foundation.solano.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:9a:c0:d1:80:ac:89:78:39:7f:28:9c:93:0a:24:51:87 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foundation.solano.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:9a:c0:d1:80:ac:89:78:39:7f:28:9c:93:0a:24:51:87
Serial Number (int): 345592304706318465723953208160945959096711
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:4b:51:73:4f:c9:84:76:2b:e2:f5:c5:44:3f:73:da:06:e8:9b:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:7e:80:0e:9f:5e:89:0b:9f:76:00:7e:1d:bc:cb:2f:6c:26:9d:bd
Fingerprint (sha256): 2f:cb:3b:7c:1c:14:2c:33:3b:af:17:cb:0d:fa:36:66:7b:4c:4b:aa:1a:15:5e:8a:d5:ee:7f:f4:ba:c7:b7:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate foundation.solano.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foundation.solano.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foundation.solano.edu
www.foundation.solano.edu

Other certificates including the domain name solano.edu

(limited to 100 certificates)
alumni.solano.edu
*.ezproxy.solano.edu
foundation.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
foundation.solano.edu
status.slightlydifferent.co.nz
helpdesk.solano.edu
foundation.solano.edu
oromet.solano.edu
alumni.solano.edu
libguides.solano.edu
libguides.solano.edu
alumni.solano.edu
foundation.solano.edu
heartland.solano.edu
foundation.solano.edu
barracuda.solano.edu
papercut.solano.edu
libguides.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
libguides.solano.edu
banportals.solano.edu
dropbox.solano.edu
ssomanager.solano.edu
foundation.solano.edu
helpdesk.solano.edu
my.solano.edu
alumni.solano.edu
www.solano.edu
foundation.solano.edu
www.solano.edu
jobs.solano.edu
huntington.solano.edu
foundation.solano.edu
sutter.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
alumni.solano.edu
cashnet.solano.edu
alumni.solano.edu
vpn.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
foundation.solano.edu
ssomanager.solano.edu
cascade.solano.edu
alumni.solano.edu
vjo-ise-psn.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
appointments.solano.edu
ssb.solano.edu
degreeworks.solano.edu
foundation.solano.edu
techstatus.solano.edu
alumni.solano.edu
libguides.solano.edu
my.solano.edu
alumni.solano.edu
alumni.solano.edu
foundation.solano.edu
ssomanager.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
banportals.solano.edu
ssomanager.solano.edu
dropbox.solano.edu
foundation.solano.edu
*.ezproxy.solano.edu
*.ezproxy.solano.edu
foundation.solano.edu
alumni.solano.edu
foraker.solano.edu
foundation.solano.edu
*.solano.edu
alumni.solano.edu
foundation.solano.edu
ssb.solano.edu
alumni.solano.edu
my.solano.edu
libguides.solano.edu
foundation.solano.edu
foundation.solano.edu
appointments.solano.edu
adminpages.solano.edu
matterhorn.solano.edu
alumni.solano.edu
vpn.solano.edu
clockwork.solano.edu

Certificate

The complete raw certificate details for foundation.solano.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345592304706318465723953208160945959096711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-18 22:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 22:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foundation.solano.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799448868982662914959337305723755285718478237189217085651710557306628163248491339292190904760862323012330455548510159089256440624849260223959498004316723947962532102872843763571431249100856311808706775372798750843669164331056793289670301925696992632701109966190757301824344326538993962300211203309810305572838422445352114687390419054545947238736887329304075852822991432909099763513343941251402831404132099502038105412607059491722473075477567663540862503767455765763501539960043816947799026893624067315089889543479822348720196608388241457138059154942200826027777886502811356035067291723991557301712256335897029643006805712379746388000415530716172404067144404816006465315304776575712908229965982612939325848808965273372713074373840342665765757404441668616533365351250631966383086513896293522685227534710349025737990729393446439265187375588997362329771375565622953427325792635197628175174281341020351500238317366019056938007787111917116752318028486896868296615324157557592887922594413465285247345459562164411087920067824710896029639462808949925159229531660752364303683127962118423450171521306718268762034409837527380306785481947862406076784316147870461952538073523519283095816444394069981075235321130388146762949477249388511001312814563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							234b51734fc984762be2f5c5443f73da06e89b6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.solano.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundation.solano.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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