www.usma.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:0f:a2:01:44:ef:bd:07:cb:3d:2b:1d:d1:60:05:46:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.usma.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:0f:a2:01:44:ef:bd:07:cb:3d:2b:1d:d1:60:05:46:ef
Serial Number (int): 322608463438821639839203022984769249298159
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:2d:fb:1e:7d:f0:c3:54:ee:c4:fc:a2:fc:c0:94:43:cf:46:d0:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:82:3b:33:e4:1e:2c:e0:69:1c:01:ab:66:a6:59:1c:35:a4:73:02
Fingerprint (sha256): 4b:fe:5a:0d:a3:b4:b0:f4:2a:dc:ed:47:bd:07:3e:7b:24:26:d3:e1:1d:01:b9:09:d8:84:42:dc:25:f2:b5:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.usma.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.usma.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.usma.edu

Other certificates including the domain name usma.edu

(limited to 100 certificates)
army.iii.com
www.usma.edu
NOMINATIONS.USMA.EDU
usmalibrary.usma.edu
usma.edu
www.westpoint.edu
candidate.usma.edu
acepasts3.usma.edu
usma.edu
www.usma.edu
usma.edu
FIELDFORCE.WESTPOINT.EDU
www.westpoint.edu
www.usma.edu
candidate.usma.edu
www.usma.edu
downloads.oema.usma.edu
usma.edu
www.ctc.usma.edu
www.usma.edu
usma.edu
www.usma.edu
usmalibrary.usma.edu
USMASVDZBATMAN.usma.ds.army.edu
mail.usma.army.mil
usma.edu
hunting.usma.edu
www.westpoint.edu
ams-external.usma.edu
nominations.usma.edu
www.usma.edu
FIELDFORCE.WESTPOINT.EDU
nominations.usma.edu
www.westpoint.edu
www.usma.edu
ams-external.westpoint.edu
www.usma.edu
usma.edu
www.westpoint.edu
candidate.usma.edu
ctc.westpoint.edu
usma.edu
NOMINATIONS.USMA.EDU
FIELDFORCE.WESTPOINT.EDU
mwi.usma.edu
www.westpoint.edu
usma.edu
www.westpoint.edu
ctc.usma.edu
www.usma.edu
www.usma.edu
talent.army.mil
FIELDFORCE.WESTPOINT.EDU
nominations.usma.edu
library.usma.army.mil
candidate.usma.edu
candidate.usma.edu
usma.edu
ams-external.usma.edu
www-internal.eecs.usma.edu
www.usma.edu
iwatch.usma.edu
candidate.usma.edu
usma.edu
www.usma.edu
army.iii.com
candidate.usma.edu
www.usma.edu
usma.edu
usma.edu
www.usma.edu
talent-cms.usma.edu
usma.edu
usma.edu
www.westpoint.edu
www.usma.edu
NOMINATIONS.USMA.EDU
ams-external.westpoint.edu
usma.edu
www.ctc.usma.edu
www.westpoint.edu
www.east.usma.edu
FIELDFORCE.WESTPOINT.EDU
www.westpoint.edu
www.ctc.usma.edu
candidate.usma.edu
NOMINATIONS.USMA.EDU
www.usma.edu
www.usma.edu
www.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
lyncFEPool01.usma.ds.army.edu
www.usma.edu
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
usma.edu
blau.usma.edu
www.oema.usma.edu
hunting.usma.edu

