admissions.colby.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d9:b3:cb:d1:33:35:8c:1f:54:f0:72:6e:b4:20:37:35:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admissions.colby.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d9:b3:cb:d1:33:35:8c:1f:54:f0:72:6e:b4:20:37:35:ea
Serial Number (int): 422529407439473231223828351639929461618154
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:bf:ad:47:35:5f:a5:a7:69:43:c1:38:7c:7f:d0:2c:c1:09:a6:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:ef:44:dc:d0:7e:e8:1d:4a:0c:d1:09:7d:46:ed:7f:d6:42:79:c2
Fingerprint (sha256): 31:d7:22:80:91:43:da:e5:07:38:cc:04:d3:a4:34:84:42:cc:6c:e6:17:16:5b:2d:e0:da:41:ae:cb:e0:cf:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admissions.colby.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admissions.colby.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admissions.colby.edu

Other certificates including the domain name colby.edu

(limited to 100 certificates)
sni.cloudflaressl.com
alumni-secure.colby.edu
davisconnects.colby.edu
admissions.colby.edu
its-status.colby.edu
oktapreview.colby.edu
cluster2.technolutions.net
*.colby.edu
bookplates.colby.edu
vrppdt0.colby.edu
librarysearch.colby.edu
idp.colby.edu
dns.sterda.com
web.colby.edu
ems.colby.edu
vrppdt0.colby.edu
sni.cloudflaressl.com
xenapp.colby.edu
moodle.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
cluster2.technolutions.net
sni.cloudflaressl.com
schupfarts.colby.edu
web.colby.edu
its-status.colby.edu
admissions.colby.edu
its-status.colby.edu
vwpsfs0.colby.edu
dns.sterda.com
its-status.colby.edu
its-status.colby.edu
sni.cloudflaressl.com
news.colby.edu
digitalcommons.colby.edu
dns.sterda.com
xen.colby.edu
vwpdevcon1.colby.edu
its-status.colby.edu
pgpserver1.colby.edu
sni.cloudflaressl.com
clearpass.colby.edu
alumni-secure.colby.edu
sni.cloudflaressl.com
view.colby.edu
its-status.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
cluster2.technolutions.net
terradotta.colby.edu
moodle.colby.edu
its-status.colby.edu
vwpjira1.colby.edu
its-status.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
video.colby.edu
cps.colby.edu
admissions.colby.edu
cluster2.technolutions.net
sni.cloudflaressl.com
okta.colby.edu
personal.colby.edu
cluster2.technolutions.net
digitalcommons.colby.edu
sni.cloudflaressl.com
cluster2.technolutions.net
sni.cloudflaressl.com
idpdev.colby.edu
its-status.colby.edu
moodle.colby.edu
sni.cloudflaressl.com
cxweb.colby.edu
archivesspace.colby.edu
citrix.colby.edu
cluster2.technolutions.net
cluster2.technolutions.net
colby.edu
idp.colby.edu
cxweb.colby.edu
its-status.colby.edu
its-status.colby.edu
its-status.colby.edu
web.colby.edu
personal.colby.edu
cluster2.technolutions.net
its-status.colby.edu
my.colby.edu
its-status.colby.edu
mcmi.colby.edu
ems.colby.edu
its-status.colby.edu
vpn-old.colby.edu
*.pfsnr.colby.edu
sni.cloudflaressl.com
admissions.colby.edu
its-status.colby.edu
dns.sterda.com
its-status.colby.edu
lunderinstitute.colby.edu

Certificate

The complete raw certificate details for admissions.colby.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXw3AssE/bV4o0bYdkOv
RE5zJ1CtpYaDYqim24kR7XlHNk/5WtWiBaYDJTQmXHk4Ut+/j4svWJD6QeDs+Xv4
0kU+6RMq+Q5l3LNifKod73o3TkozxvwiVr548yclawPGSwbJLLcvTOyhw6OHDSdA
CKd8ytR2yRU42SS4JbEWSuDT8eHSD+NDMg3SWrOPCpHqmn3QsafpvR267elGgmpV
rWCVfTtiAte2k3GIPBrNZ4X9jeV8h3cU1jHiIvxEXssO+TQEQVj3Vc0CW+wx1QU6
NkjMGaXVI66oC3eLwIv9GebomudJUTcwyte24jCJnYdNApC92cZopRnnQOdcyf3R
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422529407439473231223828351639929461618154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 05:12:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 05:12:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admissions.colby.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22405432622377957725684743425409075202053094815198584986649015467161237459574759123686640835447506960208247442164519156283412265612732676196472218335113524582638746713586284119424153668408414586684558988393381140836309917996053153901323244944339494689930721556374370002821534655680900203980279849081150064987536262731437440320724461384098298762727404578179547991178308450300419497639055790875384204240166752142448311112532762382488878224888116478148278276131501722740961599961187603494929975551897860173711075493055784251202694885889421043182353930546422443036162872010323172280039869896717744056155631598898429940111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dbfad47355fa5a76943c1387c7fd02cc109a666
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.colby.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001669a6758d30000040300463044022044e0f04b6cf54fa9f5d448a93e1bcd4f7db88e565a387ab60122c7a3fd97675d02207990c06879f6072876d5dddd4f07c0a8cea88db8c83c0c33fb53d0c6cb1dfeb0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001669a6758e20000040300473045022100fd4d94c00e5ecee4b46ce2c1bc05282b40521cdfd5b207f0ed7206bb086c8e550220654043961d2766d6b1999875ea6bee7a1c08291aae08299976417a46a0bcfb97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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