imagination.tianjinjuilliard.edu.cn

Issued by R3

About this certificate

This digital certificate with serial number 04:67:db:56:ce:a2:03:b5:fb:90:98:65:15:de:a6:6a:dc:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imagination.tianjinjuilliard.edu.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:db:56:ce:a2:03:b5:fb:90:98:65:15:de:a6:6a:dc:cc
Serial Number (int): 383789779179516868032704213805070719573196
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:de:d0:5c:42:98:0c:f6:af:54:56:0e:00:16:54:8a:d0:64:b6:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:e0:4b:32:c3:97:4e:62:23:24:f9:d6:5a:ad:3a:14:6f:b4:b0:57
Fingerprint (sha256): 43:48:78:91:90:87:5c:40:83:c0:8e:a3:c9:42:31:82:b5:2d:bc:e5:67:57:3d:89:32:ef:65:08:b4:81:2c:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate imagination.tianjinjuilliard.edu.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imagination.tianjinjuilliard.edu.cn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imagination.tianjinjuilliard.edu.cn

Other certificates including the domain name tianjinjuilliard.edu.cn

(limited to 100 certificates)
tjs-dev.juilliard.edu
tjs-dev.juilliard.edu
apply.tianjinjuilliard.edu.cn
servicedesk.gerkencompanies.com
tianjin.juilliard.edu
c3helpdesk.c3insurance.com
apply.tianjinjuilliard.edu.cn
imagination.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
sdp.tianjinjuilliard.edu.cn
apply.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
tjs-dev.juilliard.edu
apply.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
helpdesk.rdek.bc.ca
tjs-stage.juilliard.edu
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
*.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
tjs-stage.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
tjs-dev.juilliard.edu
informatique.aubainerie.com
dmsbit.northeastern.edu
tianjin.juilliard.edu
c3helpdesk.c3insurance.com
tjs-dev.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
helpdesk.valledelsol.com
5712829080403968-fe2.pantheonsite.io
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
apply.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
*.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
sdp.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
tianjin.juilliard.edu
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
apply.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
tjs-dev.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
apply.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
tianjin.juilliard.edu
imagination.tianjinjuilliard.edu.cn
tianjin.juilliard.edu
tjs-stage.juilliard.edu
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
tianjin.juilliard.edu
tjs-dev.juilliard.edu
devopshelpdesk.hcss.com
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
tjs-stage.juilliard.edu
imagination.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
5701330244993024-fe3.pantheonsite.io
sdp.tianjinjuilliard.edu.cn
helpdesk.valledelsol.com
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
desk.burgiss.com
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
imagination.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
rms.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
5712829080403968-fe2.pantheonsite.io
tianjinjuilliard.edu.cn

Certificate

The complete raw certificate details for imagination.tianjinjuilliard.edu.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383789779179516868032704213805070719573196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 02:44:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 02:44:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imagination.tianjinjuilliard.edu.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891125422364040336188261025784667638987436310015996425214032892810560397245377723691627533662393048525031196674467219844433678136969962078860276903827626336516978652894111918390107699507867559636665365876355604465305948327482885833896516865615438690125586803819993632406352445357590789529460147309644053779931146687060728900870825988371001449548255602145951113351910163198282632411244649884748854868384673547594935614219124064209577225918155775737718362200987723062379209160188783517712604743813803137892065980232888608603429122269432037929882923872678032699911467278453765777317837826613360822937727625897785351810341546076595845169984587410262011388966819784112030676729309309596141186997057264936014518879058023118264781727407590813437216029881535790905820445023113240835716243601823543867232887795046455223739581305889249030095919621845492012244687050376977007556208948820687736768731949224408051109964581451831934128367365244301552983651846834257757980150274056747526939397476879355839789689874365382214098273994867501429485747021440924582961499243117931327585241961144840830420387529383209247928229368513006371016011670239883779305885010179805276739489245566170419559966864897702939635713293996865836173863909818401590796469803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3eded05c42980cf6af54560e0016548ad064b652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagination.tianjinjuilliard.edu.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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