ap.cs50.school

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:85:d0:79:a2:83:b5:25:b4:a0:04:2f:8d:db:bc:c3:2e:2b was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ap.cs50.school

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:85:d0:79:a2:83:b5:25:b4:a0:04:2f:8d:db:bc:c3:2e:2b
Serial Number (int): 393983809514754254893781438544082211384875
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:2b:b0:20:71:07:aa:10:61:86:24:bf:1d:7f:d3:76:ca:39:09:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:25:6a:d4:c8:48:d4:fc:2b:a7:d9:da:95:89:cb:f9:a9:9e:d6:da
Fingerprint (sha256): 2d:26:02:4a:9e:f8:80:df:c9:42:52:52:79:9f:56:1b:99:24:3e:df:d3:8b:19:6b:2c:72:d4:c8:a7:b2:d6:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ap.cs50.school

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ap.cs50.school

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap.cs50.school
cs50.io
cs50.net
legacy.cs50.io
mail.cs50.net
manual.cs50.net
office.cs50.net
redirects.cs50.net
reference.cs50.net

Other certificates including the domain name cs50.school

(limited to 100 certificates)
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school
ap.cs50.school

Certificate

The complete raw certificate details for ap.cs50.school in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ080q7lN/u/O9w98dBZ
/IjZ99u3WjKgzvSXJlwj+gtHixrWfWHrBQ4AVo38q0HhI9R5QOw6c4FZJpQzB6vX
TblTMDv3+/jxJHi1GwKEn1pdzN2u4IUdAa6eRYOpY6jRqoKPOBnEMN/QcEBEzOAV
Mm4BtuMIE2Ii6BoQhzjxF040lbE8hG8AUu0/XvkRYHZIirFi+xqD46wY+dp0VJ+X
MzDSpUHqztHoLfKvhePVgs91OVCSm4VMuB+tQjLQCCC+HaCHcsk+823x1GgXv2Eb
9gtdYQkrArAZwhciUG42LPLV3/ZLHd+HxshQ6WF2UG6kwE0pxwdG488B1/ECHYeT
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393983809514754254893781438544082211384875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 13:18:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 13:18:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ap.cs50.school'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23936576383934879151477269617779747436642505795311858705840789667186401951352783435325128494090083168247909707251140811909566001302831381977242704686855929844859141553516709308543734843034646909903743551545765351963682251933204676269595059289790812263419256845494412071317413751516837013413179754407384009503773067370580934364720537164818023323725265718684066723434551963734838666793641332953493107875983558507321416801015476097282949855679795559882229723012120760883560509697225410724947125031593546796001019150282613816278692282091931301825893358200711563054692703429457124928585635442512029378434838577426123428617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							402bb0207107aa10618624bf1d7fd376ca390938
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.cs50.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs50.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.cs50.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.cs50.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reference.cs50.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000171029bd9b70000040300473045022034906ef7645e4a2c911e008cb7ed73013d7c4ee0d79b6076f33a4ae7e917d6e2022100e8ad85ba5d482c62139fc9dcc92172c779e7443ba472368fb0019d6f7cd86e4700770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171029bd9e0000004030048304602210094ef3304b3258a5b7b20f91b99314c6eae924b499e4302884b25240b04800bec022100aa3b4c261561cbef653a008a0f926953033eb28ad365ebc2bbaad63617254cc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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