cornelldti.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:45:97:97:35:65:41:d3:b2:7e:ce:51:7f:88:78:38:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cornelldti.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:45:97:97:35:65:41:d3:b2:7e:ce:51:7f:88:78:38:6b
Serial Number (int): 274700373940606418299686039361789948868715
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:d6:1e:b8:cc:9b:71:71:45:3a:97:68:34:f4:3d:3e:1c:96:56:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:67:04:3a:04:cc:1b:ef:fa:ae:7b:2a:b5:25:f4:38:94:62:79:b0
Fingerprint (sha256): 25:22:62:1c:cc:d2:9c:c4:c0:2d:7c:2f:26:7c:f4:03:e7:31:25:12:81:3d:a5:86:d8:e6:28:6f:19:68:39:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cornelldti.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cornelldti.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cornelldti.org

Other certificates including the domain name cornelldti.org

(limited to 100 certificates)
www.brockly.app
www.cornelldti.org
docs.cornelldti.org
www.veiganegocios.com.br
cornelldti.org
docs.cornelldti.org
cornelldti.org
afacacasupplychain.com
www.cornelldti.org
propel.cornelldti.org
hml-locadora.turbi.com.br
cornelldti.org
docs.cornelldti.org
www.cornelldti.org
accounts.tourinfosys.net
www.cornelldti.org
www.pushpakruhil.in
cornelldti.org
cornelldti.org
marketscombined.com.au
dev-auth.planmo.com
www.seanbeckerlaw.com
haxterrobotics.com
justrealme.com
applink.headout.com
developers.cornelldti.org
www.storydsoftware.com.au
www.cornelldti.org
cornelldti.org
www.veiganegocios.com.br
cornelldti.org
pidemx.com
www.techiwant.us
www.srikkanth.com
cornelldti.org
docs.cornelldti.org
flux.api.internal.cornelldti.org
app.valos.ai
flux.api.internal.cornelldti.org
timetrackbuddy.com
developers.cornelldti.org
developers.cornelldti.org
developers.cornelldti.org
www.storydsoftware.com.au
cornelldti.org
developers.cornelldti.org
developers.cornelldti.org
www.menavarro.com
nova.cornelldti.org
www.cornelldti.org
agathium.com
nova.cornelldti.org
myas.jp
intdocs.mbnk.com
cornelldti.org
flux.api.internal.cornelldti.org
developers.cornelldti.org
hml-locadora.turbi.com.br
nova.cornelldti.org
docs.cornelldti.org
flux.api.internal.cornelldti.org
developers.cornelldti.org
flux.api.internal.cornelldti.org
cornelldti.org
www.brockly.app
bariglesia.pedidomovil.es
cornelldti.org
www.coloriseverything.com
developers.cornelldti.org
ticket-kleinanzeigen.de
flux.api.internal.cornelldti.org
www.cornelldti.org
developers.cornelldti.org
new.fazendacoffee.com
www.cornelldti.org
cornelldti.org
developers.cornelldti.org
33nftpasses.com
developers.cornelldti.org
developers.cornelldti.org
cornelldti.org
pidemx.com
powerbrad.turnosweb.app
dimentrix.com
intdocs.mbnk.com
developers.cornelldti.org
www.dimkar.gr
codejam-gallery.tk
flux.api.internal.cornelldti.org
developers.cornelldti.org
docs.cornelldti.org
cornelldti.org
propel.cornelldti.org
cornelldti.org
docs.cornelldti.org
icsco.ai
docs.cornelldti.org
api.algdb.net
flux.fitness.cornelldti.org
www.cornelldti.org

