milnepublishing.geneseo.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:10:ac:1a:33:85:be:8e:d6:1b:ae:f3:f1:cf:d8:d2:aa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=milnepublishing.geneseo.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:10:ac:1a:33:85:be:8e:d6:1b:ae:f3:f1:cf:d8:d2:aa
Serial Number (int): 262039583783539521371025532393545835008682
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:94:0f:cf:e4:7d:e3:4c:94:91:13:53:a3:19:73:ff:40:fe:01:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:a8:dd:9a:3a:79:a6:75:d8:fb:ce:65:45:98:ae:42:e4:79:21:b4
Fingerprint (sha256): 23:5d:cf:58:a1:b4:82:5d:4a:18:3e:16:13:a1:2c:25:da:e2:5f:6a:e5:92:e8:36:4b:8a:a0:7e:8a:77:af:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate milnepublishing.geneseo.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for milnepublishing.geneseo.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

milnepublishing.geneseo.edu
milnepublishing.pressbooks.pub

Other certificates including the domain name geneseo.edu

(limited to 100 certificates)
statuspage.io
status.acquia.com
adxstatus.com
statuspage.io
statuspage.io
connect.geneseo.edu
statuspage.io
statuspage.io
ad2.w2k.geneseo.edu
adxstatus.com
statuspage.io
statuspage.io
features.geneseo.edu
adxstatus.com
statuspage.io
statuspage.io
aims.geneseo.edu
aims.geneseo.edu
statuspage.io
statuspage.io
milnepublishing.pressbooks.pub
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
adxstatus.com
statuspage.io
status.acquia.com
statuspage.io
idm.geneseo.edu
glk.geneseo.edu
statuspage.io
statuspage.io
features.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
emsprod.geneseo.edu
bulletin.geneseo.edu
statuspage.io
statuspage.io
webmail.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
banapptcdev2.geneseo.edu
statuspage.io
adxstatus.com
statuspage.io
statuspage.io
edge-uc1.peopleadmin.com
adxstatus.com
statuspage.io
statuspage.io
statuspage.io
connect.geneseo.edu
statuspage.io
printers.w2k.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
oasis.geneseo.edu
statuspage.io
statuspage.io
remotehelp.geneseo.edu
*.geneseo.edu
canvas.geneseo.edu
librarydataportal.geneseo.edu
adxstatus.com
proxy.geneseo.edu
crashplanmaster.geneseo.edu
statuspage.io
webmail.geneseo.edu
statuspage.io
glk.geneseo.edu
statuspage.io
gcab.geneseo.edu
statuspage.io
statuspage.io
adxstatus.com
jira.geneseo.edu
statuspage.io
statuspage.io
statuspage.io
features.geneseo.edu
statuspage.io
geneseo.edu
statuspage.io
statuspage.io
statuspage.io
360parent.geneseo.edu
statuspage.io
adxstatus.com
statuspage.io
statuspage.io
adxstatus.com

Certificate

The complete raw certificate details for milnepublishing.geneseo.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262039583783539521371025532393545835008682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 03:30:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 03:30:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'milnepublishing.geneseo.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895139627657914937086060101143380561860377228976395672620582671710686383954976254785703499890633923224223615021453239919737928024120818734989778426118663072020440938246898990084408735400925715390570988308041361801523441342331297295797589504830779995196195601732610230200119837253129512814022250171282302132590542100534435396119377746688836093162586214518624217846459994018022054724808705240605161656262661936805748420894607326288499440950536804447735598390211210337977927528594589730337546630906637973604475598070504040638117808668010517871510756546951596013390133394963805930734761519204144047478200945218949371215082606749353336095543705582409624333622079849861998697142189128887748710428334508543874376351128275647366667996036499015592927908913050261902492518293427111642044484691641574482337319546015267498445365912547196062198963918138524055525875362541649832365751172498144949377398499570015472375081734503295456491228375152812072103433249893046002043016766099665345421017992774806051811014084602306354572038430123791478781960093071539704504059873818718938191305921263978717926891154592418008128622159932417337090175027649823337923862822834803099617465450524596378077493198868609520534294506643832729472263023048642156722134997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6940fcfe47de34c94911353a31973ff40fe011a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milnepublishing.geneseo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milnepublishing.pressbooks.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706602f43a0000040300473045022100a9b734b08776231a0a090a404029ddd79027e600a00d752c8256d08fee1c060f02203674c9035565cfd954553bc6103cc3a5e4c80ce3fd709c59d1f413385a009f1d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706602f484000004030047304502205ef9e82c2e850dee0c697584ab67ba38c96bfc01b9f5e777b50033ff56b97446022100d5e8e1b17c26454ba8960e6c8461d4415cc005c3dd183133ecb5ebe7420dc0c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
 . . . . . . . . [c:1|t:2|false]  
 . . . . . . . . [c:0|t:15|false]  
 . . . . . . . . [c:1|t:22|false]