genome.uoregon.edu

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:00:ff:90:d3:41:5a:96:59:41:ea:9d:1b:11:66:8b:0e:f3 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=genome.uoregon.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:ff:90:d3:41:5a:96:59:41:ea:9d:1b:11:66:8b:0e:f3
Serial Number (int): 87451991046199321554585944379914684403443
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: f2:2a:bc:2b:94:16:8c:b2:27:bd:12:1b:5a:3e:2c:63:a4:4e:6b:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:de:c7:2b:c2:a3:c9:27:16:40:08:29:b5:49:3a:ac:df:38:3d:e2
Fingerprint (sha256): 02:78:cb:3b:9e:c3:2d:a2:59:f2:25:79:c6:22:ef:37:1b:66:e3:70:30:82:19:44:e4:d9:ba:3e:72:44:c0:d4

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate genome.uoregon.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for genome.uoregon.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

creskolab.uoregon.edu
genome.uoregon.edu
syntenydb.uoregon.edu
teleost.cs.uoregon.edu

Other certificates including the domain name uoregon.edu

(limited to 100 certificates)
scholarsbank.uoregon.edu
africa.uoregon.edu
is-ssoman-prod1.uoregon.edu
fs-aim-dev-iq.uoregon.edu
is-ssoman-base1.uoregon.edu
demystifying.uoregon.edu
oregoncis.uoregon.edu
atomoptics-nas.uoregon.edu
duckid.uoregon.edu
cas-vm-ig-tile1.uoregon.edu
nsrc.org
sfunder8cert.net
exchange.uoregon.edu
ctl-owncloud-dev.uoregon.edu
rsch-s16-drupal.ad.uoregon.edu
banking-business-review.com
cas.uoregon.edu
illiad.uoregon.edu
nsdb.uoregon.edu
coe.uoregon.edu
researchguides.uoregon.edu
sonar.zebrafish.org
is-ssoman-prod2.uoregon.edu
ecweb.uoregon.edu
ctl-nodejs-dev.uoregon.edu
blogs.uoregon.edu
casdocs.uoregon.edu
scalefundercert.net
onesearch.uoregon.edu
aqacs.uoregon.edu
confluence-test.uoregon.edu
genome.uoregon.edu
thepasture.uoregon.edu
blogs.uoregon.edu
cas-vm-ig-ags1.uoregon.edu
sa435gl.wpc.edgecastcdn.net
*.uoregon.edu
nagios-server.uoregon.edu
power.sjsu.edu
librarysearch.uoregon.edu
cftclinic.uoregon.edu
casmail.uoregon.edu
whitewater.uoregon.edu
secure-uswe2-1.tessituranetwork.com
coe-ytp-pre-ets.uoregon.edu
secure-uswe2-1.tessituranetwork.com
blogs.uoregon.edu
gradweb.uoregon.edu
genome.uoregon.edu
commencementmap.uoregon.edu
darts.uoregon.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
lib-ohms.uoregon.edu
aeidrive.uoregon.edu
web.offcampuspartners.com
nsrc.org
sojc-hosted.uoregon.edu
scalefundercert.net
voiceweb.uoregon.edu
talapas-login.uoregon.edu
lawinfo.uoregon.edu
is-ise-pan1.uoregon.edu
blogs.uoregon.edu
webmail.uoregon.edu
fass-service.uoregon.edu
hgem.uoregon.edu
aaa-jss.uoregon.edu
researchadmin.uoregon.edu
iscas-test.uoregon.edu
n002.offcampuspartners.com
security.uoregon.edu
vascularlab.uoregon.edu
jwj-foia.uoregon.edu
www.cs.uoregon.edu
lib-scholardev.uoregon.edu
exchange.uoregon.edu
aha-mail.uoregon.edu
sa435gl.wpc.edgecastcdn.net
ia-wp.uoregon.edu
uselect.uoregon.edu
scalefunder.net
cs.uoregon.edu
scalefunder.net
is-wac1.uoregon.edu
education.uoregon.edu
ctl.uoregon.edu
tk20.uoregon.edu
sa-aoyama.uoregon.edu
blogs.uoregon.edu
talapas-login.uoregon.edu
casls.uoregon.edu
secure-uswe2-1.tessituranetwork.com
calendar.uoregon.edu
tau.nic.uoregon.edu
*.libproxy.uoregon.edu
orsa.uoregon.edu
casitchat.uoregon.edu
singlecaseinstitute.uoregon.edu
uoregon.edu

Certificate

The complete raw certificate details for genome.uoregon.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEYBVYOgY1kCOhRBCwIu
3YQyqPpYrqZo29k7+9jdjQZZbZzfaslCWJpxSpxOs1jyL5OmMZLpO8e07nv4BsHH
D2oDtCsYtJQDmW046sAjdZgqf3qiAHW5+WKGGwjr+W/nz8ZFYdF0rpB4DbH0gBx7
auFxYXp/6Kt7R7b7mUmjGurtQF+p0NinjjUiI54SHXih/IuFVotbIyp985J16GlE
7XjOg8T6oMnjtLGmla//ceTk67oSpl5OJi7OLs1e7ioxn1raV5W7oji0Bf9n70dX
MmagLbcEM4I+ueluBH/FIjZIZegJDuo743LIIb++l+foFObokXaqQaCZbHLvLkYN
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87451991046199321554585944379914684403443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-10 02:21:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-08 02:21:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genome.uoregon.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22757415750090254081269482690723497689998875524050067114296074901821071270866299111723007831701465554268562748047092744027339347098043520633800194611543548535236883865390038183642941485254006815626928146562484699958899015555278558840327239801746207596776577531607983475365447449158941456465110677297326783749495930123426328947974501794806712348529364313687564911103619345213069625760034592891518022984262207955451434203590937002102445051486109621930524705868212330150773118442889275264875685158186203057572914101823347109180082040396623100937640484017315501874730014192478702361926699810169943021406766526054869110153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f22abc2b94168cb227bd121b5a3e2c63a44e6bb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creskolab.uoregon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genome.uoregon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syntenydb.uoregon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleost.cs.uoregon.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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