lasr.cs.ucla.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:4a:4c:04:93:c5:11:3b:02:25:6b:96:2b:da:79:cd:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lasr.cs.ucla.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:4a:4c:04:93:c5:11:3b:02:25:6b:96:2b:da:79:cd:b2
Serial Number (int): 330172653492396809662504509389645140315570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:84:24:48:11:bb:aa:ec:a7:e3:f4:e9:a2:1b:e1:a1:8e:19:60:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:12:36:75:85:21:80:40:8a:d6:72:41:30:68:77:e4:93:31:74:76
Fingerprint (sha256): 00:19:a3:23:e0:fe:5a:a8:ef:49:0d:f1:1d:08:49:b4:d6:58:cd:ac:50:e0:0a:4b:f1:eb:93:a9:02:19:63:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lasr.cs.ucla.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lasr.cs.ucla.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lasr.cs.ucla.edu

Other certificates including the domain name ucla.edu

(limited to 100 certificates)
iuc.publicaffairs.ucla.edu
luskin.cmfe-asm-01.noc.ucla.edu
scandinavian.ucla.edu
pcard.finance.ucla.edu
pods5-stage.mednet.ucla.edu
lasr.cs.ucla.edu
archivematica.library.ucla.edu
cryoem.ucla.edu
*.genetics.ucla.edu
www.ampersand.gseis.ucla.edu
sait-api-qaa.uclanet.ucla.edu
bruinpost.ucla.edu
giving.ucla.edu
trs.it.ucla.edu
test.int.maximo.ucla.edu
stage4.my.ucla.edu
collie.ats.ucla.edu
gpsslvpn.mednet.ucla.edu
greenfieldlab.psych.ucla.edu
5690449683546112-fe3.pantheonsite.io
www.cal.cs.ucla.edu
npc.cnsi.ucla.edu
patstest.research.ucla.edu
sites.anderson.ucla.edu
sni.cloudflaressl.com
tls.automattic.com
lsdapimdb01.medctr.ucla.edu
info-smtp-asm-01.noc.ucla.edu
cluster3.technolutions.net
mbi.ucla.edu
www.biolchem.ucla.edu
portal.research.ucla.edu
www.predictiontechnology.ucla.edu
intercampus.genetics.ucla.edu
cores.ee.ucla.edu
5729623769874432-fe3.pantheonsite.io
velosws1.ad.medctr.ucla.edu
buddhistbodies.humspace.ucla.edu
ergonomics.ucla.edu
epss.ucla.edu
sni.cloudflaressl.com
*.sistat.ucla.edu
labschool.ucla.edu
accounts-test.iam.ucla.edu
webapps.ccnet.ucla.edu
fsus-6.freshservice.com
osf.ucla.edu
www.botgard.ucla.edu
fspos.asucla.ucla.edu
npc.cnsi.ucla.edu
hss.semel.ucla.edu
voteview.polisci.ucla.edu
risksciences.ucla.edu
lucian.humspace.ucla.edu
laes.neurology.ucla.edu
webmail2.seas.ucla.edu
milken.music.ucla.edu
pams.research.ucla.edu
vmw-asm-04.noc.ucla.edu
sinai.library.ucla.edu
hue.humspace.ucla.edu
drugdiscovery.neurology.ucla.edu
anthro.ucla.edu
zhoulab.cass.idre.ucla.edu
giveto.ucla.edu
gseis.ucla.edu
fsapi.it.ucla.edu
channel.hammer.ucla.edu
video.law.ucla.edu
transitwiki.org
5735088218177536-fe1.pantheonsite.io
orisapps.research.ucla.edu
www.interactions.gseis.ucla.edu
barbernas.eeb.ucla.edu
nospam9.ad.ucla.edu
alb-p05.medschool.ucla.edu
ids.mednet.ucla.edu
colossus.cdh.ucla.edu
transportation.ucla.edu
pats.resadmin.ucla.edu
alumni.anderson.ucla.edu
partnershipschools.gseis.ucla.edu
server99b.dent.ucla.edu
nano.ucla.edu
lasik.ucla.edu
gsc1.bisp.ucla.edu
scai.cs.ucla.edu
www.bol.ucla.edu
ecr.idre.ucla.edu
deblab.med.ucla.edu
president.usac.ucla.edu
www.botgard.ucla.edu
5659974608879616-fe3.pantheonsite.io
www.admission.ucla.edu
hci.ucla.edu
lbmp.anthro.ucla.edu
digital.library.ucla.edu
intercampus.genetics.ucla.edu
whitmania.ucla.edu
secure5.ha.ucla.edu

Certificate

The complete raw certificate details for lasr.cs.ucla.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V/6KUexPcU/D+cw7CM9
4NLHHpgq4GU2lJ6ji2ObVQ4DiQHSD49KHrIL5xCdsjn4H2c/wNVyOu5nJZKC+ySi
05oR/DBECdIz/MxVVaryhyfgjSXj3s+wCB6ZHeq90OWXyXhoKgckJiLD+Hx+xTdi
jlez3VS8catsCCfPmD9cWzUk+ZwAf133Qz++5EaHzohgvdaZq/tmg1KxrgM+x3Z6
HgowJD0SFOIgqZ+Nl97mT1oM+UqllzTrZgqxDSMD5+hkKPz57m4Qc+9s2R1kMtTQ
gRo7adojouS5ZUIHv+gOzjshUduCv+4Epmq6hvKKVt+hdR+5uQgbPtzFiF5qQE5c
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330172653492396809662504509389645140315570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 15:00:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 15:00:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lasr.cs.ucla.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26431133855413675804561086756444333527527507517068185319830504593821230135612951450188493886022038738584601000441619836561620079506812250793192086143645617355377175739620619725620566342293473430982605742215782204683443365078023968436678288323675520520423996376746797758708476309333571037170431168851418507935496899743943632638999103660369585281392588985040087386896201488010783090884580613257250411434600813549013195347706434502757900968861247213373491337753176930587458730552295376447009513158887286099213176324341609617702077541512926180695720851466264671440202841304936395998722587045219062766851413358381229825233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb84244811bbaaeca7e3f4e9a21be1a18e19609b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasr.cs.ucla.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001676a80362e00000403004630440220708252e271326197288f4783415cb8ff8b736f1cfe87b77f5048e85551a7ade2022060539d037aefcd0ceb89c2f8c18c0dff9dcc0e9ae821171e980b1b48b83745be00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001676a803676000004030047304502202831f106397581a04ad992e1b457e9b68ae84c2c3896dec220cd8efcac045e6a022100b8e9fec05004e4f13d23c9dce25fc1129c1e5557bcaf68bf9f37784a64e19c5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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