tedx.menlo.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a1:d7:f0:e0:4f:c1:77:52:93:96:52:07:a6:3e:b1:56:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tedx.menlo.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:d7:f0:e0:4f:c1:77:52:93:96:52:07:a6:3e:b1:56:ba
Serial Number (int): 316409353589470288744405842217012477122234
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:6c:af:08:33:ad:d4:18:e6:2e:58:dc:d0:f5:75:82:2f:13:dc:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:99:6a:03:e4:b2:31:77:c1:74:7f:5a:5d:66:c4:1b:f9:b4:0f:5e
Fingerprint (sha256): 3f:0f:fc:f6:d9:98:6a:ab:70:22:9d:85:81:ec:e1:f3:01:49:27:11:ed:3b:03:c0:46:68:1f:66:fe:8e:a8:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tedx.menlo.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tedx.menlo.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tedx.menlo.edu

Other certificates including the domain name menlo.edu

(limited to 100 certificates)
itsupport.adhocteam.us
servicedesk.oiplans.com
helpdesk.ytl.com
servicedesk.oiplans.com
helpdesk.ytl.com
helpdesk.aaanm.org
servicedesk.smileservicedesk.co.uk
campusstore.menlo.edu
tedx.menlo.edu
my.menlo.edu
helpdesk.ytl.com
collegiatelink.studentvoice.com
helpdesk.ytl.com
servicedesk.oiplans.com
collegiatelink.studentvoice.com
campusstore.menlo.edu
servicedesk.veritechkw.com
helpdesk.brisbanemarkets.com.au
mc-jicsprod.menlo.edu
ithelpdesk.splashbi.com
ithelpdesk.splashbi.com
helpdesk.pcrm.org
helpdesk.ytl.com
helpdesk.engevia.com
learnmore.menlo.edu
campusstore.menlo.edu
support.first-epdc.com
help.ne-ps.net
helpdesk.ytl.com
portalitsuporte.griner.co.com
servicedesk.oiplans.com
j1web.menlo.edu
helpdesk.ytl.com
itservicedesk.inspireer.com
servicedesk.oiplans.com
mole.menlo.edu
netpartner.menlo.edu
connect.menlo.edu
helpdesk.ytl.com
*.menlo.edu
www.menlo.edu
help.dawnlight.com
helpme.dubaidevelopments.com
helpme.dubaidevelopments.com
netpartner.menlo.edu
support.deltacrp.com
campusstore.menlo.edu
tedx.menlo.edu
soporte.grupoxxi.com.co
netpartner.menlo.edu
netpartner.menlo.edu
helpdesk.engevia.com
helpdesk.ytl.com
support.first-epdc.com
itsd.acqueon.com
support.first-epdc.com
portalitsuporte.griner.co.com
helpme.dubaidevelopments.com
portalitsuporte.griner.co.com
www.tedx.menlo.edu
helpdesk.ytl.com
helpdesk.ytl.com
*.menlo.edu
www.tedx.menlo.edu
itsupport.adhocteam.us
vdisecurity.menlo.edu
helpdesk.ytl.com
netpartner.menlo.edu
collegiatelink2.campuslabs.com
ithelpdesk.holmes-hills.co.uk
portalitsuporte.griner.co.com
campusstore.menlo.edu
helpme.dubaidevelopments.com
helpdesk.ytl.com
servicedesk.oiplans.com
servicedesk.eis-inc.com
support.opiant.com
servicedesk.veritechkw.com
helpdesk.ytl.com
support.lrp.com
www.menlo.edu
tedx.menlo.edu
netpartner.menlo.edu
helpdesk.awazel.com
helpdesk.awazel.com
itservicedesk.sodic.com
netpartner.menlo.edu
helpdesk.ytl.com
helpdesk.brisbanemarkets.com.au
servicedesk.oiplans.com
itsd.acqueon.com
helpdesk.ytl.com
servicedesk.libertydiversified.com
servicedesk.veritechkw.com
helpdesk.ytl.com
mc-ex-hts-01.menlo.edu
collegiatelink.studentvoice.com
helpdesk.ytl.com
helpdesk.pcrm.org
helpdesk.netlinkbus.com

Certificate

The complete raw certificate details for tedx.menlo.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudj+M1AxRbYkmIPH1/eY
FPBfVAve/dFaZNq2ipLdWPqHfxeFzGWyhuK+C9xBJtStOEj6o94G2ocYLfy/gG5V
pJrW4XGnDDQwkXq/RTvLYsP5TB6GAifCOs9EamTILwl5gIOrTicSriuDhAxgQIzv
trZX+vqasua77/r6WVQNz8RlwcBP/D0rMj3IoWW4tOxBZfmcc1Ctb0KfjVm7HR+B
TTyeTZZHRm5IacSWqmPRdxTFcQ5wV8NK4rfn4f6EydcXkFRQwLONZ9TcWO98Q561
sYav4CDrrePJ4Fg4rwn3uPxAQsHNRkWKZAiRsa4r3xpAyjVtLimdbThq2YWZLp/5
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316409353589470288744405842217012477122234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 00:29:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 00:29:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tedx.menlo.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23461089640528280900573479769351866941355682681711841742402810219356314546961987828669957446503134517501602772318895242564004109891188859763312380416924162910957756229240988156489909239653126211324156384152199411657787972719258894804185849810946747173544039000993039859309179087668456503758566065495696677142676552362072103283464180330648096879739017107722888225171113072738387735101312579239828347240237674907662737041285600703901579716491929959340035957963311200227848930669891180436948773202422917545223250217664099746562400947876422530784940138420466890611797386122851929050228001209474707706894038406994350569749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							996caf0833add418e62e58dcd0f575822f13dc4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedx.menlo.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e340851ff0000040300463044022059e31f670183a93340f23af254a1a894274a070c49ec8d552e3197d9900f8e4502202e3dd6b9c46318aa25cdcc3520477e7712fd661ae34aa703c89b54e02965bf1d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e340852540000040300483046022100ac47159aed55d2efaff1d16b5adba12237882f8cc070077c9d21bd56f8db541a022100ca73fa322ee5f31f90231a450f8e93644f003189ecb7ccbc1d2098bda8f701f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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