sites-law-duq-edu.duqlawblogs.org
Issued by R3
About this certificate
This digital certificate with serial number 03:91:74:31:08:8d:27:f4:61:87:60:dc:fe:e6:96:a1:10:96 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sites-law-duq-edu.duqlawblogs.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:91:74:31:08:8d:27:f4:61:87:60:dc:fe:e6:96:a1:10:96Serial Number (int): 310832246042316748687446148640078846562454
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b6:00:56:fc:f3:12:ec:b3:ba:a5:ce:71:55:a3:b2:45:8f:e7:0d:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7d:63:18:88:c5:ca:f9:7a:fc:73:3d:51:2e:11:bd:7f:06:83:69:a7
Fingerprint (sha256): 4e:24:58:1a:4e:a9:de:42:fc:0f:d4:da:26:1d:1f:83:6e:4d:97:e0:86:f2:e8:8b:1e:f4:06:53:d2:8f:03:0d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sites-law-duq-edu.duqlawblogs.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sites-law-duq-edu.duqlawblogs.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sites-law-duq-edu.duqlawblogs.org
sites.law.duq.edu
www.sites-law-duq-edu.duqlawblogs.org
sites.law.duq.edu
www.sites-law-duq-edu.duqlawblogs.org
Other certificates including the domain name duqlawblogs.org
(limited to 100 certificates)
webdisk.duqlawbookclub.org
duqlawblogs.org
www.paconstitution-org.duqlawblogs.org
duqcrim.com
sites.law.duq.edu
duquesnelawreview.com
paconstitution.org
jurismagazine.duqlawblogs.org
duquesneblj.com
duquesneblj.com
duqcrim.com
paconstitution.org
duquesnejurismagazine.com
duqlawblogs.org
duqlawbookclub-org.duqlawblogs.org
duqlawblogs.org
acllib.org
duqlawblogs.org
cpcalendars.duquesnelawreview.com
duqcrim.com
sites-law-duq-edu.duqlawblogs.org
duquesneblj.com
sites-law-duq-edu.duqlawblogs.org
paconstitution.org
cpcontacts.dbliblog.com
duqlawblogs.org
duquesnelawreview.com
www.duqlawbookclub.org
duqlawblogs.org
paconstitution.org
mail.dbliblog.com
duqcrim.duqlawblogs.org
sites-law-duq-edu.duqlawblogs.org
duqcrim.com
acllib.org
duqlawblogs.org
duquesneblj.com
sites.law.duq.edu
acllib.org
paconstitution-org.duqlawblogs.org
mail.duquesneblj.com
sites-law-duq-edu.duqlawblogs.org
paconstitution.org
duqcrim.com
webdisk.paconstitution.org
sites.law.duq.edu
paconstitution.org
autodiscover.duqlawbookclub.org
paconstitution-org.duqlawblogs.org
acllib.org
duquesnejurismagazine.com
acllib.org
duqlawblogs.org
paconstitution.org
sites-law-duq-edu.duqlawblogs.org
duqcrim.com
duquesnelawreview.com
duqlawblogs.org
duquesneblj.com
duquesnejurismagazine.com
mail.duqlawblogs.org
duqlawblogs.org
www.paconstitution-org.duqlawblogs.org
duqcrim.com
sites.law.duq.edu
duquesnelawreview.com
paconstitution.org
jurismagazine.duqlawblogs.org
duquesneblj.com
duquesneblj.com
duqcrim.com
paconstitution.org
duquesnejurismagazine.com
duqlawblogs.org
duqlawbookclub-org.duqlawblogs.org
duqlawblogs.org
acllib.org
duqlawblogs.org
cpcalendars.duquesnelawreview.com
duqcrim.com
sites-law-duq-edu.duqlawblogs.org
duquesneblj.com
sites-law-duq-edu.duqlawblogs.org
paconstitution.org
cpcontacts.dbliblog.com
duqlawblogs.org
duquesnelawreview.com
www.duqlawbookclub.org
duqlawblogs.org
paconstitution.org
mail.dbliblog.com
duqcrim.duqlawblogs.org
sites-law-duq-edu.duqlawblogs.org
duqcrim.com
acllib.org
duqlawblogs.org
duquesneblj.com
sites.law.duq.edu
acllib.org
paconstitution-org.duqlawblogs.org
mail.duquesneblj.com
sites-law-duq-edu.duqlawblogs.org
paconstitution.org
duqcrim.com
webdisk.paconstitution.org
sites.law.duq.edu
paconstitution.org
autodiscover.duqlawbookclub.org
paconstitution-org.duqlawblogs.org
acllib.org
duquesnejurismagazine.com
acllib.org
duqlawblogs.org
paconstitution.org
sites-law-duq-edu.duqlawblogs.org
duqcrim.com
duquesnelawreview.com
duqlawblogs.org
duquesneblj.com
duquesnejurismagazine.com
mail.duqlawblogs.org
Certificate
