washington.veridiansoftware.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:20:59:97:9f:16:81:d2:94:54:7d:22:9c:d8:6a:a7:a1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=washington.veridiansoftware.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:20:59:97:9f:16:81:d2:94:54:7d:22:9c:d8:6a:a7:a1
Serial Number (int): 287241318166805683677930260870461381060513
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:13:be:93:9b:b6:8f:1e:04:d2:ee:02:3b:e8:86:7c:7c:b2:7f:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:b9:37:da:4d:1f:89:f6:f3:ea:5b:88:d9:8f:f5:36:1d:cb:14:27
Fingerprint (sha256): 48:86:6d:f0:e5:dc:af:ba:17:5c:c3:4d:8b:8d:fc:c5:d8:b9:96:eb:2d:b8:6f:74:37:d0:30:93:ce:87:5f:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate washington.veridiansoftware.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for washington.veridiansoftware.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

washington.veridiansoftware.com
washingtondigitalnewspapers.org

Other certificates including the domain name veridiansoftware.com

(limited to 100 certificates)
washington.veridiansoftware.com
crra.veridiansoftware.com
cdsun-cornell.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
prn-cornell.veridiansoftware.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
leftnews.napubcoonline.com
vidette.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
veridiansoftware.com
yale.veridiansoftware.com
athena.dlconsulting.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
demeter.dlconsulting.com
scholarly.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
clarkedigitalcollections.veridiansoftware.com
leftnews.napubcoonline.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
montana.veridiansoftware.com
eastview.veridiansoftware.com
veridiansoftware.com
exponent.lib.purdue.edu
leftnews.napubcoonline.com
cmuhistory.veridiansoftware.com
cmuhistory.veridiansoftware.com
archive.theexonian.com
scholarly.veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
washington.veridiansoftware.com
veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
exponent.lib.purdue.edu
eastview.veridiansoftware.com
washington.veridiansoftware.com
vidette.veridiansoftware.com
eastview.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
digmichnews.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
hojishinbun.hoover.org
archive.theexonian.com
archive.theexonian.com
vidette.veridiansoftware.com
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
hojishinbun.hoover.org
osu.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
vidette.veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
washington.veridiansoftware.com
hojishinbun.hoover.org
montana.veridiansoftware.com
hojishinbun.hoover.org
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
exponent.lib.purdue.edu
veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
montana.veridiansoftware.com
veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
digmichnews.veridiansoftware.com
vidette.veridiansoftware.com
washington.veridiansoftware.com
washington.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
archive.theexonian.com
osu.veridiansoftware.com
scholarly.veridiansoftware.com
veridiansoftware.com
demos.veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
scholarly.veridiansoftware.com
exponent.lib.purdue.edu
nnyln.veridiansoftware.com
exponent.lib.purdue.edu

Certificate

The complete raw certificate details for washington.veridiansoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Pe2tTc7z9egeckMLbZ
WcA9vzP+Z4XTgBI9fo9IOD2NkkoTneNxA5YIRCQtsNazyFJF1Mbw7x3Lke00RuMo
9qPHhw2v9k+RazHqNfihHiPUMr2e5E21npkL48yNRixDLxL4cb+mFukdaNLptXu0
qwybdn8BiFRrOuURrba+lThvQLPSDsw9E4cMpAxM3IVvKaMeKktl4z9Kt6MYeXNf
NuylJpdw+KuWykez7B1iw2wWuMtQNynkWTZRrhCSrnY4blddnPpxFgmgmZZLIsqR
bzV0luxqwdM/AATnTO19iKK1Ae2hkI6qAy99mDX5KBKBSHst/kVJXl0Y8mqLawVh
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287241318166805683677930260870461381060513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 12:04:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 12:04:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'washington.veridiansoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24728836613030520261446934605375000873145709707370604264094113241060395906236591706142826338266072610293830635817359468212457140971820076862898795739959050939851902780154897389188858822835782206341938639625158463955525239861062249101195901818978247683462335559449651065669262857720316477578493953512050517681686570122022234474014152517797091836125375683620479722641638696313009486624375311889303722795031814571338253123664374856928297230964249652497727886269091173588230469276812677205245080620450848515717117529156381406129424740368327825183969168238720587168865938659688265869791911102878758879558986016959167291769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c713be939bb68f1e04d2ee023be8867c7cb27f1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.veridiansoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtondigitalnewspapers.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169628e09b90000040300473045022100a19a0398e7e25d3aa5e5272c25324dd87f8051c52a93747be8128157d91e6b980220635c8d7d114c192d2adf2c9f01408f6454a855e60b38690417fee9d89c1c282e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169628e09b90000040300473045022100fa6506ff9c49abd7dd41b54ba5bfc11cc42d0af02ec07b61b51994e4d8f1131102201399bfe5aaf4cf7c51c2cd8411add90a6e781dd4ba9fbf1cbfb6cc7deff0a744
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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