sara.phys.uaf.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:08:81:38:60:a5:31:f8:07:30:a4:2e:d6:8f:9f:bc:59 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sara.phys.uaf.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:08:81:38:60:a5:31:f8:07:30:a4:2e:d6:8f:9f:bc:59
Serial Number (int): 287209622455005060323963602704213571779673
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:ff:87:b1:87:fa:45:ec:86:b3:ee:55:7a:cb:0b:e6:32:c5:13:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:91:a2:1e:2e:55:3c:a7:6e:b1:b5:fa:13:90:24:37:9b:99:33:13
Fingerprint (sha256): 08:5c:86:87:50:a5:1f:69:5f:55:e2:c3:d1:3f:64:30:fd:89:1a:54:82:86:54:d5:9e:b3:4a:b4:6c:cf:c6:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sara.phys.uaf.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sara.phys.uaf.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sara.phys.uaf.edu

Other certificates including the domain name uaf.edu

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
libguides.library.uaf.edu
citeak.multidevcom.uaf.edu
banking-business-review.com
athena.snap.uaf.edu
chns120.courseresource.yale.edu
208.lsnc.net
ineshare.uaf.edu
community.uaf.edu
www.ctc.uaf.edu
banking-business-review.com
tls.automattic.com
www.snap.uaf.edu
hub.meed.com
208.lsnc.net
yakamafish-star.net
j2.shared.global.fastly.net
dev.wellness.yale.edu
www.snap.uaf.edu
bejih.com
community.uaf.edu
reindeer.salrm.uaf.edu
www.csc.uaf.edu
live.ucdavis.edu
info-dev.calperformances.org
agd.nebrwesleyan.edu
streetfilms.org
chns168.courseresource.yale.edu
good.gsm.cornell.edu
admissions.hsem.uaf.edu
agd.nebrwesleyan.edu
j2.shared.global.fastly.net
*.email.uaf.edu
dev.embody.yale.edu
tiles.snap.uaf.edu
club.kjzz.org
a.ns.christiancentury.org
bejih.com
dev.wellness.yale.edu
www.ctc.uaf.edu
admissions.bam.uaf.edu
snow.ine.uaf.edu
host2.openminds.com
library.uaf.edu
local3599.com
sara.phys.uaf.edu
nrostatic.com
208.lsnc.net
stage.sfos.uaf.edu
qs.uaf.edu
redirect.web.alaska.edu
cnsm.uaf.edu
208.lsnc.net
www.uaf.edu
a.ns.christiancentury.org
web.cfos.uaf.edu
j2.shared.global.fastly.net
photos.uaf.edu
live.bme.cornell.edu
admissions.hsem.uaf.edu
classes-prep.uaf.edu
agd.nebrwesleyan.edu
cms-prod-edit.uaf.edu
ssl.smugmug.com
j2.shared.global.fastly.net
alaskasprucebeetle.open.uaf.edu
banking-business-review.com
j2.shared.global.fastly.net
inside.gc.cuny.edu
psy-pdcmini01.cla.uaf.edu
bejih.com
archivescatalog.library.uaf.edu
connect.iadb.org
abong.ufcespanol.com
aasdsloth.gsm.cornell.edu
library.uaf.edu
archives.library.uaf.edu
virtuallabs.uaf.edu
akdec.alaska.edu
voicesuncaged.com
community.uaf.edu
www.sfos.uaf.edu
et.uaf.edu
acadmintest.cuofco.org
tls.automattic.com
208.lsnc.net
kenphilipcollection.alaska.edu
banking-business-review.com
bejih.com
us.prod.campusgroups.com
160.167.tmcapital.com
grotto.geobotany.uaf.edu
www.iarc.uaf.edu
161511-web1.vilcek.org
ltdev.uaf.edu
vc.csc.uaf.edu

