brochure.cua.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:f6:f2:31:5a:43:7f:c8:4b:2f:62:97:31:ee:3b:2d:40 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brochure.cua.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:f6:f2:31:5a:43:7f:c8:4b:2f:62:97:31:ee:3b:2d:40
Serial Number (int): 306582377852636967030370566777041508314432
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:83:88:b7:96:ea:5f:cc:64:b5:35:df:37:0a:c8:b4:af:41:41:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:52:4d:7a:eb:41:8f:e4:39:a5:6c:00:9a:24:a0:28:59:9f:25:3d
Fingerprint (sha256): 32:86:2d:15:de:43:73:21:64:8d:a0:31:f9:bc:d5:a6:a8:5b:63:24:7b:c9:f8:56:6c:70:e5:3a:c6:c4:85:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brochure.cua.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brochure.cua.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brochure.cua.edu

Other certificates including the domain name cua.edu

(limited to 100 certificates)
brochure.cua.edu
us-east-1-san5.blackboard.com
css.cua.edu
discover.cua.edu
web.offcampuspartners.com
*.cua.edu
libguides.law.cua.edu
columbo.law.cua.edu
*.cua.edu
honoringmary.cua.edu
collegiatelink.campuslabs.com
www.lib.cua.edu
libguides.law.cua.edu
techsupport.cua.edu
star.lib.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
ts-wiki.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
www.offcampuspartners.com
honoringmary.cua.edu
secure-cua.cua.edu
n003.offcampuspartners.com
guides.lib.cua.edu
star.lib.cua.edu
goabroad.cua.edu
brochure.cua.edu
web.offcampuspartners.com
libguides.law.cua.edu
*.cua.edu
cardinalstation.cua.edu
iseadmin01.cua.edu
n003.offcampuspartners.com
us-east-1-san5.blackboard.com
archives.lib.cua.edu
www.vsl.cua.edu
hcmcs.cua.edu
libguides.law.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
star.lib.cua.edu
css.cua.edu
offcampuspartners.com
star.lib.cua.edu
techsupport.cua.edu
mail.vsl.cua.edu
us-east-1-san5.blackboard.com
archives.lib.cua.edu
home.cua.edu
nest.cua.edu
guides.lib.cua.edu
mail.vsl.cua.edu
nest.cua.edu
hcmcs.cua.edu
*.cua.edu
wirelessauth.cua.edu
techsupport.cua.edu
libguides.law.cua.edu
hcmcstst.cua.edu
us-east-1-san5.blackboard.com
us-east-1-san5.blackboard.com
css.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
www.offcampuspartners.com

honoringmary.cua.edu
us-east-1-san5.blackboard.com
www.lib.cua.edu
brochure.cua.edu
vpn.vsl.cua.edu
css.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
mail.cua.edu
descubre.cua.edu
*.cua.edu
us-east-1-san5.blackboard.com
popeindc.cua.edu
libguides.law.cua.edu
secure.cua.edu
www.vsl.cua.edu
columbo.law.cua.edu
libguides.law.cua.edu
goabroad.cua.edu
discover.cua.edu
css.cua.edu
mobile.cua.edu
guides.lib.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
*.cua.edu
web.offcampuspartners.com
mail.vsl.cua.edu
guides.lib.cua.edu
Collegiatelink.Campuslabs.com
web.offcampuspartners.com
Collegiatelink.Campuslabs.com
goabroad.cua.edu

Certificate

The complete raw certificate details for brochure.cua.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA00DlE/wEzgVPPHejjAqB
8iawwSQSCqhDZgHi2jXrk7ltGYc+gx1tJ//teaUJuCcctOvn5BrTJnibMhhzqihq
aWeZkgQeVWwzQ/xW4HrRo73vAyd/7QPjTrJiwvHTKE/fTzcfqSPiavtNYIOen+pw
CIMXi/66D0/SV44pvp041fGpMFYcccDx7UUhNiYYp8AkUc5og8CFD9nuJhlRy0Xi
UWdS1CCqmnXFuF8T8D50gkmpGW/jgp2X/hGgM5mD/HxXEcHsIaSfx3MktT1z5Qpc
PV+7kgWfsHG7ImvqQQBYFLYQAUgw3FBKUEe2TXw1gSo+zQLep6N4sTC65o60sAlV
UmnWuIXslUPCYryg1TqfDWvhGs0N/Rj/+dmwfZ68DP1SyhimF+itDnTt3Hxhlk/s
lXQushtrikv8uky1gYsMK8RBZJoGHWS2vPUxp/Nt2NnJltbr9LneyXhI6DhYxDxa
RDzDvDfsT6LJWSgp91U5Zt5+J6v+ToaYWV7QtMs9YSNh8LO7EX7WWE8wGboWWiW+
ZwWdUSTUPVOVtUdqDcpwFZBmptrSeLFfrOmS6X9XA21+KLXjfTZR1/1mjy8xlcLV
scJLGXDv2crL3IcF+bgz69TNtreortyIPUz8cYAArkP5k8eFyH6kYa6gAUbKLWEw
exM+7uJFLaq+C3K8FaaHcp0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306582377852636967030370566777041508314432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 14:46:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 14:46:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brochure.cua.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861839069576861932784650909119094842053129373504137502037687891242658187902764794904835388248972392297887148993736371112724887803476842130631104247085524031439732583508711495344449728753479927911173721840611576302460970937471452690239076658134107347372464888290874179171793572233091979642156701925231630513358937579805933682703790218563312433973111639831203510713365941695329338144278816987913204186796278985726495001806307395749550096141806237436057855116802841095972106289396912291187120463737524818206651094323093382359485567666157274192592571598494325509299785488685270202029152725491920617843005998381167278204746920169451745782387596451481159864786998782385193747345699365016436514511235957738675212248745609379518179188209379719844006621673744878197833185482686715509214651694336888718444503963810941979454218839535007511735516124638472571773457186455616890446111841621723090401076312573428511979829785942297560068674462305969493536356213399969524211445314666722211733657046950026882934252394082709380822390073948043278496259384354050537818570038494934853123372376462869307295119082953080259043322535069511059307807397895194659068185286700973945132775517431791133834231197979921539536915999677714873934900207000746334657933981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a98388b796ea5fcc64b535df370ac8b4af414178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.cua.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166cace1efc0000040300483046022100ff1a7affc7d23d6370ec59cbdcc972f1e30757c776fc9a3efab736a4e891b7bf022100f3778a647a2e7c343860bf8d5a74ce9962ae179124fc974499c334ec6bc249df007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166cace1f0e0000040300483046022100c84977b96b06caeee7d159c9c295131b4c36a4e8e612c6189ef3b1c99869695f022100f101368a2b4055bca5779859572e39468e551880f8ff3e3fa3083bba73fb0a79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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