Certificate

The complete raw certificate details for cornelldti.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAydFl5c1ZUHTsn7OUX+IeDhrMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTgxNDM0NTlaFw0y
MDAxMTYxNDM0NTlaMBkxFzAVBgNVBAMTDmNvcm5lbGxkdGkub3JnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVKjqUZ1XJtriP2pLeT/+JrKEbMRWbEC
jjmrCB164m2MUojTofn2+LK4rMhIx7hMQOUKIILF9WVOwfGIFCL8bTLpOttdIU2C
iF4mVV73kuzUEfDyV/DkyeHUC7QFpbgX8Uh0OFUFd1+Z7E+VzwtsuQDt8hdQDtrM
UIpVfWJYHhx6EXIcuQR4mHcmaIl5XKvXOpOLIu63jr4yNfn1GjEDnabqcKS/1uLr
EFMqVAkMCAWbLkAc377aE03e2ltfo8YGrDSsrUv7rdPK4hipKRlfSE1fPrc2S2pV
X/AWAfQHGGHdQcMCDEleOxJdW6339BLaZ1tvblqXhGi2CM24aZiHLwIDAQABo4IC
YzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT41h64zJtxcUU6l2g09D0+HJZW
uDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMBkGA1UdEQQSMBCCDmNvcm5lbGxkdGkub3JnMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAsh4FzIuizYog
Todm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFt34H3awAABAMARjBEAiBhGj3T3070
NkIeq2ARKHx0TqUu3N4XGeVFxECwgzmA9gIgGFHAqSePB4TVvZ+RAEOWTPiP77a5
qGfr+FLatyxvk+sAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAA
AW3fgfibAAAEAwBIMEYCIQD1HBi7c4bp7BhY3R47wLQWUJoNJhYEgQ9+IA0kyqBF
nAIhAKkDkpbuYTwuq3IxSJI12G609HUaP9dZs8WPSupm3RQcMA0GCSqGSIb3DQEB
CwUAA4IBAQB7JgWWcDT22befgOBzXXVNfULdET8nKUXE2BOeH3kU3HS562F6X2i1
xeFASY64iBxrYmm2BjUYwogCS81YRjtTNRZdhidXsbxAkU+A4SDRHf7CvNdm56or
Qwic79Xk5UKHHGxQssmyhkn91SoGsgwl7qTC8e+ttVyFblLPst179934YNhyViZE
9vD6Sfxid0s7utIEgqUgawbGS0ZJDEIGFNJ6FWmapmCVWspQVYihclu6noMnrxEW
cbs5JSDTEQnWSV6mwTOYDLcXwfpG4TXmFX219lGrm41Mnead155E/gezHpbBLOEc
I5uO8Jzo2yc13O4TCj6IAtmzDkwyuhnE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVKjqUZ1XJtriP2pLeT/
+JrKEbMRWbECjjmrCB164m2MUojTofn2+LK4rMhIx7hMQOUKIILF9WVOwfGIFCL8
bTLpOttdIU2CiF4mVV73kuzUEfDyV/DkyeHUC7QFpbgX8Uh0OFUFd1+Z7E+Vzwts
uQDt8hdQDtrMUIpVfWJYHhx6EXIcuQR4mHcmaIl5XKvXOpOLIu63jr4yNfn1GjED
nabqcKS/1uLrEFMqVAkMCAWbLkAc377aE03e2ltfo8YGrDSsrUv7rdPK4hipKRlf
SE1fPrc2S2pVX/AWAfQHGGHdQcMCDEleOxJdW6339BLaZ1tvblqXhGi2CM24aZiH
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274700373940606418299686039361789948868715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 14:34:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 14:34:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cornelldti.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22889884157326506795627052590310654854496938733174424698203844148405293010767116182284937087062034632461724262957475074120163093679577821828131427514635764297797601705568429491358804225432864632084017478596623853656275053476483722771089531317068514169654646384805900372740290273907082285799001917961611235403085606944222925783768696216651857542927194585515995409675459873676926634281386450371542804161820408743547237761301946351021130616040449176752743950875839575892352419313754463249467627512169169023457517082242895782478784658904593912081146169605838336760537831666131058781142242549907785729873676736177171367727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8d61eb8cc9b7171453a976834f43d3e1c9656b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornelldti.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ddf81f76b00000403004630440220611a3dd3df4ef436421eab6011287c744ea52edcde1719e545c440b0833980f602201851c0a9278f0784d5bd9f910043964cf88fefb6b9a867ebf852dab72c6f93eb0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ddf81f89b0000040300483046022100f51c18bb7386e9ec1858dd1e3bc0b416509a0d261604810f7e200d24caa0459c022100a9039296ee613c2eab7231489235d86eb4f4751a3fd759b3c58f4aea66dd141c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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