DV SSL/TLS Certificate for death.ocf.berkeley.edu

Certificate is witin its validity period

Issued by Let's Encrypt (E5)

About the death.ocf.berkeley.edu DV SSL/TLS Certificate

This certificate with serial number 05:df:5b:c5:51:50:66:db:22:9c:5c:12:4e:2d:aa:5e:d6:e2 for death.ocf.berkeley.edu was issued on by Let's Encrypt.

With 30 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for death.ocf.berkeley.edu provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:df:5b:c5:51:50:66:db:22:9c:5c:12:4e:2d:aa:5e:d6:e2
Serial Number (int): 511566381761513332577056613012445784364770
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 93:6f:e6:dc:88:bb:bf:4e:3e:65:4f:d4:0b:91:4a:b8:38:ca:c9:0d
Authority Key Identifier: 9f:2b:5f:cf:3c:21:4f:9d:04:b7:ed:2b:2c:c4:c6:70:8b:d2:d7:0d

Fingerprint (SHA-1): cf:06:25:8e:9a:df:35:91:11:45:75:a1:3f:00:7a:5b:59:fc:2b:77
Fingerprint (SHA-256): 45:6e:3d:ec:21:2c:df:5f:bf:17:87:77:f8:b4:08:1f:12:9f:77:83:44:3b:2f:e5:95:e7:bf:3b:65:b0:0b:25

Issuing Certificate URL: http://e5.i.lencr.org/

Revocation Information

CRL Distribution Point: http://e5.c.lencr.org/99.crl

Check the revocation status for certificate death.ocf.berkeley.edu
30
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for death.ocf.berkeley.edu

Public Key Algorithm
ECDSA
Key Size
384
Signature Algorithm
ECDSA with SHA384
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

accounts.ocf.berkeley.edu
accounts.ocf.io
death.ocf.berkeley.edu
death.ocf.io
decal.ocf.berkeley.edu
decal.ocf.io
dev-discourse.ocf.berkeley.edu
dev-discourse.ocf.io
dev-vhost-alias.ocf.berkeley.edu
dev-vhost-alias.ocf.io
dev-vhost.ocf.berkeley.edu
dev-vhost.ocf.io
hello.ocf.berkeley.edu
hello.ocf.io
merch.ocf.berkeley.edu
merch.ocf.io
ocf.berkeley.edu
ocf.io
secure.ocf.berkeley.edu
secure.ocf.io
staff.ocf.berkeley.edu
staff.ocf.io
unavailable.ocf.berkeley.edu
unavailable.ocf.io
wiki.ocf.berkeley.edu
wiki.ocf.io
www.ocf.berkeley.edu
www.ocf.io
xkcd.ocf.berkeley.edu
xkcd.ocf.io

X.509 Certificate

The complete raw X.509 certificate details for death.ocf.berkeley.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEDsben6ypmXnDq3W/LgM1Fb0aLdX7CC7M
rWtla3vAqcf3e3XdrVdMenbyxEMzeWSS5GB5yaTDrVvN328Jpvzo/qUooGEm8U8P
MunLeafBdFW/el6kSRdw5QU2liLvLauY
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 511566381761513332577056613012445784364770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-26 22:17:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-24 22:17:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'death.ocf.berkeley.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.132.0.34
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (776 bits)
				00040ec6de9faca99979c3ab75bf2e033515bd1a2dd5fb082eccad6b656b7bc0a9c7f77b75ddad574c7a76f2c44333796492e46079c9a4c3ad5bcddf6f09a6fce8fea528a06126f14f0f32e9cb79a7c17455bf7a5ea4491770e505369622ef2dab98
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							936fe6dc88bbbf4e3e654fd40b914ab838cac90d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f2b5fcf3c214f9d04b7ed2b2cc4c6708bd2d70d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e5.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (618 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'death.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'death.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decal.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decal.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-discourse.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-discourse.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-vhost-alias.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-vhost-alias.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-vhost.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-vhost.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unavailable.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unavailable.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkcd.ocf.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkcd.ocf.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e5.c.lencr.org/99.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197ae86ea080000040300473045022100a22b8f0efc54e7956e81d0d24a5aa41be7ec93f7fe665d947b7e2f297406e564022000a6678e7bfd0e4782d395a56e254fa65c49d1618df5f34cabb0fd9bae5e753f007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197ae86ea1c000004030047304502210095e94ea1d14e42d9135a967d843922ca2d642f957d984019aa6b7a1d998c4fcf02204d2729078b5bd903bf0a4bcff3e8a0034edb58fcaef7f2ee0fc3c45d45960184
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 34139573539239185754624110943624837430348003506639177807372418587009163329800304749196419500573874662524026609767662
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 12712588364276025771004679390155104913258896046944940072102754773843689625855705896177811598875178172657353659430734