aph.cenmi.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:50:46:c4:e4:7c:fc:ff:36:63:98:87:a7:87:d2:13:11:6a was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aph.cenmi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:46:c4:e4:7c:fc:ff:36:63:98:87:a7:87:d2:13:11:6a
Serial Number (int): 375765801364897261140637648961378689683818
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:1d:74:8e:42:c4:a1:27:84:69:2c:cf:c5:f9:d6:df:40:25:ab:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:92:4f:a1:10:e9:96:82:ea:c8:27:b8:50:66:a7:75:9f:dd:d7:b3
Fingerprint (sha256): 30:f5:93:dd:5c:85:e4:4f:98:0b:90:40:fb:1e:08:be:2d:58:bf:06:b4:c9:5f:00:17:92:8c:c3:95:49:ce:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aph.cenmi.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aph.cenmi.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aph.cenmi.org
mail.aph.cenmi.org
www.aph.cenmi.org

Other certificates including the domain name cenmi.org

(limited to 100 certificates)
citeak.multidevcom.uaf.edu
*.cenmi.org
chns168.courseresource.yale.edu
club.kjzz.org
sems.cenmi.org
cen.staging.cenmi.org
5093108584808448-fe4.pantheonsite.io
*.cenmi.org
chns168.courseresource.yale.edu
5752142325350400-fe1.pantheonsite.io
chns168.courseresource.yale.edu
5093108584808448-fe4.pantheonsite.io
cms.legacy.com
5644101080842240-fe2.pantheonsite.io
aph.cenmi.org
msemp.staging.cenmi.org
d7.cmc.edu
chns168.courseresource.yale.edu
cen.staging.cenmi.org
aph.cenmi.org
aph.cenmi.org
miblsi.staging.cenmi.org
miblsi.staging.cenmi.org
aph.cenmi.org
cenmi.org
5644101080842240-fe2.pantheonsite.io
5757952401080320-fe2.pantheonsite.io
citeak.multidevcom.uaf.edu
*.cenmi.org
citeak.multidevcom.uaf.edu
cen.staging.cenmi.org
*.cenmi.org
5752142325350400-fe1.pantheonsite.io
host2.cenmi.org
5644101080842240-fe2.pantheonsite.io
aph.cenmi.org
5752142325350400-fe1.pantheonsite.io
5752142325350400-fe1.pantheonsite.io
5644101080842240-fe2.pantheonsite.io
connect.iadb.org
citeak.multidevcom.uaf.edu
d7store.juilliard.edu
mitsapps.cenmi.org
miblsi.staging.cenmi.org
cmmb-portal.cmmb.org
*.cenmi.org
citeak.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
connect.iadb.org
5752142325350400-fe1.pantheonsite.io
cenmi.org
covid.usmle.org
cen.staging.cenmi.org
5752142325350400-fe1.pantheonsite.io
cloudapp.appcelerator.com
aph.cenmi.org
5644101080842240-fe2.pantheonsite.io
covid.usmle.org
5093108584808448-fe4.pantheonsite.io
chns168.courseresource.yale.edu
coursepress-dev2.yale.edu
aph.cenmi.org
*.cenmi.org
5644101080842240-fe2.pantheonsite.io
*.cenmi.org
citeak.multidevcom.uaf.edu
5644101080842240-fe2.pantheonsite.io
5644101080842240-fe2.pantheonsite.io
5644101080842240-fe2.pantheonsite.io
cen.staging.cenmi.org
cenmi.org
citeak.multidevcom.uaf.edu
msemp.staging.cenmi.org
citeak.multidevcom.uaf.edu
mdeliotest.staging.cenmi.org
rtsl.staging.cenmi.org
cenmi.org
cms.legacy.com
aph.cenmi.org
chns168.courseresource.yale.edu
msemp.staging.cenmi.org
citeak.multidevcom.uaf.edu
host3.cenmi.org
cenmi.org
chns168.courseresource.yale.edu
maf.staging.cenmi.org
seac.staging.cenmi.org
seac.staging.cenmi.org
maf.staging.cenmi.org
aph.cenmi.org
rtsl.staging.cenmi.org
covid.usmle.org
chns168.courseresource.yale.edu
sems.cenmi.org
cmmb-portal.cmmb.org
cenmi.org
citeak.multidevcom.uaf.edu
aph.cenmi.org
5752142325350400-fe1.pantheonsite.io
cen.staging.cenmi.org

Certificate

The complete raw certificate details for aph.cenmi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBmfVjvXHp+WwuEmNWjz
81wL+gvOErGvsDo+CbSOCuD4ieB8P16sYPOnwZKBnTLgpCSOxxQugG8kutvzJg4e
ofUGHCc25sW8QOdLno2Wkv/HWFYpMfABeyMf77ojEf1rrOEQ3Ya6b2w4UR4V0TXC
RDJXqwDfOBiJABlQDZJVnSz5xJO5LYZUc7A1gsReR6vmr9zOdgsCdUvrkeIG1Y6V
U3zNWI7ILprENaSX+CGazeJn3wOQss0OAcXSfamkYBcJMwLqPU3AXFWCYEMIG2Nx
ngMf3GuvLRJTgTpvVefuYNJxea8LBm+wxfNAi3eMe2rFJGnkU5Bw+0uEeIVcDWji
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375765801364897261140637648961378689683818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 14:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 14:01:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aph.cenmi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23240482994823511674220104986380749683025927108440505986280020600231778516885614447814774433555449880466641566711747878118378048125315202133894717092369865820203347603651776298156013351916731408766384638921278605874218501237687580858932284583892600312607986646015490406838342762566893889116213182301635266155206837730880228839594063129528456529636811952169939470518180328318363017318473205297295656494003240802050022106639188422776856284909545439129313466243427608925937546095325965554729957297887429689164981804744251641962238348392941295018959720955212773261595250141658045638292401314918962937957572746516175053459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e1d748e42c4a12784692ccfc5f9d6df4025abd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aph.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aph.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aph.cenmi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ad5c2ae7800000403004830460221008b713a87e01d61959782a4a84eedc20d063a376541d5404c365eef3842371a17022100d07b44417dd9f6939c64cfbc7dc95ebad0d139824ce897fdbc39f538fb8f2e9c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ad5c2ae7100000403004630440220247c50250dae2e2e7c67cef7d0973c79befff97ca352bbbbc8d427e4e0bd484d02201c40827d9d8f1d48efa634eae19ee36726016e16b11870aa50acfc48c9b1337a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00866a309cdea6a84aa7c19b9a9d098d17d6c34d67a465fbe77f4c0e86a1a2e4ed2dca6c985295be117b85d6b0ca44476c8f6c5fad04b6975ecdcfce353df48e15a09a563fcf6ec432f84df86b6565af30b85b9ba78a2341ac431eb8137f43119dfd849483d964727a05152b4bf1c046caeecbfa4148534f2bef5e6007269b15456a1c028204c6deb2dfe98dce7f2de496b1b94ddf795483348067c05614210d2d334937768b109c3e5574c8ee0d2ee7f6e82fc4dc21d383d6bb876d233e4fafb7ffd8840f58e748fbc6a713638dbfbdec8584f3deb12e6cb756b3b4b8e287cb455eafc93b73a6e7dcd0291547cf68db05569f51a119982a2bb9ecb7e27a07f57f