cpe.eng.ufl.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:53:66:cd:fa:d5:e5:cd:36:4c:fa:ed:10:ba:27:e7:3c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpe.eng.ufl.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:53:66:cd:fa:d5:e5:cd:36:4c:fa:ed:10:ba:27:e7:3c
Serial Number (int): 326441649592876912528595334355791194351420
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:1c:a2:d3:e0:7d:ef:4b:58:c6:92:6b:a6:12:ad:c6:b8:33:3a:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:41:1b:f4:63:14:bb:4e:b9:31:7e:c6:c8:f2:0b:8e:01:50:0a:1c
Fingerprint (sha256): 01:ac:5b:30:00:d8:25:8a:f3:b3:ee:f4:5f:81:c9:db:c2:eb:4b:d1:03:1b:4f:b7:78:51:b8:36:c3:b0:97:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cpe.eng.ufl.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpe.eng.ufl.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpe.eng.ufl.edu
www.cpe.eng.ufl.edu

Other certificates including the domain name ufl.edu

(limited to 100 certificates)
Intranet.uff.ufl.edu
connect.ufalumni.ufl.edu
*.forensics.med.ufl.edu
baciak.mse.ufl.edu
visage.jax.ufl.edu
copnt29.copdom.cop.ufl.edu
operations.onecampus.com
test.sbvdr.admin.ufl.edu
billing.healthnet.ufl.edu
ipi.education.ufl.edu
icw.cise.ufl.edu
ac.cop.ufl.edu
www.eng.ufl.edu
my.ufscc.ufl.edu
amploadvance.com
ase.ufl.edu
incapsula.com
jainlab.cise.ufl.edu
files.software.ufl.edu
smtp02.uff.ufl.edu
software.ufl.edu
hrfix.erp.ufl.edu
dev.apps.ufl.edu
*.erp.ufl.edu
web-dsoapps-lin-01.linux.dhnet.ufl.edu
*.ehs.ufl.edu
container.education.ufl.edu
dev-els3.courses.ufl.edu
tonks.mse.ufl.edu
apps.uflib.ufl.edu
webservices.it.ufl.edu
cpe.eng.ufl.edu
research.dwi.ufl.edu
cpass.mse.ufl.edu
www.eng.ufl.edu
lti.erp.ufl.edu
bats.businessaffairs.ufl.edu
qat.riskmanagement.it.ufl.edu
securedns.planmygift.org
charges.at.ufl.edu
cpe.eng.ufl.edu
trust.jou.ufl.edu
portal.helpdesk.ufl.edu
canaveral.coip.aa.ufl.edu
www.engaged.library.ufl.edu
test-ycrs-utd-app-rh7-01.linux.dhnet.ufl.edu
dc.phys.ufl.edu
help.em.ufl.edu
facultyblogs.law.ufl.edu
www.ortho.ufl.edu
scanning.at.ufl.edu
xplan-xfer1.geoplan.ufl.edu
ccoi.education.ufl.edu
*.aging.ufl.edu
dev.talx-proxy.infr.ufl.edu
my.shcc.ufl.edu
forge.ctrip.ufl.edu
test.migrate.mail.ufl.edu
www.ufedge.ufl.edu
pdf.erp.ufl.edu
login.ufl.edu
flbog.sip.ufl.edu
ecology.group.ufl.edu
advweb.uff.ufl.edu
eye.ufl.edu
interactive.floridamuseum.ufl.edu
hswdmz.shands.ufl.edu
cce-coa-data.coastal.ufl.edu
faculty.eng.ufl.edu
myicbr.biotech.ufl.edu
clintox.cop.ufl.edu
onbasetest.shands.ufl.edu
sumerlin.chem.ufl.edu
sbvdr.admin.ufl.edu
www.law.ufl.edu
pharmacy.ufl.edu
www.bme.ufl.edu
floridablue.center.ufl.edu
innovate.research.ufl.edu
www.ece.ufl.edu
helpme.xray.ufl.edu
cloud.it.ufl.edu
essentialsofbusiness.ufexec.ufl.edu
*.ctsi.ufl.edu
*.education.med.ufl.edu
vetforensics.med.ufl.edu
plannedgiving.zaytuna.edu
datapower-sb.ad.ufl.edu
test.campusmap.ufl.edu
service.gatorlink.ufl.edu
*.bugs.ufl.edu
onbase.pharmacy.ufl.edu
vmconsole.hosting.it.ufl.edu
at-vcs02.video.ufl.edu
sp.uff.ufl.edu
internationalcenter.ufl.edu
dev.student.ufl.edu
test.epi.ufl.edu
securedns.planmygift.org
psigw-tst.erp.ufl.edu

Certificate

The complete raw certificate details for cpe.eng.ufl.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZbZyxIDnA5FT0AD/T+x
9HeF5lvonp0nYXk8vP9t2rXeRxW2yBU/OdVuTsAcsyBWSxRfKWr+BAWcLf5E1N3v
QNTN1XeieqOiDaHNf5tpD+adpXjP5jjzBmD1TDohvrdkWSy8I9Wn6ov0YiUrWq7i
178vzqCe3zAweMr8Wg5d2yFFi8K7vHQ6BRVF5Gafl11kcg80lK2Peq73lX7RH9vF
tak3spHcIQIWLBKwyzuf5VEU2ge99agNiy6ytEJuRoDh5aTHyKiqafnkUidPWKEi
4VncxDFirqsll9VuqRVad7LhP41uqd5i4426Vtzayqj0IPTfFj6WceEmYnd1U7Xq
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326441649592876912528595334355791194351420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-03 22:37:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-02 22:37:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpe.eng.ufl.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26963146237442799819221918397475576682740785330402134687907109176979017019047256497281257923850333094903088072931419296537866117194204876620980590248996766267932297710483488690668446064056298147431708999343344099407955892719097929345281024556394476192744028723297436423301692176074142743921387712462471871643431128005053113142486290216291155404388533060462684859080302151008392574803833559393981951578219089046567213797797817585327482281361343597366388833677510626051081801225934980741064502565096292325302620186832205667735816482697265156231511609262230636267504763790196180595979564091530921655453218287470387784397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							571ca2d3e07def4b58c6926ba612adc6b8333a13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpe.eng.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpe.eng.ufl.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165a1cc74c700000403004830460221008b0660762ce599916f2a33384d3bdc7ee773a19dab02a9d947a883cf212de117022100d982d1051cf8686fcacb436f51ecc5549a411687e34937bf5a4fbbe55bb6b210007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165a1cc74ba000004030048304602210085f51eddd639dcb21691633450bb24d67d4f30306e66aa2c7fcb963a7c621d0c022100fcaa66061216a1a5b4b5421f33edf535a5b59efc84b2089f27d5c2cb6bcf92e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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