cmu.stellic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ec:d0:12:2c:07:4a:13:14:16:9c:31:80:76:e9:3c:d6:c7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmu.stellic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:d0:12:2c:07:4a:13:14:16:9c:31:80:76:e9:3c:d6:c7
Serial Number (int): 429032356097852724745768424956580499084999
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:7e:e7:bf:ef:f8:90:dc:77:85:ca:40:c0:ac:49:fe:6a:be:46:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:8a:05:b3:2c:4b:23:0d:7b:54:29:df:1a:cb:e1:7e:b4:26:80:5f
Fingerprint (sha256): 55:2f:bc:05:31:e3:a5:55:fd:82:7c:86:5e:5a:86:d5:8b:6d:db:5e:b3:4e:10:ac:fc:c9:a6:c5:2b:9d:15:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmu.stellic.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmu.stellic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academicaudit.andrew.cmu.edu
cmu.stellic.com

Other certificates including the domain name stellic.com

(limited to 100 certificates)
cmu.stellic.com
www.stellic.com
udem.stellic.com
blog.stellic.com
tufts.stellic.com
nuq.stellic.com
stellic.com
byuh.stellic.com
uchicago.stellic.com
tufts.stellic.com
umn.stellic.com
cmu.stellic.com
stellic.com
nuq.stellic.com
stellic.com
tufts.stellic.com
jhu.stellic.com
stellic.com
jhu.stellic.com
tufts.stellic.com
tufts.stellic.com
tufts.stellic.com
cmu.stellic.com
byuh.stellic.com
cmu.stellic.com
byuh.stellic.com
tufts.stellic.com
stellic.com
nuq.stellic.com
uchicago.stellic.com
www.stellic.com
elon.stellic.com
stellic.com
nuq.stellic.com
learn.stellic.com
columbia.stellic.com
stellic.com
sentry.stellic.com
jhu.stellic.com
metislabs.io
elon.stellic.com
learn.stellic.com
elon.stellic.com
duke.stellic.com
byuh.stellic.com
cmu.stellic.com
nuq.stellic.com
byuh.stellic.com
columbia.stellic.com
tufts.stellic.com
byuh.stellic.com
jhu.stellic.com
nuq.stellic.com
byuh.stellic.com
cornellcollege.stellic.com
nuq.stellic.com
stellic.com
stellic.com
byuh.stellic.com
nuq.stellic.com
upc.devbox.stellic.com
columbia.stellic.com
elon.stellic.com
tufts.stellic.com
elon.stellic.com
elon.stellic.com
stellic.com
cmu-staging.stellic.com
jhu.stellic.com
nuq.stellic.com
jhu.stellic.com
csun.stellic.com
stellic.com
jhu.stellic.com
uchicago.stellic.com
jhu.stellic.com
uchicago.stellic.com
elon.stellic.com
udem.stellic.com
elon.stellic.com
uchicago.stellic.com
byuh.stellic.com
stellic.com
blog.stellic.com
umn.stellic.com
www.stellic.com
sentry.stellic.com
jhu.stellic.com
stellic.com
stellic.com
columbia.stellic.com
tufts.stellic.com
jhu.stellic.com
byuh.stellic.com
jhu.stellic.com
umn.stellic.com
academyart.stellic.com
stellic.com
umn.stellic.com
mitsloan.stellic.com

Certificate

The complete raw certificate details for cmu.stellic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pV9dgJpxFsqjFXTq69b
KDvXnrrje6LJPXtuMdtXbpkkIYngvRYoRkHTa206HEUrRXDP14FHx5C/zJB+iHkB
jCKpyGtHMcmvlOnY6o7xWtN2R50uTCpn9d6wVd2qN3DcfCxYN9Pc340XN/UixkxB
x/fNpNOq7PdE19x3GPI7oAGVOZ/vvO/uLjYAm9VjEuY5wWNEohQ1WREXgnUtH4v2
1hbTOv0JJ9xAfoj1qdd0xmh+6gHth/B5hzAX83ilegA/VmE+YyWB0AwwhDKWYnDD
wxM4yWT6e2D7jmUaLfamFLftzDqnlsLkBJ43mQDwqqmTU2Mmzism/TQpJzol4ygz
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429032356097852724745768424956580499084999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 00:15:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 00:15:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmu.stellic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28098620009309544054616690111785019815764829881699886281668141712160839315772191019150046896219629728435841225591874837470143457237657374215035812168224071559887872202585885725660592965592258560883242347010189962313683086695509594337418444463822041553716403533565780044682202751435946909926662558130953954401232758077871540133463634774976574870374971304548298245407036682197590326348010650468301854970182223520480816722642149202869530507275996048220415470333066190779271389772673786402377036896154730504600370594654562397730350894562567537473706859173068565071668528872464889207986180671865191388522613940562680099739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d7ee7bfeff890dc7785ca40c0ac49fe6abe467e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academicaudit.andrew.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmu.stellic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018951f80e110000040300473045022100ef0e0b6fbec1b5275f80143b5509b2fa627f6a23984b4e0bab477bd78a7b327e02202d1bfbab6126367a7651147b1228befbc6f1eebf85339e99f3d3d87af1cf3d1b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018951f80e1a00000403004730450221008b922f0a728885dd71d9c35f4d694f3b77516937c62af1821e32464636b2627902200fb70ea7f53650fb2c154b2f8dc04bb1804da95373f91fa6d4ff4c855e67f8ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008db46567d13249ac793670dfd79634684cb3d23eb8d52cf93357f290793762ef991ff98bbfcf618d0926c2847cece1e3aa918db369e294494572e0a81d0222176be020dbd8c76513b64f54ef4b3410e0c9ac63344a2e54132907f7ed83da14966497250467273f7495b9bb35c28df3a776a13805d9ad48a74cc0709c9c77ff024028f331e9bde476a21463e50c2a5f82c9f8b1c7a3475c4bafc7c49d2a802c2ce6a52954acfa888b6866a673a262228f584c663afcf6f5e46213551d57e5eaaada46867af8b6ff72ef0c034f7bb8e15157086ed90c8988596f81848d55d2909535e5cc5d13413963e042ad9f8b836fc4082ccd4c04cd59959cd63c6b35b04b6c