unm.campusexperienceapp.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:95:39:f5:98:62:c9:02:b0:ff:16:4d:b8:bb:95:ff:05:ca was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unm.campusexperienceapp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:39:f5:98:62:c9:02:b0:ff:16:4d:b8:bb:95:ff:05:ca
Serial Number (int): 399228257597503728302182488471333632935370
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:3c:63:23:f2:a5:15:b4:7d:98:0b:05:c8:b0:3a:ce:d7:ea:d8:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:76:ca:80:16:b1:15:43:1b:8b:ac:85:87:8f:f3:12:db:c1:3e:19
Fingerprint (sha256): 49:28:07:3b:14:fc:e2:8f:56:10:46:fc:5d:59:02:d8:20:02:58:36:30:27:bc:f6:ed:66:ee:8c:fa:f0:3d:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate unm.campusexperienceapp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unm.campusexperienceapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unm.campusexperienceapp.com
www.unm.campusexperienceapp.com

Other certificates including the domain name campusexperienceapp.com

(limited to 100 certificates)
www.brockly.app
uwf.campusexperienceapp.com
fau.campusexperienceapp.com
app.cardapp.me
uw.campusexperienceapp.com
uidaho.campusexperienceapp.com
ahmedmsaeed.com
wsu.campusexperienceapp.com
stage.fiu.campusexperienceapp.com
www.pilotage-activite.gan.fr
momentousfiles.com
www.glampbayarea.com
uwsp.campusexperienceapp.com
www.dxmx.net
www.frikkherding.no
orange.app.nossaff.com
uw.campusexperienceapp.com
link.simplify.art
campusexperienceapp.com
afacacasupplychain.com
toda-seitai.com
uw.campusexperienceapp.com
uwm.campusexperienceapp.com
birthdays.onivoro.com
uhm.campusexperienceapp.com
ml.dealescale.com
auth-essentials.avertro.com
universityofnevada-reno.campusexperienceapp.com
uwf.campusexperienceapp.com
qg.ocellisys.com.br
momentousfiles.campusexperienceapp.com
akhmatovafilm.com
unm.campusexperienceapp.com
brianwool.com
neoone.art
www.test.campusexperienceapp.com
campusexperienceapp.com
campusexperienceapp.com
sgbo.be
sugarbaby.sg
www.mes-rendements.com
stewardleadership25.stewardshipasia.com.sg
my.daysie.app
literaryodyssey.com
investment-accounting.resre.bm
www.app.enda-technologies.com
*.campusexperienceapp.com
joekt.dev
uwsp.campusexperienceapp.com
pwa.campusexperienceapp.com
mijn.klikkie.nl
keithemixologist.com
towson.campusexperienceapp.com
unm.campusexperienceapp.com
pdx.campusexperienceapp.com
apif.app
drumssiddharth.com
uhm.campusexperienceapp.com
jacobho.me
ncat.campusexperienceapp.com
hayaipharma.com
k-state.campusexperienceapp.com
forecast.gen.co
towson.campusexperienceapp.com
www.gemmapell.com
rutgers.campusexperienceapp.com
campusexperienceapp.com
*.momentousfiles.com
uwsp.campusexperienceapp.com
dillan.photo
umich.campusexperienceapp.com
corp-site.dev.levii.co.jp
demo.spectralsignal.io
app.catbuyer.com
uhm.campusexperienceapp.com
rooty.dev
ncat.campusexperienceapp.com
fau.campusexperienceapp.com
uwm.campusexperienceapp.com
cu.campusexperienceapp.com
console.baseci.com
uidaho.campusexperienceapp.com
www.giustagenzia.it
www.leichtgewicht.at
wsu.campusexperienceapp.com
dev.vcml.app
novabreeze.net
www.app.homolog.beseed.com.br
haaay.io
ving.parlor.io
www.coixinet.cat
salfordlearning.app
unm.campusexperienceapp.com
unlv.campusexperienceapp.com
ncat.campusexperienceapp.com
jtv.basketballireland.tv
campusexperienceapp.com
nexagrip.co.in
www.dukagas.link
umd.campusexperienceapp.com

Certificate

The complete raw certificate details for unm.campusexperienceapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraBsvlI49WYerm8gx9UW
vQgZiWKolZMdhIluljeZFVq3GFXXlqK3TfmG9wAT54Yb/6l0eNvSvbWq2U9aHIYF
sqD206R7YEnoMffS/KJvcq3FX5Wefcapor6RKWnk5cSalpBJY5cexssdPlP8thXr
VieOFXrOq59Z+i1aFTF2fqCW11Utniy3nEv3XbLLPxckPCigseGaR6jZ7+fHpmvB
sbT73ifUcco5ZLIyMA5Xr7wGZi9Qf/+zlCoFqSr2l6viDXuzhi4G7vGKVfDOr+1p
70NXkP5l52XIVx8mFP8G3kwkhOji4QB6ZUnrxDuRuMh2O/cRWUOrm/vijTwaLdJN
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399228257597503728302182488471333632935370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 20:14:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 20:14:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unm.campusexperienceapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21918335166098640642296485237345461310670809825405887657524811394213285450758648790058621693201285634357632088782925534730331857832101216166018324313140683556767614593576273678603628675678580238666050801365344765398731015475341142226103483384590893196821566821081416675871924711393474882819126832552247496146549253238849958550015442480212015480196407970128054855069784280608680814994182399143053644860884290077424773355958315306203393279081962385393802910029569699863014337161922389645125775572395192525590365917301592819077184025098669890327039142837793828629581176183668506249408145664624635979651110544251752173039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a3c6323f2a515b47d980b05c8b03aced7ead842
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unm.campusexperienceapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unm.campusexperienceapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ecd9d2fb10000040300483046022100abb0886b302934a76c19c0fd7cbde24b2da31c2b0c27b011bbac20809ddc88da022100e6f934590f164c1c5380793a7ba27e8bd11dce7d658636ef60eb55066682d70d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecd9d2fb30000040300473045022060625259321b71d37e0568bd6069e2c4113271a443698396d4966ddacb8c330102210096e652db723fb1e93c750d04aa67bed6b67a8902cea0b5a28ad40e637e2db419
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040b1267564154024a77b054ffb7a9227d36ef9dbad3bed971d3e4ba865e31237ea0537fcc44e22e858249a107669b1b7c9495df9ed0f02ce31abadbeba785376ef945dd7f7991e6e4c1051400fa9d01ed24762c669328e477e345525f386763fa0d884cb88784ea4301833a2a09e3dd549641cd21564d879786913117c7e832bcd6a53658725554968d23fc18ca313e103d0147b1b9d95a0497cf452fc7ca6d133914f1e2dc2e2631e5b84a940355544bb7faf7a1c98b7050fda7f753b8fdc6604d8e5e74fb655f26987d8bfd68d29980598646830f3fe5f416ff4255ffc87ae94992a247ebf009690ce5bccdbea88f1a216a9c390d0f3faa9bd43efa12dfb7d