alumni.solano.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:f8:3f:ac:50:a5:c2:6d:71:5d:00:6c:14:35:12:a7:09 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alumni.solano.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:f8:3f:ac:50:a5:c2:6d:71:5d:00:6c:14:35:12:a7:09
Serial Number (int): 272896155056292460969070919414074903275273
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:f5:85:0a:a3:a6:f0:8c:61:99:5a:43:dd:fb:1a:40:65:0f:81:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:3f:6e:09:4b:5e:72:76:5e:06:c2:86:ee:2d:f4:57:2f:f7:08:2b
Fingerprint (sha256): 42:21:58:28:4d:17:1d:29:dd:1d:2f:4a:e6:ad:e4:d1:a5:48:f8:30:da:6c:65:fa:d4:ec:da:0d:bd:df:a2:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alumni.solano.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumni.solano.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumni.solano.edu
www.alumni.solano.edu

Other certificates including the domain name solano.edu

(limited to 100 certificates)
alumni.solano.edu
*.ezproxy.solano.edu
foundation.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
foundation.solano.edu
status.slightlydifferent.co.nz
helpdesk.solano.edu
foundation.solano.edu
oromet.solano.edu
alumni.solano.edu
libguides.solano.edu
libguides.solano.edu
alumni.solano.edu
foundation.solano.edu
heartland.solano.edu
foundation.solano.edu
barracuda.solano.edu
papercut.solano.edu
libguides.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
libguides.solano.edu
banportals.solano.edu
dropbox.solano.edu
ssomanager.solano.edu
foundation.solano.edu
helpdesk.solano.edu
my.solano.edu
alumni.solano.edu
www.solano.edu
foundation.solano.edu
www.solano.edu
jobs.solano.edu
huntington.solano.edu
foundation.solano.edu
sutter.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
alumni.solano.edu
cashnet.solano.edu
alumni.solano.edu
vpn.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
foundation.solano.edu
ssomanager.solano.edu
cascade.solano.edu
alumni.solano.edu
vjo-ise-psn.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
appointments.solano.edu
ssb.solano.edu
degreeworks.solano.edu
foundation.solano.edu
techstatus.solano.edu
alumni.solano.edu
libguides.solano.edu
my.solano.edu
alumni.solano.edu
alumni.solano.edu
foundation.solano.edu
ssomanager.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
banportals.solano.edu
ssomanager.solano.edu
dropbox.solano.edu
foundation.solano.edu
*.ezproxy.solano.edu
*.ezproxy.solano.edu
foundation.solano.edu
alumni.solano.edu
foraker.solano.edu
foundation.solano.edu
*.solano.edu
alumni.solano.edu
foundation.solano.edu
ssb.solano.edu
alumni.solano.edu
my.solano.edu
libguides.solano.edu
foundation.solano.edu
foundation.solano.edu
appointments.solano.edu
adminpages.solano.edu
matterhorn.solano.edu
alumni.solano.edu
vpn.solano.edu
clockwork.solano.edu

Certificate

The complete raw certificate details for alumni.solano.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272896155056292460969070919414074903275273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 22:28:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 22:28:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumni.solano.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815422920815239744006276365699635325007835599974624525183664318723023255128524925292648850085425712849611509328663124889541147426781909290648537591588657053528350995131571877923900584162564423791014831940948260881283861862468631580196323817888668969140607848383824564534634305580300224740077989656025448036839334683896991103367255360556238292252018815242269907670613613413982740893816179372043068495103384637671551356314611159577993657560890998191770050721961090245226453575001324729422570868172955393231664232176944725541526371543052850047740635936791212930790686307170927654261146209910420123787113964105611781131842794860238532538661759437415372650279011792690957048170650407404082350057223734283015714813248188952137721283133400944112780314756881328427640626973384487593945212974905297412376737024160635605696365658577166811216458366601409070982045129796917212089920391059664069035368494380107595386405442131756687274290212660012586127092027364256838141059040193380723409537383749691462184072033840492481647105917917581457774496376539744666459197107008138587431369655904738825263202229734684269128044519658376533165619779388566576380037955962857101917674118554194504149498962627681122317108233017912368957116606675364972388888497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87f5850aa3a6f08c61995a43ddfb1a40650f81fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.solano.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.solano.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169cbc83664000004030047304502203c0906caec51ed415a9500f1eefa8082889cba65f44a6ea7179f6fff152d244e022100de1164a8946d9d8f8ab5a8a5f9de5e5ee6094605e386d94a36efbcb909e3724000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169cbc836a10000040300483046022100b6e7467bf7abcf9c3f7af14cc49d9bb00bffd4e21955560e9edca2c9464b1531022100bdc9fb00d198aa4f6e3d3c8df71995dfd0df4ad6c0b733811d13ee20a3c76dac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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