keck2.ucsd.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:04:19:71:cc:5e:fd:05:68:9b:e7:3b:86:2c:92:40:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=keck2.ucsd.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:04:19:71:cc:5e:fd:05:68:9b:e7:3b:86:2c:92:40:94
Serial Number (int): 298092802450250924868344264124898974253204
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:01:07:06:d3:7a:a2:48:1d:e6:ad:e8:dd:56:26:8f:c2:e2:27:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:b8:4c:fc:2b:a1:16:d0:f6:98:ac:09:ae:aa:19:c1:5e:46:69:1d
Fingerprint (sha256): 01:24:6a:9d:5b:d7:c5:7b:9a:7d:1e:6f:5e:2d:f6:7a:98:94:87:da:72:cb:98:f2:58:8e:41:a5:06:2c:52:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate keck2.ucsd.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keck2.ucsd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keck2.ucsd.edu

Other certificates including the domain name ucsd.edu

(limited to 100 certificates)
argo.ucsd.edu
cse125.ucsd.edu
physci.ucsd.edu
chiapet.givengine.org
hsrecharges.ucsd.edu
sdscnapr1.ucsd.edu
statuspage.io
sfunder11cert.net
core-vendor-shows.ucsd.edu
statuspage.io
number.ucsd.edu
us.prod.campusgroups.com
assets.ucsd.edu
mccammon.ucsd.edu
moodle.ucsd.edu
users.physics.ucsd.edu
statuspage.io
ushydro.ucsd.edu
csescheduler.ucsd.edu
unexwebdev.ucsd.edu
telerad.ucsd.edu
securessl-pst1.tessituranetworkhost.com
mesl-exp.ucsd.edu
cluster3.technolutions.net
tstbizapps.ucsd.edu
jazzcamp.ucsd.edu
aguado.eng.ucsd.edu
us.prod.campusgroups.com
reserve.ad.ucsd.edu
pelg.ucsd.edu
cass.ucsd.edu
autogrow.ucsd.edu
kam.ucsd.edu
clinicaltrials.ucsd.edu
bearhug.ucsd.edu
artpower.ucsd.edu
csh-mobile2.ucsd.edu
diego.ucsd.edu
myhealth.ucsd.edu
unexminer.ucsd.edu
grant.hivresearch.ucsd.edu
reinagel-nas.ucsd.edu
metabolomics-usi.ucsd.edu
autogrow.ucsd.edu
gph.ucsd.edu
velostrain.ucsd.edu
qbiohangout.ucsd.edu
shipsweb.ucsd.edu
studentevents.ucsd.edu
statuspage.io
hrweb5.ucsd.edu
abcdcontact.ucsd.edu
slscan.ucsd.edu
microcirculation.eng.ucsd.edu
statuspage.io
eu.status.grow.clio.com
iport-acv2.ucsd.edu
keck2.ucsd.edu
users.physics.ucsd.edu
statuspage.io
statuspage.io
jupyter.coleman.ucsd.edu
steinmetzlab.eng.ucsd.edu
igppdb.ucsd.edu
navigator.ucsd.edu
chrondev-ingest.ucsd.edu
statuspage.io
darkstar.ucsd.edu
ksdt.ucsd.edu
restprod2.ucsd.edu
expedition.ucsd.edu
hiseasnet.ucsd.edu
fraley.eng.ucsd.edu
password.ucsd.edu
sa-web.ucsd.edu
eu.status.grow.clio.com
epyqview.ucsd.edu
ucigcc.org
sio.ucsd.edu
statuspage.io
oec-vmweb03.ucsd.edu
eu.status.grow.clio.com
securedns.planmygift.org
middlewaretesting.ucsd.edu
shsfaxsrv-16314.ucsd.edu
d4sd2017.ucsd.edu
xcore-cub2.ad.ucsd.edu
cluster3.technolutions.net
wiki.barreiro.ucsd.edu
*.sysnet.ucsd.edu
zak.ucsd.edu
letusknow.ucsd.edu
tmarc.hivresearch.ucsd.edu
finance.ucsd.edu
statuspage.io
statuspage.io
to.ucsd.edu
statuspage.io
pulse.ucsd.edu
tdsm1udd6k.ucsd.edu

Certificate

The complete raw certificate details for keck2.ucsd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f1IkLvx1IPr9ezt5PEA
YOzCPK+jMnLlxlWCgXO2lEm4p7NiAZ+EaWKLUeDeD6tqfWwH6rf9Ng0Xl7IVXKQZ
I1UqW/7fBTzrOPv118Dk5w3daMbsWHBfGnPagWx19ftGipMqE5m+61YfWTh79Q9e
6eGD7668pPw2tZEuVkHj1T9pcLmmpWvNP78laA4SRysQlSlxX9HXu1rjkigoNKI8
vH6DOa66WoGBoEmLKC/bHpHgv/cBBhCFdAZanN6f01XBQNHJMP9Wj6pbXSbtrzmX
T1160cqNXoLMYjeSd/kFk74rkW96t1JkMSM8FvUQAnUGcMnJyuNforY0Q4os6QtL
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298092802450250924868344264124898974253204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-24 15:26:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-22 15:26:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keck2.ucsd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30043377005365820454072913427116362365405131621995154123185421483290409638581055018056428844490788622933007301443771663238454760976827753392824092356127999180886289100262440741784847704817623724802523417754197750793823901925820306400251200546245919342716269992949382681562959127586713217339546624741431605370714006473989924309290541344113527324604691554620883907002814017983691704467750444208944550706349778496260945552350234842444754200860187099395377463156627925777061106145104037803842869933885974397656714007264717696691624946174285051648905092595556656069506410029382135675219171674535170919955506020509882731399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9010706d37aa2481de6ade8dd56268fc2e227cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keck2.ucsd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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