www.ece.ucsb.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:2e:c5:d7:be:77:d7:14:e8:af:41:de:b7:ff:e7:ad:2c:9b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ece.ucsb.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:c5:d7:be:77:d7:14:e8:af:41:de:b7:ff:e7:ad:2c:9b
Serial Number (int): 277252824795790663261553883375038018432155
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:c6:4b:8e:fe:0f:ca:49:b0:c5:40:ac:38:2b:e7:53:64:0a:31:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:e0:2a:f4:7b:f5:ec:65:4f:a9:3b:5a:f2:88:00:6f:8c:a9:88:5f
Fingerprint (sha256): 00:ae:c3:e3:99:e7:eb:b8:09:74:48:e9:d3:62:5e:f5:30:f3:e7:fe:c7:9d:8c:b0:fe:51:c5:17:77:f4:09:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ece.ucsb.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ece.ucsb.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ece.ucsb.edu
www.ece.ucsb.edu

Other certificates including the domain name ucsb.edu

(limited to 100 certificates)
flour.ece.ucsb.edu
physics.ucsb.edu
wepawet.cs.ucsb.edu
5665833682468864-fe1.pantheonsite.io
hrsweb-kx.housing.ucsb.edu
bic03.bic.ucsb.edu
carpepm.almonds.com
idm.my.ucsb.edu
ictf.cs.ucsb.edu
us.prod.campusgroups.com
github.nceas.ucsb.edu
5715605172781056-fe1.pantheonsite.io
leadership.sa.ucsb.edu
learning.nceas.ucsb.edu
5719721496281088-fe4.pantheonsite.io
studentvisa.test.sa.ucsb.edu
5729821648748544-fe1.pantheonsite.io
securessl-pst1.tessituranetworkhost.com
www.csmd.ucsb.edu
ucdc.edu
5680534013345792-fe1.pantheonsite.io
us.prod.campusgroups.com
rotabullstatus.com
www.ece.ucsb.edu
nartc.fcm.arizona.edu
5704093720903680-fe2.pantheonsite.io
api-status.360cities.net
5762637883244544-fe3.pantheonsite.io
ucen.ucsb.edu
5661530653720576-fe2.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
api-status.360cities.net
math.ucsb.edu
5703789046661120-fe2.pantheonsite.io
aurora.nceas.ucsb.edu
www.ascidiancenter.ucsb.edu
microscopy.nri.ucsb.edu
5665370564198400-fe2.pantheonsite.io
donelan.faculty.writing.ucsb.edu
history.ucsb.edu
checkrstatus.com
eci.ucsb.edu
support.nceas.ucsb.edu
5755164371714048-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
housing.ucsb.edu
info.resnet.ucsb.edu
secure.identity.ucsb.edu
www.mcdb.ucsb.edu
aurora.nceas.ucsb.edu
banknorthstatus.mambu.com
gibber.cc
webmail.sa.ucsb.edu
banking-business-review.com
barc.isc.ucsb.edu
paymentsolutions-status.shijicloud.com
cdn-test.battlefields.org
test.eis.uw.edu
dev.nceas.ucsb.edu
admissions.ext-prod.sa.ucsb.edu
5665833682468864-fe1.pantheonsite.io
ucen.ucsb.edu
5636953047302144-fe4.pantheonsite.io
citeak.multidevcom.uaf.edu
5720605454237696-fe1.pantheonsite.io
cowbird.lifesci.ucsb.edu
pathodstest.systems.isc.ucsb.edu
www.cnsi.ucsb.edu
5701569219657728-fe1.pantheonsite.io
web.physics.ucsb.edu
5715605172781056-fe1.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
admin7status.brinkpos.net
graylog.library.ucsb.edu
5762637883244544-fe3.pantheonsite.io
webextracts.test.sa.ucsb.edu
helios.geog.ucsb.edu
studentvisa.test.sa.ucsb.edu
www.arch.cs.ucsb.edu
scl.ece.ucsb.edu
5696605713858560-fe4.pantheonsite.io
philosophy.ucsb.edu
ucen.ucsb.edu
banking-business-review.com
apptcha.seclab.cs.ucsb.edu
anubis.cs.ucsb.edu
5666823336886272-fe4.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
paymentsolutions-status.shijicloud.com
santacruz.nrs.ucsb.edu
scalefundercert.net
chns120.courseresource.yale.edu
5735393697726464-fe2.pantheonsite.io
5738369707409408-fe3.pantheonsite.io
marc.ucsb.edu
5706646944743424-fe4.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
208.lsnc.net
5704093720903680-fe2.pantheonsite.io

