s2b.ugent.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:a3:79:9b:f5:a7:2d:78:dd:37:9a:6b:1e:dd:a1:07:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s2b.ugent.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:a3:79:9b:f5:a7:2d:78:dd:37:9a:6b:1e:dd:a1:07:e1
Serial Number (int): 266998671260484706707782505691665974495201
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:4a:c1:d3:0e:03:6f:85:fb:6a:61:25:1d:4a:21:aa:7c:0c:08:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:11:8b:d9:44:b3:4e:ae:33:78:63:9f:b8:ea:6a:32:8a:5e:82:11
Fingerprint (sha256): 03:86:f2:10:28:60:04:f3:4e:68:5c:2e:65:85:f6:45:d4:b2:73:c7:54:20:fc:bf:01:d5:cf:7b:8b:24:82:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate s2b.ugent.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s2b.ugent.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s2b.ugent.be

Other certificates including the domain name ugent.be

(limited to 100 certificates)
uchido.ugent.be
neruda0.ugent.be
we12s008.ugent.be
jira-student.atlantis.ugent.be
bioit2.irc.ugent.be
openuniv.ugent.be
www.quantum.ugent.be
www.miam.ugent.be
dresearch.ugent.be
diwdev02.ugent.be
idlab.ugent.be
otrsdev3.ugent.be
oauth.ugent.be
tropius2.ugent.be
lcp.elis.ugent.be
cp0581.irc.ugent.be
www.payment.ugent.be
qresearch.ugent.be
ssophp.ugent.be
schamper.be
laxness.ugent.be
vtctools.ugent.be
ingest.prd.opencast.ugent.be
qexr.ugent.be
accounting.ugent.be
login.ugent.be
www.gemane3.ugent.be
sharelatex.elis.ugent.be
www.insep.ugent.be
www.tussenblokenblad.ugent.be
bumps.ugent.be
plato.helpdesk.ugent.be
www.yaw.ugent.be
www.corpusvgt.ugent.be
plan.opencast.ugent.be
eyaml.qas.rad.ugent.be
paoweb.ugent.be
naos.ugent.be
ewp.ugent.be
www.omeka.ugent.be
gaspar.ugent.be
imanema.ugent.be
getrecruited.ugent.be
sapv11.aps.ugent.be
www.ictoprd.ugent.be
e10kdom2.aps.ugent.be
metals.ugent.be
fkserv.ugent.be
mssmall.ugent.be
*.psb.ugent.be
eqtis.ugent.be
sapv03.aps.ugent.be
www.waves.intec.ugent.be
authorship.ugent.be
adfspoc.ugent.be
www.dictwiki.ugent.be
adt1fs.ugent.be
wina.ugent.be
www.songstudies.ugent.be
alicere.ugent.be
straling01.ugent.be
jusprd.aps.ugent.be
prd.oasis.ugent.be
grinhog.ugent.be
nagila.ugent.be
qa.opencast.ugent.be
qas.oasis.ugent.be
kobobw26.ugent.be
www.evalisa.ugent.be
www.vrijstellingen.ugent.be
ai.ugent.be
ipilxd2.ugent.be
s2b.ugent.be
www.grieks.ugent.be
gift.ugent.be
geoviz-proto.ugent.be
disbiome.ugent.be
yaw.ugent.be
zephyr.UGent.be
www.sms2018.ugent.be
iomics.ugent.be
athenax.ugent.be
remosa.ugent.be
tokyoap2.ugent.be
cepec.ugent.be
www.linghentiandoctorials.ugent.be
we12s008.ugent.be
tgismo.ugent.be
epurse.ugent.be
ihodp-prd.ugent.be
www.livesintranslation.ugent.be
redcap1.ugent.be
www.lct.ugent.be
uforatest.ugent.be
www.welkom.ugent.be
dev.dbbe.ugent.be
wachtwoordservice-tst.ugent.be
qoasis.ugent.be
www.scripts.ugent.be
www.tic.ugent.be

Certificate

The complete raw certificate details for s2b.ugent.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266998671260484706707782505691665974495201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 03:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 03:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's2b.ugent.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687539657996345996650665776583686994022635890399739833526989659686403674321798352128574133582436404514729554325185138429399409725829506049791514097050936326381041268378503541101565285853768436164734290690630535516214463524236202603247648030047196100212162395551222173512489962181299958672086775484294697761048440432282606926830088943133396289851404695093004091124777896883175144327073532674836337965226344796923170445810999995645849942734281287930536904158487084318088434851715373239876336317300341690261854729464242041305435061372895392024802310048167352081768448380252755757172143275463167856125081170662930185826874866021928992785466357094262594915262550899329348240064469656700697301833874081046653862077644439243386247241276699632580679532668508987958187431923203672117745643274698969127281967415965045940439064579072002063004720302028024471309054194878992818836787308752747425058974207746193727413869736764675192502238084665655449048129907930147135297311216230028804376420370497716192003907909813556133371229113807593975285339281134097697369415311246353608911633642527184945474221942241298283824989163416161785385038235526954996385918727292455936820887088120610746621989591088271841467620791892333014014606887698567114025923911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f74ac1d30e036f85fb6a61251d4a21aa7c0c087c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2b.ugent.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b165867d50000040300473045022100f59e720da9934b871ce3200c6bdcd3f32dada89cc6c7d7f7dc9bfcbebeee526d02204bb66b5744d3d01142c3f89f4372ae9d9922d0c4ffc28753473954973dde40b1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b165867fa000004030048304602210082692934cbfbb011d46cc2b92020bb90d05a994f7d9a155149f203443e18816d022100fe8fa933ab05ab4c12783c23ff5e14e8c23161533ace1fca650158fa1e0cb156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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