k-state.campusexperienceapp.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e8:cd:74:a0:c3:38:47:30:64:d5:a8:3a:ff:be:7d:d6:0f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=k-state.campusexperienceapp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:cd:74:a0:c3:38:47:30:64:d5:a8:3a:ff:be:7d:d6:0f
Serial Number (int): 427667750158922653401314359749363980162575
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 02:cc:cc:c3:3b:5b:d7:82:10:a7:b6:e4:53:7b:64:ff:8a:0d:da:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:8e:f1:15:66:4a:e5:85:77:79:e9:75:2a:50:ac:96:4b:6b:89:50
Fingerprint (sha256): 31:23:a7:38:a6:79:70:80:c7:78:66:a4:3d:08:b7:6e:4d:1b:d2:5c:f2:3e:99:e1:36:55:77:c9:8a:21:59:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate k-state.campusexperienceapp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k-state.campusexperienceapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k-state.campusexperienceapp.com
www.k-state.campusexperienceapp.com

Other certificates including the domain name campusexperienceapp.com

(limited to 100 certificates)
www.brockly.app
uwf.campusexperienceapp.com
fau.campusexperienceapp.com
app.cardapp.me
uw.campusexperienceapp.com
uidaho.campusexperienceapp.com
ahmedmsaeed.com
wsu.campusexperienceapp.com
stage.fiu.campusexperienceapp.com
www.pilotage-activite.gan.fr
momentousfiles.com
www.glampbayarea.com
uwsp.campusexperienceapp.com
www.dxmx.net
www.frikkherding.no
orange.app.nossaff.com
uw.campusexperienceapp.com
link.simplify.art
campusexperienceapp.com
afacacasupplychain.com
toda-seitai.com
uw.campusexperienceapp.com
uwm.campusexperienceapp.com
birthdays.onivoro.com
uhm.campusexperienceapp.com
ml.dealescale.com
auth-essentials.avertro.com
universityofnevada-reno.campusexperienceapp.com
uwf.campusexperienceapp.com
qg.ocellisys.com.br
momentousfiles.campusexperienceapp.com
akhmatovafilm.com
unm.campusexperienceapp.com
brianwool.com
neoone.art
www.test.campusexperienceapp.com
campusexperienceapp.com
campusexperienceapp.com
sgbo.be
sugarbaby.sg
www.mes-rendements.com
stewardleadership25.stewardshipasia.com.sg
my.daysie.app
literaryodyssey.com
investment-accounting.resre.bm
www.app.enda-technologies.com
*.campusexperienceapp.com
joekt.dev
uwsp.campusexperienceapp.com
pwa.campusexperienceapp.com
mijn.klikkie.nl
keithemixologist.com
towson.campusexperienceapp.com
unm.campusexperienceapp.com
pdx.campusexperienceapp.com
apif.app
drumssiddharth.com
uhm.campusexperienceapp.com
jacobho.me
ncat.campusexperienceapp.com
hayaipharma.com
k-state.campusexperienceapp.com
forecast.gen.co
towson.campusexperienceapp.com
www.gemmapell.com
rutgers.campusexperienceapp.com
campusexperienceapp.com
*.momentousfiles.com
uwsp.campusexperienceapp.com
dillan.photo
umich.campusexperienceapp.com
corp-site.dev.levii.co.jp
demo.spectralsignal.io
app.catbuyer.com
uhm.campusexperienceapp.com
rooty.dev
ncat.campusexperienceapp.com
fau.campusexperienceapp.com
uwm.campusexperienceapp.com
cu.campusexperienceapp.com
console.baseci.com
uidaho.campusexperienceapp.com
www.giustagenzia.it
www.leichtgewicht.at
wsu.campusexperienceapp.com
dev.vcml.app
novabreeze.net
www.app.homolog.beseed.com.br
haaay.io
ving.parlor.io
www.coixinet.cat
salfordlearning.app
unm.campusexperienceapp.com
unlv.campusexperienceapp.com
ncat.campusexperienceapp.com
jtv.basketballireland.tv
campusexperienceapp.com
nexagrip.co.in
www.dukagas.link
umd.campusexperienceapp.com

Certificate

The complete raw certificate details for k-state.campusexperienceapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3PSdTS+TYyxuzOXOQVs
7K9QiubirJySy0y/EGe2WYin50skqtt8uCwzyZjkamqLbGxR3TQ8D1CeDW81bWkc
PnX9EE9jR0E0WYBj7mWtCNwbkHMJwM63XewTetrvpnZqTkecw1dJKRElAzoOPkiZ
8zsWW6N49LYvkryukRaLk2zAwV17/S48lTEtLNRAkTPxYfNVn2LeuXiYwC8OSE07
cF/unNxuzAmAY9FwNxa8y1/nis1JPHtVJhECgu+xDwlj33ihtKfKOALMwwme1E+M
w7kzglAhJA8e5kksylN484k4eOP9t5uPYwyjdMbMaFH0K/0vOcsxZUVGv9tN6MSm
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427667750158922653401314359749363980162575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 23:04:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 23:04:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k-state.campusexperienceapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21138910935964641155978893605245139565733138121606188154954603245005019291373600086081106671018118167628638476440627227393358522186099533587931238240817261236464169969627704973000572564173795213497584016956278837160093786744344633350652693254891024822169452076704790627047840702351628350442870815170386158818575960363634469029443969344668131671746597302580634810578181097149806048221399943936315293216923906934574992406812462549721806252331392773568159148575657899084391148258458689734339612329088578797969788877065884448793491714513511573926071282482792265871483841775783222995774533289664957614582984508048186582591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02ccccc33b5bd78210a7b6e4537b64ff8a0dda0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-state.campusexperienceapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-state.campusexperienceapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ddc2e1dce000004030047304502210091b18c07e77443cbd9d92e62b18f3d7b1d8ebd11d1143aa29f3ae69f7211cbe7022037ef1b975a76f52d5bfe94eb8dd776a5d02ebbc16793c112d9c88fb05204fc380076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ddc2e1ff50000040300473045022100d54a4c2615eb7d60a391ec7a25a8ef8e3ab408f9753e65d044ba22ed2e758785022079292e565ad316ab13cba3c95243f8d1eb8d70846500c79097b9650825423c8b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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