The complete raw certificate details for sites-law-duq-edu.duqlawblogs.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISA5F0MQiNJ/Rhh2Dc/uaWoRCWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MTcwNDI2MTdaFw0yMzExMTUwNDI2MTZaMCwxKjAoBgNVBAMT IXNpdGVzLWxhdy1kdXEtZWR1LmR1cWxhd2Jsb2dzLm9yZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALQirlWBWEE8l9swPSEN6uquFojmefSRRlu4JsI1 UCS9ys05gt1ddQFQIyX75FC96th4OW/27NOWFTKlsi+FK2owY8WNTo2OEf224ico B918pBKSGmjpRSRMa3khxAyohkSKMrKCT7YpZwfnN3TQv/xvgnGr8rK6qSokZmhP nhub0F9emsrcbQBRuOUJ2Nf4+oEsbtLP5r3ATpUCW/98P85y5Rri3C7hAbUsiHYK wJmX+CzAczPo2tAsNoP1D6TvSllv2QTbR0BULHABbZTbHfv30mW7ozUtsu+QCFWv jhbwF+Lh2PrehfNK2/DtiVdGSz9u9WlSQoTollBwelVHmOMCAwEAAaOCAl4wggJa MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtgBW/PMS7LO6pc5xVaOyRY/nDSwwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wZgYDVR0RBF8wXYIhc2l0ZXMtbGF3LWR1cS1l ZHUuZHVxbGF3YmxvZ3Mub3JnghFzaXRlcy5sYXcuZHVxLmVkdYIld3d3LnNpdGVz LWxhdy1kdXEtZWR1LmR1cWxhd2Jsb2dzLm9yZzATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHoyjFTYty22IOo44FIe6YQWcDIT hU070ivBOlejUutSAAABigH1clIAAAQDAEgwRgIhALIiHL+6rRdul5VwN5TN7Oqp YxSI6rkDojzy9H7lqTASAiEA9Luo/EUnxVjRJ+QFuVn4aTWoKWHBkiXSu2O/64DA 13YAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYoB9XLUAAAE AwBHMEUCIQDs+5qeuYpGn/dpVnGJ0BVcgyZOnDqgSuI0G2/hCzs1PgIgejnQ4Qy3 DU4vew8fR21scgaR8HAVLkTvQEDO8vdgiv8wDQYJKoZIhvcNAQELBQADggEBALjB 4WwLHaR6Zn57mBJearCbtMMxGPdRoHAdcxilsS7jur1nSdk/zsFvlJKbprsdIA5Y kEVnr9Hrq3WqGTVE5U+VzPLtj1Eazt33KGK/59POjl8BAykxeKDZwy2YO/0tJ0Iz F9hA4xW4147kfzux60gsHJrhaa1vnMDOtmGIT2NNTVtJoC0HP//cRZIEfbkkNnhv 6PIVV0sTjNERMySvGp5yrzL0+RNg+K827Df/sgv9ZgRPTq7FBF0i4h9rQ0tE+/cB kl13gKCsq9blFdeKnNDdoqXF9TNUx7DkOzqVxIgWtgvnhYQk79OxLzg3YbWr8nGM B1FEGM7VoY7aYi8gja0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCKuVYFYQTyX2zA9IQ3q 6q4WiOZ59JFGW7gmwjVQJL3KzTmC3V11AVAjJfvkUL3q2Hg5b/bs05YVMqWyL4Ur ajBjxY1OjY4R/bbiJygH3XykEpIaaOlFJExreSHEDKiGRIoysoJPtilnB+c3dNC/ /G+CcavysrqpKiRmaE+eG5vQX16aytxtAFG45QnY1/j6gSxu0s/mvcBOlQJb/3w/ znLlGuLcLuEBtSyIdgrAmZf4LMBzM+ja0Cw2g/UPpO9KWW/ZBNtHQFQscAFtlNsd +/fSZbujNS2y75AIVa+OFvAX4uHY+t6F80rb8O2JV0ZLP271aVJChOiWUHB6VUeY 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310832246042316748687446148640078846562454 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 04:26:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 04:26:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sites-law-duq-edu.duqlawblogs.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22739996728541741598326683890016453237297090601963089316147852156313512658412981362000473517868653735096366719337795649463290203632212195877271836421205008006536293766709984808146575307025587605571330934460908924808840478666672306249984883595452062618840588684766701470614089113973823849160417106173838388743960150361297084491975376891173989714852400938666870492573592230929979904857589088947292323841337114924624054024433553579224026536120714274370038339522607845446043524784654234443218340365849961311735029465402348504399768840853903463749474444131386909430232952228014597562566153248664435105305901492045779278051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b60056fcf312ecb3baa5ce7155a3b2458fe70d2c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites-law-duq-edu.duqlawblogs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.law.duq.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sites-law-duq-edu.duqlawblogs.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a01f572520000040300483046022100b2221cbfbaad176e9795703794cdeceaa9631488eab903a23cf2f47ee5a93012022100f4bba8fc4527c558d127e405b959f86935a82961c19225d2bb63bfeb80c0d776007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a01f572d40000040300473045022100ecfb9a9eb98a469ff769567189d0155c83264e9c3aa04ae2341b6fe10b3b353e02207a39d0e10cb70d4e2f7b0f1f476d6c720691f070152e44ef4040cef2f7608aff . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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