digmichnews.veridiansoftware.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e5:f6:95:33:e7:9f:de:45:36:2a:15:dd:fe:c1:9f:ea:d4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digmichnews.veridiansoftware.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:f6:95:33:e7:9f:de:45:36:2a:15:dd:fe:c1:9f:ea:d4
Serial Number (int): 339589284612124731219001717181273597799124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:cc:b8:2e:ce:7a:e2:e3:df:fe:57:b7:45:da:32:c0:3b:e5:c4:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:28:79:a8:d7:c8:b9:7a:eb:f2:34:2b:3a:28:5d:a9:44:86:35:d9
Fingerprint (sha256): 4c:57:9d:24:81:db:dc:45:28:19:e7:6d:69:30:69:e8:5d:23:29:be:c5:3d:61:0e:36:5c:b5:95:f7:9e:09:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digmichnews.veridiansoftware.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digmichnews.veridiansoftware.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digmichnews.veridiansoftware.com
michigan.veridiansoftware.com

Other certificates including the domain name veridiansoftware.com

(limited to 100 certificates)
washington.veridiansoftware.com
crra.veridiansoftware.com
cdsun-cornell.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
prn-cornell.veridiansoftware.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
leftnews.napubcoonline.com
vidette.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
veridiansoftware.com
yale.veridiansoftware.com
athena.dlconsulting.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
demeter.dlconsulting.com
scholarly.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
clarkedigitalcollections.veridiansoftware.com
leftnews.napubcoonline.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
montana.veridiansoftware.com
eastview.veridiansoftware.com
veridiansoftware.com
exponent.lib.purdue.edu
leftnews.napubcoonline.com
cmuhistory.veridiansoftware.com
cmuhistory.veridiansoftware.com
archive.theexonian.com
scholarly.veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
washington.veridiansoftware.com
veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
athena.dlconsulting.com
exponent.lib.purdue.edu
eastview.veridiansoftware.com
washington.veridiansoftware.com
vidette.veridiansoftware.com
eastview.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
digmichnews.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
hojishinbun.hoover.org
archive.theexonian.com
archive.theexonian.com
vidette.veridiansoftware.com
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
hojishinbun.hoover.org
osu.veridiansoftware.com
clarkedigitalcollections.veridiansoftware.com
vidette.veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
washington.veridiansoftware.com
hojishinbun.hoover.org
montana.veridiansoftware.com
hojishinbun.hoover.org
cmuhistory.veridiansoftware.com
www.veridiansoftware.com
cmuhistory.veridiansoftware.com
exponent.lib.purdue.edu
veridiansoftware.com
demeter.dlconsulting.com
washington.veridiansoftware.com
exponent.lib.purdue.edu
montana.veridiansoftware.com
veridiansoftware.com
rosalis.bibliotheque.toulouse.fr
digmichnews.veridiansoftware.com
vidette.veridiansoftware.com
washington.veridiansoftware.com
washington.veridiansoftware.com
hojishinbun.hoover.org
demeter.dlconsulting.com
digmichnews.veridiansoftware.com
archive.theexonian.com
osu.veridiansoftware.com
scholarly.veridiansoftware.com
veridiansoftware.com
demos.veridiansoftware.com
nnyln.veridiansoftware.com
montana.veridiansoftware.com
demeter.dlconsulting.com
leftnews.napubcoonline.com
montana.veridiansoftware.com
scholarly.veridiansoftware.com
exponent.lib.purdue.edu
nnyln.veridiansoftware.com
exponent.lib.purdue.edu

Certificate

The complete raw certificate details for digmichnews.veridiansoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TF1u9Path55mFtof601
BuaHm+DcnE222ObG5bW8XuvYm8r/lxSWBTAG3yQJ0UxIt3QCElaPjY8bRKTn2BSd
4b8QLDSCQpXJLHjbhafIxdzMIYYgcTFQPYq6ghZueCr6gVIxVcdpDPS3kJjYIcqo
EpKUw2m8671PqBmSfRbkhMCFcR26DhKmPpxmRf45PhQGgXt8Qy/THlpiBydAhoZp
3rych8tWTdhCpa6LPo/klytGEvSGfXIzwooEkKnKED52vxn0fC/OSVKjmNGWqswt
dS9T5tHLWe56DLXlPutyC5ahJQioaFZtM3kiSbPva9oFTB4uihMa+BAiP5jZaKec
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339589284612124731219001717181273597799124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 12:09:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 12:09:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digmichnews.veridiansoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29437914641448274930759992386600300916270386316718775259667203362171515837083803974523952135888945575950056208828694663411175304642770733935495939897347408884100218475117621824794757406192982908849374974503572501455609019935623639952508445123709676660359332929964790984150927540710012956834270899956579699981248014732769777247081232731940200957387587426194683511939282973566698601895516305683311048116133776717399253804939083933255958764134551134983128489822651153397452060608698252747580932340669021349042106229890433318133812924860230124907477581752315678303594943533531742062190964197868454363020466984047079824487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07ccb82ece7ae2e3dffe57b745da32c03be5c43b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digmichnews.veridiansoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigan.veridiansoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c490661a0000040300473045022100b0a195cfd00b178159d3cbde264e91fc67cce14e6c9701117cd77a5a975aaef502207459a2a25b493ddbd8dcd7258a61f590c0dbd4539c0044e215b668f8a8f4cc5b007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170c490661f0000040300473045022100d30d4e6e60ec54fc9dc9045723adeba0ab9d012519c2dbf172ac80401fd0791202204f8adc06abc45fcfc7c3ded284325bf9575061f493204638d310df5405ee0512
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027d7f9199647452ef555ecfaaec646234de33bcced52de9d633005c4e5349537ffb1c7222b2d61a746ff561a0ce4373ba89ff36b224d75bbb1fe4d96eb579b59ba1e650d79dd26e72e3f7de71928dd54b1d22c84c2b35adc816d091604223aacf33074a58e1a58ad8b01ca9dcd883bdc0bd5ab3db30ab0f4781af33dddfe484c272e4432247dc82a9144f0fdedc62515b63ae91b611245f4c86896c6cffb6af5b58995710f639f5191fac7c53d1dc8360473ad05ff454c98ea115927b512d717978ada72cf6d0920680ae537e6029ec6293fb203ea52158b4b32a3a662a1e21e08be6874aaab88109070775fc95362305eed4d2f7a1dc62f3afc35c58aa621b7