gitaid.upc.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:58:5a:ae:71:24:b9:42:9a:90:8c:e6:61:6c:b1:43:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitaid.upc.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:58:5a:ae:71:24:b9:42:9a:90:8c:e6:61:6c:b1:43:16
Serial Number (int): 321343997281815669066387855635419260601110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:cc:73:a5:f7:9b:16:ad:aa:56:bf:e2:50:13:76:97:9a:62:0a:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:8c:40:c9:94:60:ee:ff:68:1c:fc:73:60:4f:31:bd:18:f3:cf:6b
Fingerprint (sha256): 05:d1:c2:8a:80:a3:1c:6f:5c:9c:cc:1a:8d:3c:a9:c8:f2:49:52:ca:c1:6d:f2:66:64:95:30:3a:d4:5d:a5:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitaid.upc.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitaid.upc.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitaid.upc.es

Other certificates including the domain name upc.es

(limited to 100 certificates)
personals.ac.upc.edu
bonzo5.upc.edu
puppet.terrassa.upc.edu
vader.upc.es
kato.epsevg.upc.es
kati.epsevg.upc.es
bohr.upc.es
lamp.upc.edu
pell.euetii.upc.es
testletsencrypt-f5.upc.es
upcommons.upc.edu
ds3.upc.es
svn.fib.upc.edu
bonzo5.upc.edu
testletsencrypt-f5.upc.es
bonzo5.upc.edu
bonzo5.upc.edu
radi.upc.edu
svga.upc.es
mx2.upc.es
bonzo5.upc.edu
aess.upc.es
txt.upc.edu
bohr.upc.es
suhail.upc.es
gitaid.upc.es
bonzo3.upc.edu
iocsi.upc.edu
lacan-mac.upc.es
mozart.upc.es
storeserv2.upc.edu
www-fme.upc.edu
maul.upc.es
samarcanda.upc.es
putt.upc.es
australis.upc.es
zaguan.upc.es
bonzo5.upc.edu
bonzo5.upc.edu
aess.upc.es
aess.upc.es
samarcanda.upc.es
alrakis.upc.es
bonzo5.upc.edu
knowledgedefinednetworking.org
hallie.upc.edu
www.jacces.org
murzim2.upc.es
puff2.upc.es
bonzo3.upc.edu
openvpn-ct.upc.edu
storeserv2.upc.edu
lamp.upc.edu
bonzo3.upc.edu
e-convenis.upc.edu
tesla.fib.upc.edu
raco.fib.upc.edu
sylar3.upc.es
gestor.upc.edu
intranet.iri.upc.edu
storeserv2.upc.edu
liszt.upc.es
vgweb.epsevg.upc.es
bonzo3.upc.edu
testletsencrypt-f5.upc.es
gitaid.upc.es
bioestadistica.fib.upc.edu
gpaq.upc.es
xmail.cimne.upc.edu
testletsencrypt-f5.upc.es
web.cimne.upc.edu
memnock.upc.es
www.ceoupc.com
platon.upc.es
mitra2.upc.es
books.cimne.upc.edu
ater.epsevg.upc.es
fimfi.epsevg.upc.es
mitra.upc.es
raco.fib.upc.edu
inventari.fib.upc.edu
h2ogeo.upc.es
cba.upc.edu
testletsencrypt-f5.upc.es
bonzo5.upc.edu
peguera.upc.edu
web.cimne.upc.edu
pell.euetii.upc.es
mie.esab.upc.es
bonzo5.upc.edu
kursaal.upc.es
api.fib.upc.edu
sod.upc.edu
haydn.upc.es
samarcanda.upc.es
samarcanda.upc.es
arquimedes.upc.es
gage88.upc.es
escert.upc.edu
bonzo3.upc.edu

Certificate

The complete raw certificate details for gitaid.upc.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321343997281815669066387855635419260601110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 04:04:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 04:04:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitaid.upc.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766622227877315050911155642131833554422797617876069575755401662716077337565039920484812892184625856912272062780945953598763553830041754722091428145273183876195997116297139245376249042146490263820488075697121918618276801978792115217479513614797528816627061817912654371994761022495368827753590329360706589770767258357376431281706411064288871634319866537158755872630868541331635976263511752977133505722538714600519155417673350464918658126484753789922762887541498550342951579851368319835545517958088137955044454583856607131002200077875192836909860530194535737262078112872670489304717461739799837892098399649262128096584762038217609736481837847093288009337155860329252714482245744946252939730115402775125830120563593076144674797381270771358205506596072277138414263404897085473361036886260945894295893170275280118876009459408995730389137088240658502588304267923298560336903277961048603017409539837794763781031259568356260094483131865747075145389238982220260729321441411393716726881982843435416387368258130546681210525810976278828893245690458055785671226783650057329196015430252824753273729061426101641754362923596057562190372645898608233433230505487355616828567041994460639519300932808412873162184577036106955378881810600215734735702381713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ecc73a5f79b16adaa56bfe2501376979a620a0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitaid.upc.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001676827c2ad0000040300483046022100ffd321d65ff45c50c3dc37f1e008f7953e7c0947001ce38b48b05a249130499b022100df62898f65727e07f3db6968cd1fc0a217f1f87afacd65170839d343d53fbab7007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001676827c4a80000040300463044022065d84c5442f076b40ed1fcb8147c342271f3a8cf6d6edf4243bf54b94fdf310e02205c49942135df6f8738c46b2fffe3a888ec02526aa778a7838d32028a801ae4f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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