archivesspace.valpo.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:69:10:98:c5:03:fb:c5:94:d3:c1:65:46:f6:58:fe:57 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=archivesspace.valpo.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:69:10:98:c5:03:fb:c5:94:d3:c1:65:46:f6:58:fe:57
Serial Number (int): 292442208299928733437761484102796060458583
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:22:10:23:c0:68:16:cb:a9:a9:99:bb:d0:af:38:40:6c:3e:35:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:10:9f:6b:dc:63:e7:0d:0f:c4:21:64:88:34:64:54:3a:7f:7c:c4
Fingerprint (sha256): 2e:b0:37:2c:1b:c6:97:7e:79:9b:f3:60:79:85:f1:ab:e2:f2:76:62:06:9a:18:2a:1d:b5:ff:70:0c:90:4b:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate archivesspace.valpo.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for archivesspace.valpo.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archives.valpo.edu
archivesspace.valpo.edu

Other certificates including the domain name valpo.edu

(limited to 100 certificates)
webstorage.valpo.edu
libguides.valpo.edu
scholar.valpo.edu
support.valpo.edu
support.valpo.edu
*.valpo.edu
photos.valpo.edu
vpn.valpo.edu
*.valpo.edu
*.valpo.edu
galileo.valpo.edu
guild.valpo.edu
photos.valpo.edu
KRE-6000-Local1.valpo.edu
tutor.valpo.edu
admission.valpo.edu
scholar.valpo.edu
admission.valpo.edu
admission.valpo.edu
photos.valpo.edu
webstorage.valpo.edu
scholar.valpo.edu
guild.valpo.edu
support.valpo.edu
photos.valpo.edu
photos.valpo.edu
scholar.valpo.edu
guild.valpo.edu
admission.valpo.edu
scholar.valpo.edu
*.ezproxy.valpo.edu
www.valpo.edu
photos.valpo.edu
archivesspace.valpo.edu
scholar.valpo.edu
*.valpo.edu
photos.valpo.edu
archivesspace.valpo.edu
transact.valpo.edu
crowdfunding.valpo.edu
guild.valpo.edu
photos.valpo.edu
scholar.valpo.edu
admission.valpo.edu
alumni.valpo.edu
scholar.valpo.edu
libguides.valpo.edu
photos.valpo.edu
guild.valpo.edu
support.valpo.edu
vpn.valpo.edu
photos.valpo.edu
tutor.valpo.edu
alumni.valpo.edu
blackboard.valpo.edu
*.ezproxy.valpo.edu
www.intra.valpo.edu
support.valpo.edu
admission.valpo.edu
*.valpo.edu
libguides.valpo.edu
*.valpo.edu
scholar.valpo.edu
libguides.valpo.edu
photos.valpo.edu
support.valpo.edu
catalog.valpo.edu
scholar.valpo.edu
vudc3.valpo.edu
scholar.valpo.edu
libguides.valpo.edu
libguides.valpo.edu
lawlibguides.valpo.edu
archivesspace.valpo.edu
support.valpo.edu
photos.valpo.edu
scholar.valpo.edu
galileo.valpo.edu
*.valpo.edu
alumni.valpo.edu
movies.valpo.edu
lawlibguides.valpo.edu
collections.valpo.edu
transactdsr.valpo.edu
transact-test.valpo.edu
onlinecybersecurity.valpo.edu
*.valpo.edu
lawlibguides.valpo.edu
lawlibguides.valpo.edu
scholar.valpo.edu
archivesspace.valpo.edu
www.intra.valpo.edu
archivesspace.valpo.edu
guild.valpo.edu
datavu.test.valpo.edu
libguides.valpo.edu
*.valpo.edu
www.intra.valpo.edu
*.valpo.edu
*.valpo.edu

Certificate

The complete raw certificate details for archivesspace.valpo.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AY4OxmljARcayYYat0A
iXEWS4Oawm+21PpIrzcgRBeSCfkWkVZ+0jjgOUM56N3L3CHDE31yeSgy0ahHUNkb
6jLt5EupLRhrPBgbJ8uYYKG65RL9NNkF1qW06PIwqilFGMLHkQ9SGbVDrxpKbNdy
r0jmovu6Uzv/fVoHy8HUUeTNi9BI5no/2h/ji+OdPiHDIKFT4J64+zZwkn0Y9UJY
UDBbMftjqMGVfKGZPf+v3lHskGi7KMnFr7uk77GlUAJ4hcHsfRimVSTQoLkaS+Xs
TdRGQa9knG7TCGDCo0fmwRMS5VCD4ubcEWajbjPF7l5b0j+g2Ko6m2XVaQmzpH84
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292442208299928733437761484102796060458583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 02:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 02:33:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archivesspace.valpo.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29290353776736379850674616891820586830999322598756908038076148890584914525033552268779851785920689262985866173870757014941791130642280959523383353108340577935585331575578911002514359393716352746187888475698664571823165979370276005499686918029697761894134167156274882794009696473735822879961148332252394491480576645155135858302799152106850093506902442391163474792821438614788481223832904961440828765695629128580227301328787937185061242839560140518238060268616167300811278606694651333496343755230464390512673303740407823430969788016073659627044148599339380950686425756044200244047130699756606439650069435005836860537039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da221023c06816cba9a999bbd0af38406c3e359d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archives.valpo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivesspace.valpo.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168dfc439da0000040300483046022100c7080501b2a11c79386a6f23e2155e44e4ae00fd2af29e076c2361371ff479bc022100a8c2b5ab46b8a8419ca4200cb1076c953f8bd26f8373072c308658b7d01fbc6f007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168dfc43b87000004030048304602210097504935f97be8f5fdd6e12c3bb182bb058490901c7c0052448840381acce226022100fb2224e59c0db41bc66be447256583dfe85021682511dce55b662db04cbf0478
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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