nuq.stellic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:94:e7:2c:60:60:b2:7e:83:91:2a:21:1b:dc:b8:fc:10 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nuq.stellic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:94:e7:2c:60:60:b2:7e:83:91:2a:21:1b:dc:b8:fc:10
Serial Number (int): 341841422452634558920826835969038098168848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:4d:f9:d0:bc:5f:0a:77:f6:0e:12:be:cc:a2:7e:f0:eb:e9:74:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 99:8f:5c:6f:99:64:fb:05:ce:50:dc:29:a9:93:06:d4:22:a1:39:2d
Fingerprint (sha256): 68:a9:88:b9:90:89:a5:ab:28:2b:d0:dc:f1:bf:49:17:7d:37:11:a5:05:c8:ab:8c:4e:13:22:cd:2c:e1:0e:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nuq.stellic.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nuq.stellic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nuq.stellic.com
stellic.qatar.northwestern.edu

Other certificates including the domain name stellic.com

(limited to 100 certificates)
cmu.stellic.com
www.stellic.com
udem.stellic.com
blog.stellic.com
tufts.stellic.com
nuq.stellic.com
stellic.com
byuh.stellic.com
uchicago.stellic.com
tufts.stellic.com
umn.stellic.com
cmu.stellic.com
stellic.com
nuq.stellic.com
stellic.com
tufts.stellic.com
jhu.stellic.com
stellic.com
jhu.stellic.com
tufts.stellic.com
tufts.stellic.com
tufts.stellic.com
cmu.stellic.com
byuh.stellic.com
cmu.stellic.com
byuh.stellic.com
tufts.stellic.com
stellic.com
nuq.stellic.com
uchicago.stellic.com
www.stellic.com
elon.stellic.com
stellic.com
nuq.stellic.com
learn.stellic.com
columbia.stellic.com
stellic.com
sentry.stellic.com
jhu.stellic.com
metislabs.io
elon.stellic.com
learn.stellic.com
elon.stellic.com
duke.stellic.com
byuh.stellic.com
cmu.stellic.com
nuq.stellic.com
byuh.stellic.com
columbia.stellic.com
tufts.stellic.com
byuh.stellic.com
jhu.stellic.com
nuq.stellic.com
byuh.stellic.com
cornellcollege.stellic.com
nuq.stellic.com
stellic.com
stellic.com
byuh.stellic.com
nuq.stellic.com
upc.devbox.stellic.com
columbia.stellic.com
elon.stellic.com
tufts.stellic.com
elon.stellic.com
elon.stellic.com
stellic.com
cmu-staging.stellic.com
jhu.stellic.com
nuq.stellic.com
jhu.stellic.com
csun.stellic.com
stellic.com
jhu.stellic.com
uchicago.stellic.com
jhu.stellic.com
uchicago.stellic.com
elon.stellic.com
udem.stellic.com
elon.stellic.com
uchicago.stellic.com
byuh.stellic.com
stellic.com
blog.stellic.com
umn.stellic.com
www.stellic.com
sentry.stellic.com
jhu.stellic.com
stellic.com
stellic.com
columbia.stellic.com
tufts.stellic.com
jhu.stellic.com
byuh.stellic.com
jhu.stellic.com
umn.stellic.com
academyart.stellic.com
stellic.com
umn.stellic.com
mitsloan.stellic.com

Certificate

The complete raw certificate details for nuq.stellic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubjDUU5fq8PhyRizKBb1
m+S1YlUADmTa9tTpDw/uCObW3dOiRyXOqtSOyCoMK4V/kEyTUiB46d1CLq5ujbUO
pKA28M+OBpbAlqoFmVSCXSeU8vW2s4c5nYT1Bzv5rIIEsJn7gQcHJUrhXb3xCU6v
xXtBZmvGjNUbRrHZouEiYJz3oVs/0QBrCJq+SfSUkl92VEQMqF7905RKACbmkdei
3WsnWp2prsmzEey8NUXV3kO6FemariQU3lyBisu4CxAD/58NPwjdBczcNi0bTbj5
TpM+Y2JJpkpdMMLQsAffTz6DWyniDFc4w9mJ0Eh4obpu9CG319ecNyo+o3UduaDR
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341841422452634558920826835969038098168848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-28 20:34:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 20:34:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nuq.stellic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23445196429709388195323066811798418184774380012379721090790544606504055982898172164684119338866971771858201048101436850971276445066960165189410859653204187313864852460559448069707716743212372284859053072070776231514782260814028129388482584935277037283930243477954080106200678721856480189813561335723180740321571773190315900246396374445035958794128905263591072479687085089815474191105722375269458455480895753087689769315865729149321184179485548316791686763125035245386353374421923786586749153169413889793103803689290847475637988630227802623042338631986719064700136357725610142871783965619183277835024237043355742163301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a04df9d0bc5f0a77f60e12becca27ef0ebe9749e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuq.stellic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellic.qatar.northwestern.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166bc99f0c20000040300483046022100d4394a203badf639e2bb53fbd0d8390303e0684e5bdbb3722eb064120b63c754022100ee59f8b63f764469c3b9c5b88251ff146e0a136b97b67377a0695c81a42abd07007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166bc99f2ff0000040300473045022100acbdcc3b184ac113846705576d93d9a24c66856f32bb6f812a7103127d5244b50220547f46760eaab87ea1d9c75955e3cf96e0fcbba543ff341e0446e07224b6f11c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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