anubis.cs.ucsb.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0a:79:49:d8:06:11:15:e4:76:fd:91:ba:8b:b1:9a:16:fa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=anubis.cs.ucsb.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0a:79:49:d8:06:11:15:e4:76:fd:91:ba:8b:b1:9a:16:fa
Serial Number (int): 352013187402892150159517705321772014507770
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:d4:de:4b:a9:33:fd:cb:61:c2:de:6b:9e:08:a5:ac:f6:4f:03:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:f9:ca:0d:7b:03:03:96:2c:20:34:f7:e2:80:48:dc:93:a9:29:44
Fingerprint (sha256): 02:03:2e:16:46:c1:ad:ef:9c:d2:24:78:06:31:a4:28:78:89:9d:e0:ea:0c:1c:63:da:a2:6e:3f:d7:12:10:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate anubis.cs.ucsb.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anubis.cs.ucsb.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anubis.cs.ucsb.edu

Other certificates including the domain name ucsb.edu

(limited to 100 certificates)
flour.ece.ucsb.edu
physics.ucsb.edu
wepawet.cs.ucsb.edu
5665833682468864-fe1.pantheonsite.io
hrsweb-kx.housing.ucsb.edu
bic03.bic.ucsb.edu
carpepm.almonds.com
idm.my.ucsb.edu
ictf.cs.ucsb.edu
us.prod.campusgroups.com
github.nceas.ucsb.edu
5715605172781056-fe1.pantheonsite.io
leadership.sa.ucsb.edu
learning.nceas.ucsb.edu
5719721496281088-fe4.pantheonsite.io
studentvisa.test.sa.ucsb.edu
5729821648748544-fe1.pantheonsite.io
securessl-pst1.tessituranetworkhost.com
www.csmd.ucsb.edu
ucdc.edu
5680534013345792-fe1.pantheonsite.io
us.prod.campusgroups.com
rotabullstatus.com
www.ece.ucsb.edu
nartc.fcm.arizona.edu
5704093720903680-fe2.pantheonsite.io
api-status.360cities.net
5762637883244544-fe3.pantheonsite.io
ucen.ucsb.edu
5661530653720576-fe2.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
api-status.360cities.net
math.ucsb.edu
5703789046661120-fe2.pantheonsite.io
aurora.nceas.ucsb.edu
www.ascidiancenter.ucsb.edu
microscopy.nri.ucsb.edu
5665370564198400-fe2.pantheonsite.io
donelan.faculty.writing.ucsb.edu
history.ucsb.edu
checkrstatus.com
eci.ucsb.edu
support.nceas.ucsb.edu
5755164371714048-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
housing.ucsb.edu
info.resnet.ucsb.edu
secure.identity.ucsb.edu
www.mcdb.ucsb.edu
aurora.nceas.ucsb.edu
banknorthstatus.mambu.com
gibber.cc
webmail.sa.ucsb.edu
banking-business-review.com
barc.isc.ucsb.edu
paymentsolutions-status.shijicloud.com
cdn-test.battlefields.org
test.eis.uw.edu
dev.nceas.ucsb.edu
admissions.ext-prod.sa.ucsb.edu
5665833682468864-fe1.pantheonsite.io
ucen.ucsb.edu
5636953047302144-fe4.pantheonsite.io
citeak.multidevcom.uaf.edu
5720605454237696-fe1.pantheonsite.io
cowbird.lifesci.ucsb.edu
pathodstest.systems.isc.ucsb.edu
www.cnsi.ucsb.edu
5701569219657728-fe1.pantheonsite.io
web.physics.ucsb.edu
5715605172781056-fe1.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
admin7status.brinkpos.net
graylog.library.ucsb.edu
5762637883244544-fe3.pantheonsite.io
webextracts.test.sa.ucsb.edu
helios.geog.ucsb.edu
studentvisa.test.sa.ucsb.edu
www.arch.cs.ucsb.edu
scl.ece.ucsb.edu
5696605713858560-fe4.pantheonsite.io
philosophy.ucsb.edu
ucen.ucsb.edu
banking-business-review.com
apptcha.seclab.cs.ucsb.edu
anubis.cs.ucsb.edu
5666823336886272-fe4.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
paymentsolutions-status.shijicloud.com
santacruz.nrs.ucsb.edu
scalefundercert.net
chns120.courseresource.yale.edu
5735393697726464-fe2.pantheonsite.io
5738369707409408-fe3.pantheonsite.io
marc.ucsb.edu
5706646944743424-fe4.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
208.lsnc.net
5704093720903680-fe2.pantheonsite.io

Certificate

The complete raw certificate details for anubis.cs.ucsb.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352013187402892150159517705321772014507770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 08:51:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 08:51:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anubis.cs.ucsb.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635171105173217642693746394177815390847613434237847428417534620468599548356860168665606137878712814653219435591885069768045481366936442998279299763354157731562264178306123368236551002469491165770016508078761185747793361130413971126424783414384035238659655967382440591458702734835285921890182453005616765119725887063245355595034979580117687240081930828970222483942801458082434745946436608439267249543057080693560089765905482892789582307094734876211707331266657650421948745483112519741556146205199952805395805129547112979841397770406176883876467376717560305864725115666042314926485965243038516517349505591058473643474198264914699958561626648254834342242688823581792885857488802490337398904079858841683818814265849982349204692402071610605946146705290796342345397873689008218351644882827128135250289164798811999214733674499326117665300639497676072159235300540617216592940373442137209424297646369180777452731318207268538386824923107544295858714228637059232966858699013260918464094995216386620988971852391438994865772439792786142398529594072520892358428524708908356847657921682312258305388409395785740919058204682684659984150113390972838362312300319718415863136133992386133026531065830143255662574762855006979262509997072549070292629702401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9d4de4ba933fdcb61c2de6b9e08a5acf64f03ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anubis.cs.ucsb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a4f5290300000403004730450220577982a0f158ffe866443ecf1d1a432870e1f8345da4c8568a6e31b93ae97762022100c6fe24844d88a8b456d80e6e05ef2c8dca4275dbbb12a9af9ec9e70631ddb57500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a4f5293600000403004830460221009f2002914d28e14af21ec3562acadae47d6616f715e99efa73b49719a12db303022100e10d9d058f61b99657c607c032113d8b38c67e2f4738e5084bf6b54b5855e1f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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