cstore.pcci.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:5b:ba:41:6c:b9:ac:ad:b9:bb:a8:61:4a:4e:db:ee:42 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cstore.pcci.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:5b:ba:41:6c:b9:ac:ad:b9:bb:a8:61:4a:4e:db:ee:42
Serial Number (int): 317945657545959368968517656381618317422146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:04:bb:14:84:df:02:2b:30:dd:76:d2:56:5e:2e:80:ba:0e:ca:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:b5:39:c1:30:57:3e:af:3b:6f:1c:ac:74:7b:92:c1:2e:a5:fb:ae
Fingerprint (sha256): 56:3d:cc:cd:86:ab:e6:bd:f1:a4:20:68:ca:86:09:a1:4d:34:8b:c5:99:97:7b:56:43:56:5c:41:01:0b:37:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cstore.pcci.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cstore.pcci.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cstore.pcci.edu
rejoicemusic.com
www.rejoicemusic.com

Other certificates including the domain name pcci.edu

(limited to 100 certificates)
pccvpn.pcci.edu
www.pcci.edu
ezproxy.pcci.edu
aatlconnected.com
students.pcci.edu
info.pcci.edu
wifi.pcci.edu
adfs.pcci.edu
adfs.pcci.edu
aatlconnected.com
www.pcci.edu
cstore.pcci.edu
cstore.pcci.edu
info.pcci.edu
prtg.pcci.edu
pccvpn.pcci.edu
workplace.pcci.edu
idtestapp.pcci.edu
pcci.edu
adfs.pcci.edu
access.fortefoundation.org
prtg.pcci.edu
cstore.pcci.edu
aatlconnected.com
go.pcci.edu
exchange2.pcci.edu
cstore.pcci.edu
pccvpn.pcci.edu
tpccmobileapp.pcci.edu
info.pcci.edu
aatlconnected.com
aatlconnected.com
gitlab.pcci.edu
cstore.pcci.edu
cstore.pcci.edu
aatlconnected.com
mypcc.pcci.edu
gitlab.pcci.edu
exchange02.pcci.edu
aatlconnected.com
maximoapp.pcci.edu
go.pcci.edu
pccvpn.pcci.edu
ssp.pcci.edu
exchange2.pcci.edu
access.fortefoundation.org
info.pcci.edu
students.pcci.edu
educationedge.pcci.edu
go.pcci.edu
pcci.edu
aatlconnected.com
mailfirewalls.pcci.edu
gitlab.pcci.edu
tpccmobileapp.pcci.edu
wifi.pcci.edu
cstore.pcci.edu
aatlconnected.com
gitlab.pcci.edu
exchange2.pcci.edu
students.pcci.edu
pccvpn.pcci.edu
pcci.edu
info.pcci.edu
idproddsr.pcci.edu
students.pcci.edu
services.pcci.edu
cstore.pcci.edu
go.pcci.edu
ezproxy.pcci.edu
aatlconnected.com
access.fortefoundation.org
cstore.pcci.edu
alumni.pcci.edu
alumni.pcci.edu
cstore.pcci.edu
go.pcci.edu
ftp.pcci.edu
students.pcci.edu
pccmobileapp.pcci.edu
aatlconnected.com
access.fortefoundation.org
pcci.edu
students.pcci.edu
info.pcci.edu
access.fortefoundation.org
wifi.pcci.edu
cstore.pcci.edu
ezproxy.pcci.edu
alumni.facamp.com.br
access.fortefoundation.org
pccvpn.pcci.edu
exchange02.pcci.edu
students.pcci.edu
alumni.pcci.edu
educationedge.pcci.edu
alumni.thrivescholars.org
pccvpn.pcci.edu
*.advertising.pcci.edu
cstore.pcci.edu

Certificate

The complete raw certificate details for cstore.pcci.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkT72JnOeYFafmehTqTd
KRVAquYqL90P7VZuIBdE0Yv6Zts5L47vyVx3zaoGeQi5W/92a0w88fluA7qlhhYq
+L1FWrKf15sQU3IEwEyxjQho8BvcM8YnIZYi6UZNtpyRs8Fae5FIdLIhIJXF0iq1
2VZQbpFpstC72bHOOYILAcv/mNHsnwvMCfDYs6TgKvZ/9Gx9h+DvSoEchH1eJ/a+
IYXuMcgmaMJ8xIfs87mKdW100F07x4gGE+RrmgW244f0ausBBJDtwvaSMV52V0yq
CMXNUsvKi9kqWDrJnqUqEpuLgQKxU76gyjDW6kNSxqUkS1JKdNx3ZQ1f2bXyqG07
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317945657545959368968517656381618317422146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 20:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 20:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cstore.pcci.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17959856471886170322938645520754243411316186416185481455197819251900174149954733860355862102020985164492209955338226728206935431878115080415025466004147436044983786096600393868379508380882555847520069454673002454662611377884093586763455980503412608860119512230861166279517340735280248442381673134287233054068024511533432404976693300015722359385946033762313093259362383372244891133420364794481707041988941361896570219265799541398504560754134268851799803903058972600467783282622694943454317344362284584271130920915342780319894149064738861967282514650871354325234639544951541939557614453649793554922331468525742131592031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4504bb1484df022b30dd76d2565e2e80ba0eca94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cstore.pcci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejoicemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rejoicemusic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016973cc3d7800000403004830460221009cbe3b3f9afea71510f3e39329efb79e0f0533d992983c198c16ac0a9c2804f802210084933f2b4e05b349733aa0fcfeddc1da83cad9915980311b7d99a8a996fe1aa9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016973cc3dc1000004030047304502202244bd8a89da3f3759e57e9b695942e5b237891068c30397fd556c1986de21cc022100805ce2f4e9614c9a46b19eb65d50fcfae803cbc58c1ecea33176227ea941bf51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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