brochure.cua.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4b:fb:10:c3:5c:f0:09:0e:e8:39:0e:05:f2:20:ee:80:88 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brochure.cua.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:fb:10:c3:5c:f0:09:0e:e8:39:0e:05:f2:20:ee:80:88
Serial Number (int): 374304044512236272804064043319384439947400
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:83:88:b7:96:ea:5f:cc:64:b5:35:df:37:0a:c8:b4:af:41:41:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:79:10:53:68:40:63:0e:52:5c:a7:f9:29:67:24:e6:72:06:41:d1
Fingerprint (sha256): 36:85:90:04:59:bc:56:3c:94:73:d0:a9:24:36:e3:10:04:78:be:e4:53:ca:c6:17:a5:fd:99:04:1d:31:05:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brochure.cua.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brochure.cua.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brochure.cua.edu

Other certificates including the domain name cua.edu

(limited to 100 certificates)
brochure.cua.edu
us-east-1-san5.blackboard.com
css.cua.edu
discover.cua.edu
web.offcampuspartners.com
*.cua.edu
libguides.law.cua.edu
columbo.law.cua.edu
*.cua.edu
honoringmary.cua.edu
collegiatelink.campuslabs.com
www.lib.cua.edu
libguides.law.cua.edu
techsupport.cua.edu
star.lib.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
ts-wiki.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
www.offcampuspartners.com
honoringmary.cua.edu
secure-cua.cua.edu
n003.offcampuspartners.com
guides.lib.cua.edu
star.lib.cua.edu
goabroad.cua.edu
brochure.cua.edu
web.offcampuspartners.com
libguides.law.cua.edu
*.cua.edu
cardinalstation.cua.edu
iseadmin01.cua.edu
n003.offcampuspartners.com
us-east-1-san5.blackboard.com
archives.lib.cua.edu
www.vsl.cua.edu
hcmcs.cua.edu
libguides.law.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
star.lib.cua.edu
css.cua.edu
offcampuspartners.com
star.lib.cua.edu
techsupport.cua.edu
mail.vsl.cua.edu
us-east-1-san5.blackboard.com
archives.lib.cua.edu
home.cua.edu
nest.cua.edu
guides.lib.cua.edu
mail.vsl.cua.edu
nest.cua.edu
hcmcs.cua.edu
*.cua.edu
wirelessauth.cua.edu
techsupport.cua.edu
libguides.law.cua.edu
hcmcstst.cua.edu
us-east-1-san5.blackboard.com
us-east-1-san5.blackboard.com
css.cua.edu
n003.offcampuspartners.com
n003.offcampuspartners.com
www.offcampuspartners.com

honoringmary.cua.edu
us-east-1-san5.blackboard.com
www.lib.cua.edu
brochure.cua.edu
vpn.vsl.cua.edu
css.cua.edu
brochure.cua.edu
us-east-1-san5.blackboard.com
mail.cua.edu
descubre.cua.edu
*.cua.edu
us-east-1-san5.blackboard.com
popeindc.cua.edu
libguides.law.cua.edu
secure.cua.edu
www.vsl.cua.edu
columbo.law.cua.edu
libguides.law.cua.edu
goabroad.cua.edu
discover.cua.edu
css.cua.edu
mobile.cua.edu
guides.lib.cua.edu
us-east-1-san5.blackboard.com
web.offcampuspartners.com
*.cua.edu
web.offcampuspartners.com
mail.vsl.cua.edu
guides.lib.cua.edu
Collegiatelink.Campuslabs.com
web.offcampuspartners.com
Collegiatelink.Campuslabs.com
goabroad.cua.edu

Certificate

The complete raw certificate details for brochure.cua.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374304044512236272804064043319384439947400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 15:22:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 15:22:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brochure.cua.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861839069576861932784650909119094842053129373504137502037687891242658187902764794904835388248972392297887148993736371112724887803476842130631104247085524031439732583508711495344449728753479927911173721840611576302460970937471452690239076658134107347372464888290874179171793572233091979642156701925231630513358937579805933682703790218563312433973111639831203510713365941695329338144278816987913204186796278985726495001806307395749550096141806237436057855116802841095972106289396912291187120463737524818206651094323093382359485567666157274192592571598494325509299785488685270202029152725491920617843005998381167278204746920169451745782387596451481159864786998782385193747345699365016436514511235957738675212248745609379518179188209379719844006621673744878197833185482686715509214651694336888718444503963810941979454218839535007511735516124638472571773457186455616890446111841621723090401076312573428511979829785942297560068674462305969493536356213399969524211445314666722211733657046950026882934252394082709380822390073948043278496259384354050537818570038494934853123372376462869307295119082953080259043322535069511059307807397895194659068185286700973945132775517431791133834231197979921539536915999677714873934900207000746334657933981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a98388b796ea5fcc64b535df370ac8b4af414178
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brochure.cua.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167ffec7a4f0000040300473045022057d52641c8995b0cd04541f513b7dd03be3ced51fcc97e1e88b7d1ba25eda6c5022100e8d3b34fc6f1eebcab4930e4d1b37644e5ce621c2e241adc847eb1ef0a579a2f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167ffec7a420000040300463044022052ac3d82a49ff0b7e73a754a252c2468070e671930341ce73e80c8a31114fd6002200300fe2a7c4a847126517d5c2f0e353fb1ee8634b052dd05b85a628f0516217e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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