pressbooks.gvsu.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:07:f1:e6:2d:44:ae:b4:d9:8f:10:90:74:4d:da:a3:17:ca was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pressbooks.gvsu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:f1:e6:2d:44:ae:b4:d9:8f:10:90:74:4d:da:a3:17:ca
Serial Number (int): 264040373457138953160883893751532962912202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:c3:14:3d:a7:09:44:cc:45:f7:f9:31:31:ba:58:9e:8e:04:fe:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:31:c3:b9:28:2c:5b:34:12:78:4f:15:f5:53:e4:bd:ae:f0:6b:ca
Fingerprint (sha256): 56:e5:11:00:ee:b7:07:7f:bd:4d:37:11:0c:8e:8f:64:fe:a1:08:e9:59:56:c6:79:75:cb:15:a5:9f:46:e0:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pressbooks.gvsu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pressbooks.gvsu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gvsu.pressbooks.pub
pressbooks.gvsu.edu

Other certificates including the domain name gvsu.edu

(limited to 100 certificates)
lyncpool2.gvsu.edu
*.gvsu.edu
cal.library.gvsu.edu
noncredit.gvsu.edu
sip2.gvsu.edu
gvsu.edu
autograder.computing.gvsu.edu
onb-fnd-app.gvsu.edu
am.gvsu.edu
artgallery.gvsu.edu
extlyncweb.gvsu.edu
libguides.gvsu.edu
mybanner.gvsu.edu
eis.gvsu.edu
sip.gvsu.edu
psn-test.ise.server.gvsu.edu
scholarworks.gvsu.edu
cal.library.gvsu.edu
noncredit.gvsu.edu
cherwell-res.office.ads.gvsu.edu
services.gvsu.edu
vpn.student.gvsu.edu
EX-VMAIL-AL1.office.ads.gvsu.edu
psn.ise.server.gvsu.edu
artgallery.gvsu.edu
lyncpool1.gvsu.edu
search.gvsu.edu
*.DACCESS.gvsu.edu
mobile.banner.gvsu.edu
extlyncweb.gvsu.edu
xe01.mybanner.gvsu.edu
scholarworks.gvsu.edu
lyncpool1.gvsu.edu
clm-test.gvsu.edu
mail.exchange.gvsu.edu
aci.cis.gvsu.edu
mail.exchange.gvsu.edu
daccess-nca.server.gvsu.edu
cae.simcenter.gvsu.edu
www.gvsu.edu
eis.gvsu.edu
coursedog.gvsu.edu
*.cis.gvsu.edu
clm-test.gvsu.edu
scholarworks.gvsu.edu
library.catalog.gvsu.edu
alertus.gvsu.edu
mobile.banner.gvsu.edu
mac-jamf-dsoff.office.ads.gvsu.edu
ise-stu-al6.ise.server.gvsu.edu
library.catalog.gvsu.edu
vpn.student.gvsu.edu
services.gvsu.edu
noncredit.gvsu.edu
am.gvsu.edu
mill-web.office.ads.gvsu.edu
evideon.mll.gvsu.edu
workflow-test.gvsu.edu
artgallery.gvsu.edu
artgallery.gvsu.edu
ssl860756.cloudflaressl.com
scholarworks.gvsu.edu
integration-test.gvsu.edu
scholarworks.gvsu.edu
extlyncweb2.gvsu.edu
daccess-nca.server.gvsu.edu
lyncpool2.gvsu.edu
gvsu.edu
*.ezproxy.gvsu.edu
www.onbase16.gvsu.edu
jamf.gvsu.edu
7point-test.gvsu.edu
ise-stu-al7.ise.server.gvsu.edu
ems.simcenter.gvsu.edu
lakerstore.gvsu.edu
vrl.art.gvsu.edu
aci.cis.gvsu.edu
apply.gvsu.edu
*.ezproxy.gvsu.edu
lakerstore.gvsu.edu
*.ezproxy.gvsu.edu
solarwinds.ts.gvsu.edu
splunk-sh1.server.gvsu.edu
timeclock.gvsu.edu
proxy-mgr-al.office.ads.gvsu.edu
splunk-ds.server.gvsu.edu
www.gwise.gvsu.edu
housing-web.server.gvsu.edu
myloan-test.gvsu.edu
mypath-test.gvsu.edu
myloan-test.gvsu.edu
timeclock.gvsu.edu
winlab.gvsu.edu
help.library.gvsu.edu
ems.simcenter.gvsu.edu
*.gvsu.edu
xe1f-test.banner.gvsu.edu
cherwell-res.gvsu.edu
artgallery.gvsu.edu
lms-stage.gvsu.edu

Certificate

The complete raw certificate details for pressbooks.gvsu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264040373457138953160883893751532962912202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-01 03:30:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-30 03:30:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pressbooks.gvsu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709760575914654186077263092350340527619627373853520738965195842665611071853798704684524221139398356418814280362599517749551252879031652411593990714001138253645726264549233870131495506977017549640876560615382849611937183035877610723558044088933583395935206335315827287905411368745223166902971916847157355244334510536451757030410597735484440671855821459498329442550709469362767269277827950949961602788834500700107922125616778159941063644551336479789657161114428917815764777626920709347638650688721226376075985123804234197832443331669417161311945345268644028584249625519441384268146052847071780102813088031723702303710405571160877599285110851434934476988723083628078394985603139373222666094264238910930428724152595612550591533033874559011325297284307476450047123832544899331398206233654493523257479078615746273526351920729304827684182600161653749378284874104764561234282505120402536181392656570220358046910643105146922707551708408898507873682146949801024762482365391131351502902880878588967738953164967680448303090675912776450031070603468703410145975859328132704411318204231443087121731439839818863619271835031976990893654641610366257963557435526621857803208037331716150788043342552039615325416692610958628030512058232307433566001082977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcc3143da70944cc45f7f93131ba589e8e04fe1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvsu.pressbooks.pub'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressbooks.gvsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017cd9c394190000040300473045022100eba05a4267465f3cd3d16263cc3524736381602dee002bde5ce59247abe2a8ae022059e45d9fdcbf816889288268d87e22f9a6bea22cfb2ce10d6ef6f91c406df01900750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017cd9c3942800000403004630440220047b0041aafb72a1cb81c979371382db7af0d6a24c22563762f088d4a2fea62a02203a60c7949d9d539a1430d1eb293755f8e50ab317410f3912e098f535a74a636c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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