spencer.ca.uky.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:87:27:19:58:68:cd:bc:b8:62:d1:1d:46:d6:25:2d:4b:c7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spencer.ca.uky.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:27:19:58:68:cd:bc:b8:62:d1:1d:46:d6:25:2d:4b:c7
Serial Number (int): 394439234753780200842421365502690697497543
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 79:5c:68:d3:25:c3:b1:47:93:5b:5a:1f:bd:51:8e:3e:37:aa:d9:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:be:86:30:c8:d2:fc:12:44:5d:9c:e1:dc:51:5e:44:1d:52:1e:6b
Fingerprint (sha256): 02:41:c3:57:c2:df:28:c0:39:3d:9f:df:3d:d7:73:6c:41:67:f1:cf:14:75:c2:b1:70:a0:59:62:f9:29:69:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spencer.ca.uky.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spencer.ca.uky.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

central56.spencer.prod-web.ca.uky.edu
spencer.ca.uky.edu

Other certificates including the domain name uky.edu

(limited to 100 certificates)
lsv.uky.edu
remote.ca.uky.edu
www.hosp.uky.edu
download.uky.edu
imaps.netlab.uky.edu
5636470266134528-fe2.pantheonsite.io
bbtools.ad.uky.edu
landing.socialworkonline.uky.edu
5700866052980736-fe2.pantheonsite.io
5636470266134528-fe2.pantheonsite.io
scdp.uky.edu
adfs.uky.edu
alumniweb.uky.edu
ukam.uky.edu
lyncpool.ad.uky.edu
cpr.as.uky.edu
kers.ca.uky.edu
uconnectlabs.com
plyits2016svr01.mc.uky.edu
rhelp.ad.uky.edu
5636470266134528-fe2.pantheonsite.io
www.bae.uky.edu
pks2-cas2.net.uky.edu
5649684605435904-fe1.pantheonsite.io
securedns.planmygift.org
timeoffcalendar.uky.edu
ukhcsftpt.mc.uky.edu
tableaupublic.uky.edu
ww-a12.as.uky.edu
uk-pa7080-edge1-pri-mgmt.net.uky.edu
www.etrax.uky.edu
drive.uky.edu
prdukheiixdsrp04.mc.uky.edu
ctrp-dev.uky.edu
spencer.ca.uky.edu
exploreuk.uky.edu
www.hcii.cs.cmu.edu
sfbextweb.uky.edu
ibi-test.uky.edu
ukam.uky.edu
grackle.ecc.engr.uky.edu
its.net.uky.edu
horm.as.uky.edu
*.coe.uky.edu
tstukheiixdsrp02.mc.uky.edu
icmac.rch.uky.edu
mfp.uky.edu
5636470266134528-fe2.pantheonsite.io
pa7080-primary-mgmt.net.uky.edu
5700866052980736-fe2.pantheonsite.io
boonecenter.uky.edu
ra.uky.edu
5700866052980736-fe2.pantheonsite.io
prdltchvc01.mc.uky.edu
www2.ca.uky.edu
plannedgiving.zaytuna.edu
support.ccs.uky.edu
clarity.mc.uky.edu
castle.uky.edu
warehouse.ca.uky.edu
labrea.ecc.engr.uky.edu
fayette.ca.uky.edu
securedns.planmygift.org
*.law.uky.edu
ibi.uky.edu
uconnectlabs.com
sims.uky.edu
ukhcvendorreg.mc.uky.edu
5636470266134528-fe2.pantheonsite.io
athena.uky.edu
ehrci.mc.uky.edu
uconnectlabs.com
prdsprspctu01.mc.uky.edu
plyits2016svr01.mc.uky.edu
boonecenter.uky.edu
comm.uky.edu
*.mc.uky.edu
beckdt.engr.uky.edu
remote.ca.uky.edu
5636470266134528-fe2.pantheonsite.io
libraries.uky.edu
landing.socialworkonline.uky.edu
myukmpx.uky.edu
5700866052980736-fe2.pantheonsite.io
devedwcognapp01.mc.uky.edu
sudepresearch.uky.edu
i2b2ccts.uky.edu
finearts.uky.edu
sweb.uky.edu
prdcteweb01.mc.uky.edu
www.lgcr.com
www.nai.arizona.edu
prdltchvcpsc01.mc.uky.edu
pimser.coe.uky.edu
5636470266134528-fe2.pantheonsite.io
ukitspks2cmx01.net.uky.edu
scriptprorefills.mc.uky.edu
ukhr.uky.edu
5722903798611968-fe3.pantheonsite.io
ehs.uky.edu

Certificate

The complete raw certificate details for spencer.ca.uky.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394439234753780200842421365502690697497543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 00:26:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:26:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spencer.ca.uky.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801854783844964576146423022055730864020341750799967238307816768827658011703029361615916281449477307480788892596037598533630341530222956811299751995402551137415099694156461839666395014583307416982156945918138319720150524895188070493295972228669077287978631986565052609101431462467595076014621156422511555306140054391609733122911317935430201705284842179513272858583406246421130528291971990308157973145040903219687485637577466557723092521225785014998855066850696639934123658869037478343082313391463865699689084078245457507289445793411005878330803835270604646919969643778872780455499701440729580694720140919177617121139939450976253865358922879070297028640072911976430677565161733129904532385976839944960661545316282787560155862370470351424809622678199014206677670243256142625147458929623642743523650223577772916114406379048111822319839946568024791768556322207756432010198446218117013021890578955544174890221666037832431347349532010811388216584210280571367444953228464783887823452603201003497471603347666653300247947899604514444643872967097198811452361591737750421448852861961691999897996540027098123263425150321469073010518512762821956997737230645594922113149508359765866575642534429965940535558445091398752486654411216377081435015684061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							795c68d325c3b147935b5a1fbd518e3e37aad9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central56.spencer.prod-web.ca.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencer.ca.uky.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a493309f40000040300473045022100bc9215c6bb4a389ff2c3db9e1c9312e74e89e1c6e7e0cf28435400690d5d792202202ea3d16a5e97a379afc789e3f48a6685a6cab17000a23c18a4db7a23e80440f6007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a49330a3200000403004730450220303765d842cd4fb90ee94e1f4e8c90fed1337d1fbd1904829c233085f4f694600221009c22c1f2f75a5f1af106557965063d0182999f983bd6f81419449d95e093d02f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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