cs.fit.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:ec:bd:d1:7b:d0:9f:02:c3:ba:18:15:ca:b8:b2:3c:60 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cs.fit.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:ec:bd:d1:7b:d0:9f:02:c3:ba:18:15:ca:b8:b2:3c:60
Serial Number (int): 308610507830314987393001533244492915817568
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:53:82:32:5c:b6:15:42:52:0c:d2:71:79:6d:91:8a:8a:f1:5e:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:35:e4:27:d0:a1:17:e4:7f:b1:96:98:62:cb:0b:fd:55:16:e5:bf
Fingerprint (sha256): 1d:9f:0b:2e:54:17:2d:35:fa:6e:e6:6e:64:8c:71:89:cd:03:c4:5e:75:b8:2d:b7:d2:4a:7b:ee:e9:27:01:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cs.fit.edu

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs.fit.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs.fit.edu
dev.cs.fit.edu
fcrar2020.fit.edu
internal.cs.fit.edu
ser.cs.fit.edu
sst.fit.edu
udiscps.fit.edu
vote.fit.edu
www.cs.fit.edu

Other certificates including the domain name fit.edu

(limited to 100 certificates)
*.fit.edu
*.fit.edu
fit.edu
vote.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
adastra.fit.edu
fitv.fit.edu
*.fit.edu
cs.fit.edu
give.fit.edu
*.fit.edu
www.cs.fit.edu
blog.fit.edu
pf.fit.edu
cs.fit.edu
cs.fit.edu
*.lib.fit.edu
alumni.fit.edu
ciglean.ro
rocketchat.cs.fit.edu
*.fit.edu
register.fit.edu
*.fit.edu
nssb-p.adm.fit.edu
*.fit.edu
*.fit.edu
ecurrent.fit.edu
sekai.fit.edu
rocketchat.cs.fit.edu
cs.fit.edu
*.fit.edu
rise.fit.edu
github.fit.edu
vote.fit.edu
github.fit.edu
vote.fit.edu
*.fit.edu
libguides.lib.fit.edu
vote.fit.edu
vote.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
tls.automattic.com
cs.fit.edu
*.fit.edu
cs.fit.edu
portaltest.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
tls.automattic.com
vote.fit.edu
*.fit.edu
vote.fit.edu
*.fit.edu
*.fit.edu
cs.fit.edu
info.fit.edu
webinars.fit.edu
*.fit.edu
github-test01.fit.edu
rocketchat.cs.fit.edu
*.fit.edu
cs.fit.edu
*.fit.edu
crimson.fit.edu
github.fit.edu
register.fit.edu
cs.fit.edu
*.fit.edu
*.fit.edu
amploadvance.com
*.fit.edu
github.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
github.fit.edu
*.fit.edu
*.fit.edu
*.lib.fit.edu
*.fit.edu
*.fit.edu
cs.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
*.fit.edu
vote.fit.edu
cs.fit.edu
*.fit.edu
*.fit.edu
give.fit.edu
HQ-JGEXPE.fit.edu
info.fit.edu
hq-jgexpe.fit.edu

Certificate

The complete raw certificate details for cs.fit.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPHxhsC/l8m6Ctl/MFX+
A7B4K5ATRsRxo/xA6JCa5iuYOMo3cZPB/8JMbx7wd6Qv5Q+zdWQeo//odyodl7HF
v/8Yg+1zZfGDonPj7IVJ/+9k0gnEQNfTtV80CC53eAsBjbEZe9tghs3mZ27Ox5SR
3sTbHGA2XcYTZRCc/HT2ld7NUJxBc7+HV9wD8TrXBgpMCMXODo8cv4iHr4XYXJFs
2WaMwPhPqvXXY2qoyHABqNtnhr31bbQTZAIZHhLvg9vLTu684ZJIqd2owt67lIsM
nNxtLBlGxIX7OaqN5q5wRkXcrcwNJ6m7LCTb4ABRTDYIhlKH8zgMdnX4HYBnCndx
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308610507830314987393001533244492915817568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 04:11:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 04:11:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs.fit.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18802575902918355972051294214293805386324373140688209166444365678050434073556684088604669763792120016390579116873006720030816909625060483883862361802074105136182777518331386386491835373950862873928648942441037694128994088106545301118847775259363789870703081036113648976437456196215353845145880868008422481476429430161693795297362516833559311766381399508563761129359965808123319940372274311499632330620549945839514701254909980266080638594147664419129185521787120535795505154385658287335443909730983825039954460267264948962614953630558288419118837631161157520161619618547230345486880844821986455941129482557401563885831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a5382325cb61542520cd271796d918a8af15eed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cs.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcrar2020.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.cs.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ser.cs.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sst.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udiscps.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.fit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs.fit.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016edec4ec63000004030047304502202007bef16ea565b1cc286fc97809ba0214361e8d57c20391011fd1695fdd590f022100e7bf3c2449a14bfc02919024d9133e099c0d9acc21e6512e251517da69489ce4007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016edec4ec390000040300473045022100f1b9d00ecf411fb772bc04fec2b34d8dcfa95a5c6164c0f5fdd76a04e5ece21802205586c910a92afcd0dd06f00b7fc1e02d32e75704f681c01af3ef57570e6b3fb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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