Certificate

The complete raw certificate details for www.usma.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISA7QPogFE770Hyz0rHdFgBUbvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEyMDcwNTMzMzhaFw0yMjAzMDcwNTMzMzdaMBcxFTATBgNVBAMT
DHd3dy51c21hLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKqc
+1vvZixD5I89AsYnVK0sK0rZQcNWuOpoSg/x0ZUunL8K3jhVTgoCG1vCQhHTVvLD
T4D/qHrkzrX27Im/H77gxAw3WwX7Z2Uz+sdTM7qr68cL0M08Unmw9X9sPGL0VGBe
kIUQmxqhXm3zzJwlbNEMn6A+gqLYHpgntcJVB1rxeYBfHAsK+v6aXnsXXvRsLe1J
AZFEdnZge3vsQI0FeB3FuIXFJilcm2xtc+vfuo9a+mY0U+udMWYy5F1q20ZF69MS
+pC+oJLdVOaBC+n8R/rmzV20MJiuI2ygvwvKhjGAsTDsEVmWMXTvCxwDgak+AxUa
n7In/+AFJhUP9OuoFo0CAwEAAaOCAkcwggJDMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU4S37Hn3ww1TuxPyi/MCUQ89G0IYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
FwYDVR0RBBAwDoIMd3d3LnVzbWEuZWR1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAKXm+8J45OSHwVnOfY6V3
5b5XfZxgCvj5TV0mXCVdx4QAAAF9k5kF5AAABAMARzBFAiEAxL3cOtagDAjii1o0
NLpcwBQuKz/wscmVV6NLaJ2LASQCIHMU32EosrZParAtbMqtVNnFm/DsLI2Ktcbb
r/CBK3Y6AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF9k5kH
oQAABAMARzBFAiAc34fA2PNzS1meWLBBj70/Tby5mYjimGfvWPtZcJI5dQIhAJwK
25huvf8XjpmcKywh/nB5nAbdEkCV2Ffcehl4kn+BMA0GCSqGSIb3DQEBCwUAA4IB
AQBNgPiqTa4UC2qKwa8uGbzyZEGhwbQ3cM/ZYT0hB99Y4zMzp9CNz0GqcLRQDyLv
0wg8el1FlqjU8Wa4kcNyfxg7bPbDFfdrQEAl274qC6G7htag4t5A82pimmzW2ufM
EKGmRp2uEjRR41VQC61ZRfVNtJcZfc3PBeZsgWJRHC3gRkZrIOyTLQx0tXzFXewp
EurjW4g89UJmkjcWZc03wqOqG40MeuFqrETZahuqefojKBVqFh1EnmmqRn5JOyuD
P0OE4IlkF5SBgwc/U30Xr5Ax0pmlFQrp7fwcBrbZFfVzsfRAJ57FIGY8mGAVwqhv
fSihVjajdTdRlxbVmV7N75Xx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpz7W+9mLEPkjz0CxidU
rSwrStlBw1a46mhKD/HRlS6cvwreOFVOCgIbW8JCEdNW8sNPgP+oeuTOtfbsib8f
vuDEDDdbBftnZTP6x1MzuqvrxwvQzTxSebD1f2w8YvRUYF6QhRCbGqFebfPMnCVs
0QyfoD6CotgemCe1wlUHWvF5gF8cCwr6/ppeexde9Gwt7UkBkUR2dmB7e+xAjQV4
HcW4hcUmKVybbG1z69+6j1r6ZjRT650xZjLkXWrbRkXr0xL6kL6gkt1U5oEL6fxH
+ubNXbQwmK4jbKC/C8qGMYCxMOwRWZYxdO8LHAOBqT4DFRqfsif/4AUmFQ/066gW
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322608463438821639839203022984769249298159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 05:33:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-07 05:33:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.usma.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21537922490234978167382691865125947904572057760461308274482021678303444692235329622623056585796348961629685853903667267631132741158399747600622272779544442829746742702369759895519370050180002598729522168910385927652506778162427664877758713933796099340897471241831723082600191879433122664096529011910346050932858218288604591954967351547415167728815879396599318755928654783716144958506089660985659597954513202097904006854969764429917024790003004934722809572296399914205969872831866656506109190556602273418536805365924928972700343054732864194835698819753998515124799340003161682619163603353795620536159228060904528025229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e12dfb1e7df0c354eec4fca2fcc09443cf46d086
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usma.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d939905e40000040300473045022100c4bddc3ad6a00c08e28b5a3434ba5cc0142e2b3ff0b1c99557a34b689d8b012402207314df6128b2b64f6ab02d6ccaad54d9c59bf0ec2c8d8ab5c6dbaff0812b763a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017d939907a1000004030047304502201cdf87c0d8f3734b599e58b0418fbd3f4dbcb99988e29867ef58fb59709239750221009c0adb986ebdff178e999c2b2c21fe70799c06dd124095d857dc7a1978927f81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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