support.bridgevalley.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:de:a3:74:3e:48:c9:c4:69:52:92:9d:9c:09:b1:73:af:66 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=support.bridgevalley.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:de:a3:74:3e:48:c9:c4:69:52:92:9d:9c:09:b1:73:af:66
Serial Number (int): 337096810984753877217266103350670340108134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:e7:b1:7b:1b:91:f6:16:6a:eb:99:9c:de:37:68:de:61:94:ee:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:20:b1:7b:59:f8:03:f4:eb:92:31:50:57:70:be:14:0e:d3:e0:2c
Fingerprint (sha256): a7:96:c2:c2:8c:7b:8e:c6:0c:7b:4d:7d:2c:7a:38:1d:55:c3:8d:1a:48:f7:e0:ed:f3:53:a3:15:32:4a:22:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.bridgevalley.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.bridgevalley.edu

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.bridgevalley.edu

Other certificates including the domain name bridgevalley.edu

(limited to 100 certificates)
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
blackboard.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
ezproxy.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
blackboard.bridgevalley.edu
bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
*.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
mobile.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
mail.bridgevalley.edu
*.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
sni.cloudflaressl.com
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
mail.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
mail.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
*.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
blackboard.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
mail.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
support.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
sni.cloudflaressl.com
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
mail.bridgevalley.edu
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
5707931811053568-fe1.pantheonsite.io
bridgevalley.edu

Certificate

The complete raw certificate details for support.bridgevalley.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337096810984753877217266103350670340108134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 14:32:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 14:32:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.bridgevalley.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3599717427208026242613410709392899894510421622917963746374329127333179233218230511377910883102065715760718484927868436498249378973050551244877773461085083511973040126920577636479258394154690689730523770406653595299477452848249205120298516196132665661342006724304054099781163594267253802931471723466043121966002911716511866433072826551392194660561195608795781328093138204474850548142053239567917208686597413226143812330099484989701774857414738308832166528249721556961571131277505852337978028794439091376439845250669559865878839414639351685249544077238130235452320496518990011917460076406860088942209399000992166270141551416070901609959153881757193862534140761304647625465674141210835938102811051535964590473452511525712554728606089219222145563113444353910382966080685256473280919029082987817287043979202543030766228583281105794766038013226541837571331433356703062361334914159277339420359252939090168958789162824448622474500033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9e7b17b1b91f6166aeb999cde3768de6194ee6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bridgevalley.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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