metabolomics-usi.ucsd.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c0:02:b5:7b:c0:86:c6:64:45:27:1a:d6:f2:39:09:c3:a8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=metabolomics-usi.ucsd.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:02:b5:7b:c0:86:c6:64:45:27:1a:d6:f2:39:09:c3:a8
Serial Number (int): 413786958947574035491044944599147535254440
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:8a:88:d8:ae:b0:83:dd:b3:d9:5d:d9:1b:1a:ce:7e:9a:e1:50:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:9c:7d:26:21:ce:c8:a5:da:67:d2:34:d3:c3:7f:fc:bb:49:c3:a5
Fingerprint (sha256): 00:d5:a0:e0:6b:6a:bd:90:5c:af:f2:06:74:73:b5:bc:50:fd:e1:81:bb:eb:2f:37:ed:c3:f8:30:61:04:24:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate metabolomics-usi.ucsd.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for metabolomics-usi.ucsd.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

metabolomics-usi.ucsd.edu

Other certificates including the domain name ucsd.edu

(limited to 100 certificates)
argo.ucsd.edu
cse125.ucsd.edu
physci.ucsd.edu
chiapet.givengine.org
hsrecharges.ucsd.edu
sdscnapr1.ucsd.edu
statuspage.io
sfunder11cert.net
core-vendor-shows.ucsd.edu
statuspage.io
number.ucsd.edu
us.prod.campusgroups.com
assets.ucsd.edu
mccammon.ucsd.edu
moodle.ucsd.edu
users.physics.ucsd.edu
statuspage.io
ushydro.ucsd.edu
csescheduler.ucsd.edu
unexwebdev.ucsd.edu
telerad.ucsd.edu
securessl-pst1.tessituranetworkhost.com
mesl-exp.ucsd.edu
cluster3.technolutions.net
tstbizapps.ucsd.edu
jazzcamp.ucsd.edu
aguado.eng.ucsd.edu
us.prod.campusgroups.com
reserve.ad.ucsd.edu
pelg.ucsd.edu
cass.ucsd.edu
autogrow.ucsd.edu
kam.ucsd.edu
clinicaltrials.ucsd.edu
bearhug.ucsd.edu
artpower.ucsd.edu
csh-mobile2.ucsd.edu
diego.ucsd.edu
myhealth.ucsd.edu
unexminer.ucsd.edu
grant.hivresearch.ucsd.edu
reinagel-nas.ucsd.edu
metabolomics-usi.ucsd.edu
autogrow.ucsd.edu
gph.ucsd.edu
velostrain.ucsd.edu
qbiohangout.ucsd.edu
shipsweb.ucsd.edu
studentevents.ucsd.edu
statuspage.io
hrweb5.ucsd.edu
abcdcontact.ucsd.edu
slscan.ucsd.edu
microcirculation.eng.ucsd.edu
statuspage.io
eu.status.grow.clio.com
iport-acv2.ucsd.edu
keck2.ucsd.edu
users.physics.ucsd.edu
statuspage.io
statuspage.io
jupyter.coleman.ucsd.edu
steinmetzlab.eng.ucsd.edu
igppdb.ucsd.edu
navigator.ucsd.edu
chrondev-ingest.ucsd.edu
statuspage.io
darkstar.ucsd.edu
ksdt.ucsd.edu
restprod2.ucsd.edu
expedition.ucsd.edu
hiseasnet.ucsd.edu
fraley.eng.ucsd.edu
password.ucsd.edu
sa-web.ucsd.edu
eu.status.grow.clio.com
epyqview.ucsd.edu
ucigcc.org
sio.ucsd.edu
statuspage.io
oec-vmweb03.ucsd.edu
eu.status.grow.clio.com
securedns.planmygift.org
middlewaretesting.ucsd.edu
shsfaxsrv-16314.ucsd.edu
d4sd2017.ucsd.edu
xcore-cub2.ad.ucsd.edu
cluster3.technolutions.net
wiki.barreiro.ucsd.edu
*.sysnet.ucsd.edu
zak.ucsd.edu
letusknow.ucsd.edu
tmarc.hivresearch.ucsd.edu
finance.ucsd.edu
statuspage.io
statuspage.io
to.ucsd.edu
statuspage.io
pulse.ucsd.edu
tdsm1udd6k.ucsd.edu

Certificate

The complete raw certificate details for metabolomics-usi.ucsd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413786958947574035491044944599147535254440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 17:23:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 17:23:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'metabolomics-usi.ucsd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622656761130932172765091132000228129831098561051733580232798240242580769989461487918584273801379998866290721355150642508351045324742669657519213655249284751274580361747037915951244099319925592006319840317228068365905898914521863788758083728399052501300727400714878948005084391452033034946467457327087485879387785403136544134115500021983215388106399308413105032080830950761162570406497572696979254013453697875319178690358839761069770247889428771988979764108235642915017172771650027540579158798563048746915860068628225392597820241586510677296271821060843438186427886344177110751881588683813933582845457933885281180895117063415242927487934512595947615010781092646534117778783314216573341754046477356950158674836278278890691908465826627017288193230671342814960856934206255190155087784082539957445501719205126944824156544638231625926341847791515564167959376661561696239241452236596213924138687367749173528410807532166068207916405361359928429001113613147633388577634830777030355676431355210054331912318558601053024336067472697378099687176296108489203736567512244805007914794379507251884111341718336876035500542254728848222854218844884360695618707084453481811896438283865191107256142630934744128022690060774131919186800031222777763492212257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d8a88d8aeb083ddb3d95dd91b1ace7e9ae1509d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabolomics-usi.ucsd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d8db69d9b000004030047304502202b392b1870e0dbff95f7ae8489b9a4d9a7c8bd25d80425c78e6657d96312da92022100878fb401a0aee91fcbb2e5199df7f33d72b8e47608ed13dee8e6917d82ac6e8f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d8db69d6b000004030047304502203b1faa3c8d14408fbcb8c6c2ec196b68800188b3d67fb06ac00ad61c53df90fa022100f53f6510603ef45d2836db59cf1523f7a5f1142ae3c80ba0853103c3fcd3a4d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064661f23469a747523a41c86d981ea978e41503c504f9fccaa707ed949921ec0645377ca71d04b094e61dbbbdb3497011d182e0950e76ec4e371cb2bde355a6107a7a5a944d6de27ae9a46e906f258507278a29a0f93107faac6b00d31d382499e1ad938ded87f7f9b96521de49f78b42ef7638dcf3bb48dd3d9008509ca27c958d836816e50ad86f9a5f33d2bec3464bfd9b650175e8ed2dddbc4adfaf8ee0ec185060f1be9a7e4e1349eb9870134061ae98787f92352f92fbbed35ef6374b6585365c3f23e0aaa32dc7246a2330e38997f50e79cf9ca0a1a062087cd345a5589bc24b71389fb892bbce64bf74b4260b0ac41e96beac3ea54c97a7d48793643