foundation.solano.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:7b:d7:49:15:a9:fc:42:08:b0:e4:55:16:7f:96:17:0d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foundation.solano.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:7b:d7:49:15:a9:fc:42:08:b0:e4:55:16:7f:96:17:0d
Serial Number (int): 335342744286762816558905641114583977826061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:65:64:19:19:d7:bf:a0:f0:6e:4b:32:fb:98:94:e7:e5:1a:12:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:42:1c:c6:b8:c7:5d:cd:44:c8:29:84:33:7b:e6:f3:37:9c:7e:c9
Fingerprint (sha256): 5e:58:f0:c9:2b:d8:d1:dd:b5:ec:4f:07:67:76:7d:c1:8b:b7:c8:5c:9b:ae:dc:2c:f1:57:6f:6d:9f:60:91:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate foundation.solano.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foundation.solano.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foundation.solano.edu
www.foundation.solano.edu

Other certificates including the domain name solano.edu

(limited to 100 certificates)
alumni.solano.edu
*.ezproxy.solano.edu
foundation.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
foundation.solano.edu
status.slightlydifferent.co.nz
helpdesk.solano.edu
foundation.solano.edu
oromet.solano.edu
alumni.solano.edu
libguides.solano.edu
libguides.solano.edu
alumni.solano.edu
foundation.solano.edu
heartland.solano.edu
foundation.solano.edu
barracuda.solano.edu
papercut.solano.edu
libguides.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
libguides.solano.edu
banportals.solano.edu
dropbox.solano.edu
ssomanager.solano.edu
foundation.solano.edu
helpdesk.solano.edu
my.solano.edu
alumni.solano.edu
www.solano.edu
foundation.solano.edu
www.solano.edu
jobs.solano.edu
huntington.solano.edu
foundation.solano.edu
sutter.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
alumni.solano.edu
cashnet.solano.edu
alumni.solano.edu
vpn.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
foundation.solano.edu
ssomanager.solano.edu
cascade.solano.edu
alumni.solano.edu
vjo-ise-psn.solano.edu
alumni.solano.edu
foundation.solano.edu
alumni.solano.edu
foundation.solano.edu
appointments.solano.edu
ssb.solano.edu
degreeworks.solano.edu
foundation.solano.edu
techstatus.solano.edu
alumni.solano.edu
libguides.solano.edu
my.solano.edu
alumni.solano.edu
alumni.solano.edu
foundation.solano.edu
ssomanager.solano.edu
foundation.solano.edu
foundation.solano.edu
foundation.solano.edu
banportals.solano.edu
ssomanager.solano.edu
dropbox.solano.edu
foundation.solano.edu
*.ezproxy.solano.edu
*.ezproxy.solano.edu
foundation.solano.edu
alumni.solano.edu
foraker.solano.edu
foundation.solano.edu
*.solano.edu
alumni.solano.edu
foundation.solano.edu
ssb.solano.edu
alumni.solano.edu
my.solano.edu
libguides.solano.edu
foundation.solano.edu
foundation.solano.edu
appointments.solano.edu
adminpages.solano.edu
matterhorn.solano.edu
alumni.solano.edu
vpn.solano.edu
clockwork.solano.edu

Certificate

The complete raw certificate details for foundation.solano.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgISA9l710kVqfxCCLDkVRZ/lhcNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMDUyMjAxNDlaFw0x
ODA0MDUyMjAxNDlaMCAxHjAcBgNVBAMTFWZvdW5kYXRpb24uc29sYW5vLmVkdTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKF73jUROchRz1byHnUOh9V9
cs5nh/6zbnUZQ3Wm/YQCII2bCW8SIzDlJuMHesVb8vurILMtkLXVm3oO8jkZcJWY
noPadr1+Af7C7Bq0iNspl3L8Ex8TvBZVHQJL1N0fAqUAS7jGR3i7CypY9MiV0gdT
sz4ux6EE5jnXt/m0UlsLCgjzkUaWS/ZnjUgIrPyc/Csin1oYhuCcWXxhoukAPOXt
JUDlVgjz37vFDsR/2qvnKqC4sb5dzGgW6P5RQhw4z/H8dPigWdIWsvW7+l6RhbIZ
DEcYDbggHGU+X3oJWVgIJnhwPLQHNsyXLUjzA92Dds+sTWDb+Fp897SAxGYlIORN
ZGGIFFiNghzt37hrvInuqHaLOWvJcoV+jSND5XRMPDoCc4s707JOIG+JIg2RsIFW
Jhs3GuOo2ixvtz01aQTNktJKEoxarHJBpO9ifiBXAHSSjF1qmZLCKFBKW9a3PCnF
1GQ+A1VAbipfqWULx9oS0Unb4y3ptPBhbRuwqmwjsk8j3U42nHikuau0kHlo2dU0
1ebm3RTWIx9Ohzn2UmE9mbufn7uivdsLh42BT9rava1UY5bCOxk/cLM+tsLJt5nu
qIYv1vS+eQpXz+s5QCg6rGhKVmNC24Jd3abosy+F49+aCW19Sn6vXIG5FqIxG8r1
JN/cYFuzSBbWMohagokdAgMBAAGjggIwMIICLDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFNplZBkZ17+g8G5LMvuYlOflGhL1MB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVZm91bmRhdGlv
bi5zb2xhbm8uZWR1ghl3d3cuZm91bmRhdGlvbi5zb2xhbm8uZWR1MIH+BgNVHSAE
gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp
cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n
IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp
Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw
b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAJkN1OlmtAmhMpdqTKnEYwvCL2T5
XBxx1dvEGClvGHGgX+c1O4Kzd3BMk8Cj4zyEuBTe13TU2y/KDe7xDgPSYrW5kBXI
gY++FEJHmkwTxtMWBb6qsBnkJiC+0xYz5/Opj8zjIsP6e9hkbD26hTpwxecmexW6
OELwfWvAceUt/wWQszeGSJJ5tHRBRmgaHFl618zSTaPyFrSWYzQSzJCZaCcLotzk
s3h5cv3mUZh6Ymf1BXq8m4RSrwehPa1p7pgnp+yMlfDu82a86cgjqOKGMJlPZ20Z
3cwEjqe6pAFbp+kwqLMYb6KimvAF1PSZ7afJaD9xt5/Mg1NfgMK3z0dYPG8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335342744286762816558905641114583977826061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-05 22:01:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 22:01:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foundation.solano.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658796668936272139040250172604677788047908062390383438038142374282965998187497422772321208115231578341519181909393746370277678929927429471904071745389522799310532835797749702269313961908711306721079609456254625639824823314970203112824201494302980274279951114623776461892174316221357500595103309734253988317022846901109363960399780848611725571140225437578494135888725640760147748895031839009459181713646528517136940197627668680991424264321824380078785401811347811214402900168914739848675464581977623215978956837008366011560342441496597058931161680407828335394134566301101890785798405052842550813913300382941125606614208194154227234950178779780446372967466744054813341816291506934846573315359643716976490609517592499312838778060642671794382325034740137668617667045910017846348381416983742840463584301454565978890877456563852118721433757605179007598623361858535526121947672435838221384781498677699062734473409741232206749866938463526946306959499586970875980325844117591466906069790448932076110135005542372642241586993532827754916083901878306510157832257180901086345675438934829357846504557665243553235474081978875587774564410115299926524316493813673280132298223679238887738084086181968491332847035204234668399755310188920390856032291101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da65641919d7bfa0f06e4b32fb9894e7e51a12f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.solano.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundation.solano.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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