Certificate

The complete raw certificate details for www.ece.ucsb.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5buvGNCEuhJzgnchDWno
hVqjLLVdoUYdOLNil8f7IhN3RWECfTYztW9bN07WBSUdOcYqr60TJ1Nc57Yai+MF
fbpuLBnYnzCCDCL6B5lCThI290kaO5n28C1wn9ktZgPpmwkThAKp5PDBajk+SC6Z
I+rA0rbwJCRSYoCqU7W8KCTmt912P32hIPImlEaflKTJM6ny20K95joFE4LHiS2C
VcYEHff4463b6wecHAjEiniPnQ3ZhdzxffflO3hRPapvgQAEw7A8AvxVYf2+PeJa
0oWAI3iy5poOr4eO8BmKmvf6SnEH0IIK7v5RVre3Id2YxE+AzLFMVBDUmOeBQQ4V
3UPOI34LyF9AeAi90FXoN0ZpCQ5WOpZbPtDJkCgcNuepoMsJrrN2nfVsxd7x2YLE
ZRJAjMBoa/rddeWdw9MCCkUFTVhejZDgXnqvdWeNZw8lyF/GLw9nIz7QQJl81i/g
z0a2JXmOSYNulsMFs/KKVG432SfpxjDswuzYPeATPqjmRcepM7Gf1HjiU2osFCpa
m9EqcYWAW9S3ZPKUTB4WmycZ6As6HbkuhIL4UADCPd9oVu1o/bw8y25L+/fRntGH
R15gpGXmdeGi+1H9vYFlw5Z5y+Mfwp4NAE+CMMVejuZxwmxwmKK8N3WxjQ3RGAsM
Rg1z4F3DDneBbq2o6w/8PKkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277252824795790663261553883375038018432155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 01:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 01:36:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ece.ucsb.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937229443938412638456404102374721577713489874635308602305981501123804613289592359244028897509533664343630626279832921894894076199182532382119040863442587298252596995345709428215910345715767885705036861615047500741601287948973577562012746084336020364731638605792023382587994905268785861504229569117610885783283664739438042345625673627381143344534368466667427654325196407624776636674450116570823038461359305297048724364438587272158524794370637730768233659932839354645695679336156570179660580775880912010909698011418275630189108058312775902776823793349062249888087394390135366818532487935677087718379622212321592860532089794545565433165168769232587084456957775115546642515712373016457384742893699684593371793805549166803099707573473389103857010690770440332124723358911969341248928213727555165541721997762133610115000471528366549306453031733618600395337214745637072375656815123155406664146328678360669932207900861112036993940240910028564115243011873095700154345832923891257610717978297323260598375956905060563754714760748058238363776391251113047425796663895091943221790249369891862137112677390024477216542127892507289304911524707956928123206473892602019945473135794211944954591413634589799796844744841428835029960335494305781841370299561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5c64b8efe0fca49b0c540ac382be753640a3152
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ece.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ece.ucsb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b88bdbe6a0000040300473045022100a232b94884da67c08e15848b88ea19b18c5def5838e1976a665f2e767b4d8db502205ad1366880995565f64583e318b0a295381fb558353923b11706aeb691ba64ff007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b88bdbe8c0000040300473045022047eaf4a35a25084eb834f7adf34a463719cf0a5dac65a053d6c9d2e85599899a022100a7fc606cf15d703e2b58f1dadca22206dfd0970f2429195833d015b50bc763eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0055dd7e09397db31425181fdb8ee951e6507ae49fca053b86ca5e7ec415cd5d831697831fccfdb550dd28c9d082d7968c5eb01ab496c9b387ba59476ad2d447832b2a7208b32ccc4f201adc97f96457900832952c4893e357dba06fe6f0819bb306ea21af2205649ae8c9b8a0f2e2ea1005b5081a9ed80d9b170c5b5cbb4b5aa6effd504eebeb944c6a16edf2afe8b9e6107e0b36d3085aebc6700309abf8b7b9454f0f09b28ecb568e7f9a5016d0d2feb2b137a17096fff1fac8ec69d23cab1d74a14d2e8ba9d2be173158cc229e75df7b882eb48d74fec664e7953aa87bf626cc77546c0c69762639b6eb0cfdc8813c0ea3e23e945251f28ea9f5fb40c0eebd