcr8M3kXyrzaz
ByO9ER3XUScCdDRz9gH2spnf+gAr+bvVrzyXXmRI7jGM/EKWAOnxe5fkOx8Kbuau
7NyKlrbTotsu3fvs6RGZZ5U+r0uRuhKS8L67Al+JPbGgqSGK4X+PIcKPv4oEfZRW
66bbF0qTvupIIn0gaEkllHHiYK0ZEdy64oEPFYZ3J2SOhcSVa5liyysLCroRQYiG
WqXJPFR1vKHcHnc3/2F/qrBfjJVmQZlUeXdlDCOIv53AKtBTBmY0kvrMaGdLSYvx
Nwf4ShFtgTxf0uthNenwcukuHEnzy8g9mzUygkuWk6wi5ZPu9gKhU/mArpwbBLbz
eDHkIAHGKwDtYP9JV1Ii7ooXM84wMoEtNpwb7idGcSd4NUKC64uBR8vdZ3ffVxUS
sLpi/dPgZNdyKixnM35OZz8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314599352218685019601672717062154169210982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 02:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 02:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'veridiansoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763439595640664311570898914991482981074792351022240443712173306385240165272829896182913448010779170256288208130908110296448902572872738219537379727748935900928998035058513435317665512808884260669803247542928458067346023893564593913682381453982308959533527989226605626156646386327759340535921831029146424109240590832676899205649816767225030667669505554891424186159403004798541665502105284267637415315886259086565428512187380617061768646189658891570543783273282435657957685222869571965050779302227103549902668289605518924739589963876315250570518042376119786165909392025117700224175722226899973625683789931951074678936297007422505379833097982787165684111374295674259946513979720993387952221999178156406065176840259456626741367671019083752868182889222844604304617032406269214433137236266361676453933297087067450385570293813690142270732287692458776388655533258769601393498908428885412962791274552429832047085480346526051217685344521761259302922738381517856615738320016858804396479415547835235387169684041663312807220604358188345876983782799963109644711332734990160220003178472729943995887165030129067292501365601194782051610475415655562718707800571306811843097910865752296507715472782159009628026333060958638350997784223998836538587637567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d6e8e221795402c774cd4860c66d5d8ce661477
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veridiansoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veridiansoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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