bigbluebutton.cs.utica.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:e8:eb:1a:0c:89:ba:d9:bf:a5:e2:c2:c8:13:ca:e7:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bigbluebutton.cs.utica.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:e8:eb:1a:0c:89:ba:d9:bf:a5:e2:c2:c8:13:ca:e7:2c
Serial Number (int): 314730508648067009387115909072086197004076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:1e:d7:0c:41:4a:7d:13:43:f5:b0:b5:14:8e:be:1a:cd:ba:12:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:fb:bf:2d:81:dd:ae:ad:5f:07:fe:7b:8d:8b:d4:31:3a:a0:38:87
Fingerprint (sha256): 1d:30:ef:c6:f1:e8:f5:2d:e8:ed:f9:dc:8d:04:54:f7:25:53:ef:35:97:70:10:1a:c0:3e:f6:23:c9:b2:e6:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bigbluebutton.cs.utica.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bigbluebutton.cs.utica.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bigbluebutton.cs.utica.edu

Other certificates including the domain name utica.edu

(limited to 100 certificates)
live-web-uti.edu.help
absn.utica.edu
banking-business-review.com
programs.online.utica.edu
programs.online.utica.edu
*.utica.edu
image.em.forwardair.com
5758048710688768-fe3.pantheonsite.io
banking-business-review.com
live-ab-uti.edu.help
acceleratednursing.utica.edu
*.utica.edu
banking-business-review.com
acceleratednursing.utica.edu
161511-web1.vilcek.org
live-ab-uti.edu.help
connect.utica.edu
*.utica.edu
absn.utica.edu
landing.online.utica.edu
collegiatelink.campuslabs.com
b.programs.online.utica.edu
live-web-uti.edu.help
utica-nac-06.uc.utica.edu
bigbluebutton.cs.utica.edu
nac-master.utica.edu
banking-business-review.com
bigbluebutton.cs.utica.edu
5768679291617280-fe4.pantheonsite.io
landing.online.utica.edu
pioneerplace.utica.edu
engage.utica.edu
llab.ecjs.utica.edu
programs.online.utica.edu
b.programs.online.utica.edu
programs.online.utica.edu
myimpact.utica.edu
cs.utica.edu
programs.online.utica.edu
banking-business-review.com
160.167.tmcapital.com
161511-web1.vilcek.org
exploreabsn.utica.edu
161511-web1.vilcek.org
landing.online.utica.edu
160.167.tmcapital.com
161511-web1.vilcek.org
brassunion.com
bigbluebutton.cs.utica.edu
acadmintest.cuofco.org
208.lsnc.net
acceleratednursing.utica.edu
*.utica.edu
161511-web1.vilcek.org
b.landing.online.utica.edu
160.167.tmcapital.com
5768679291617280-fe4.pantheonsite.io
5768679291617280-fe4.pantheonsite.io
acadmintest.cuofco.org
utica-nac-03.uc.utica.edu
programs.online.utica.edu
afscme57.org
live-ab-uti.edu.help
*.utica.edu
160.167.tmcapital.com
cs.utica.edu
*.utica.edu
utica-nac-05.uc.utica.edu
208.lsnc.net
banking-business-review.com
acceleratednursing.utica.edu
acceleratednursing.utica.edu
161511-web1.vilcek.org
live-web-uti.edu.help
landing.online.utica.edu
cs.utica.edu
b.landing.online.utica.edu
acceleratednursing.utica.edu
alldata.com
160.167.tmcapital.com
wlab.ecjs.utica.edu
banking-business-review.com
landing.online.utica.edu
acceleratednursing.utica.edu
cs.utica.edu
landing.online.utica.edu
alldata.com
*.utica.edu
acceleratednursing.utica.edu
pioneerplace.utica.edu
bigbluebutton.cs.utica.edu
wlab.ecjs.utica.edu
acadmintest.cuofco.org
florida.utica.edu
banking-business-review.com
banking-business-review.com
b.landing.online.utica.edu
absn.utica.edu
utica-nac-04.uc.utica.edu
161511-web1.vilcek.org

Certificate

The complete raw certificate details for bigbluebutton.cs.utica.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aLIyHBsaTk/LWsX/3hc
CLCPCWxUCdaUvBRTgcIA6hYc5CdNbAaWh/m4KRc21gdGItzjkzJ+pAPAITbc2KeV
3CoFUlYfUJ98tH5ml9JEkXGNNpu2JzYJ8rYLbYPyDTSDCOGZT2lPqk9F4mPefReI
8fvurLsGPBdo0V7vwWYyrBTiY79e+zGqwoC/yqlwoENYE5SHFlrLWSZUx47c4neR
XBuIt6SWW61Lp4vWURjs+w3VKc5B2WBNHvskO8Yv0WF5hu2YM4kGavvp8DnYDKzL
5rHe8+FcytyNi7CshDLYCc3idhJIOEE5n+ICwSmGTyUdd03khvOUjvDruNPedRqn
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314730508648067009387115909072086197004076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 13:15:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-20 13:15:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bigbluebutton.cs.utica.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27978937331775938662631708270004594319226820024784948586032099438876364411848985141020609905200560859658354902789898102494487877721864719122679744552850103189773628644644013857796251683781079405633856039455269516285509355245706994244776379045018574300609510048979043145896115469518820047643811619041510634921837718986776251997079925776418876218406641726592233534016597390932641961821744443685989854174652923413130117652518699430466663371348430044534699751261328306860171753340114503048576024446318101185985000797897504802868316939369162738285819611734874557965907818617216841826671908047406732032091320094000131254157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							401ed70c414a7d1343f5b0b5148ebe1acdba1202
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbluebutton.cs.utica.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017416869cc00000040300483046022100ce20fb087a91b80d4df39ab2c8649b5439050e42edf119aeb31cc0091b6292a5022100b195cb81ed0418e8b364b69ea8c18bbd442dedbf75ef2caa1625127706131c9e007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017416869cc200000403004830460221008b72feefeba818beee5f51eb49d09051974178fbf80676c041c4c7eac5dc24d2022100d4c048f1e796fd02e972d75803b3fa8c3cfaf75152fd72017d4d2add3214f3c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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