Certificate

The complete raw certificate details for sara.phys.uaf.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5LOkCOEIvx3nzDh43UvL
BkGXRr1YAloTkxbvzVAvfJ5uQ9aULaA3Nn3+c3KNxPuYi9OZH4gqEgkguVtp4TXS
JN8ygYThGmo3PJCj5b7Eh/hvAMA9MQB5PNt5NXMa70nPWq16SW37/vPn2XwQQuOc
lx3l2eXyE5WuZOrtXYa16kb+h878FnACL4NRJzomXwPvNuTWmG15VWNsU4zSXEvp
lTghhtP2jeTKNHS1mbYed3isjw4ukEPkcLtQgkcXACvT1fzViWzFsYPM1lTQwK9V
YX1EaS62VrlvAnKeW186Nb0tELrko9hBrMmI2nD6WUlIPoPf16RzhS1rxE0kCkFl
8xnB6k0tslHXNsXfYhKKm+CioICp2UbdRbcPMJt3oVw4U8mAYJ0MeAM+DDehfYRh
Y3evMnNy8XSvbUVzOSTLhYN6sFT4yA9Fes6aRSSck2pUBQVhGlnC6tXD1daLj71P
cjYaS//xSwO+jHZHnXjcj7xg7YS+9IzGh/OlxRkKUjzLKYitc63JRXNcb4RSVvDd
sPi2fMTSl8QWTZ19orqM5IxOJ6bxsswrUP+mBAPtWU8+lGupiAe8fMexST4Vgeqj
GKFsXHqlOoP4X/amp8lNyVyLzCrmx9SV47QyYwAQVTLYKng/2oJL66vAJuMvOPFS
IjXy1wy+lTBy0vr18fbXqkUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287209622455005060323963602704213571779673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 00:36:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-23 00:36:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sara.phys.uaf.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933021622363591697096500722813746032758976715971710661670865905233348205425981087625345762814835505853409820598321580009304699883608288676140174736004950138184584249143977076142623523461181742734729121176915123152362558883393894791750067177127789707301925272955011063389771477618796967596041617187532179258700812199714139216822527037356541261394010932483748201557974933283436498197469841669374491253827378844748770569254938254575214890590595014138496978947711473612310180291372745857965468185877545133005654360989754449764343768877318528890789730574757731021205446851800267695164802038377673255236729111450632118810122856239130389325295508804761530311385905845834223868701097369883528768315593649221345754548325665260768248561940742849919730327551014114847584940400637161622434649403957569247465366787188092320551401136994842767883302947459465846887998755848304423619214617360689409695923260552284061862548208421599602328105419552354576200218406113084571410339850193497333713567382105727372228738769517954032136542186469276270162421024745827923370508894393044333231197462856119645661902986800412780241253757219375980123945476836487561629527710450469054174480365989544096921262947968880023743909643806717976366284053156982821639137861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bff87b187fa45ec86b3ee557acb0be632c513ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sara.phys.uaf.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001674882a0100000040300483046022100b406dd61b036f03f66f015ea3e0653c5342195b3363c2c0e4b2afcedb64b9f940221008a26684fc02610dedc357f682e868a40a5047e4cbbbdd2b0a1c38af79ca6e65d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001674882a1a2000004030047304502207dc7664ccb123d70d854be16eb1c9a8fd0526e6522f8f11a228ee1aff33e2773022100a669034824d0956ff0f802a63c8590dcc8cc4cb553111ccccbcdf98851300f1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003aaa7d5a65edb6923422ef9a873b84008c80a137519c916c1e599d5c4f7abcf440f33b2bb60d1f1ec9955f4128066c63ad72d308f0d96dedb5b62e0aa699cc28b00a6c9490ded9dc9773e7b82d2e9f95c6fc98550fcb1485ebf4e2543026f405075d5716eda6f134572959c390f78d579df893fbe83e16439a271b73a865db3ffe2c9936a12e44232e039273600bbf845a5f672b1b0337d75e0b8d97bbbc4deb4dd455c51ec05b92af4f1d3e642baf12e03b3aae2e58110276b4f5cec1e8ea968c69396397683d95d1313e93afb3e59ad31f3e3dcac7320a3880e89aefdb0eb1c1ecd74efd71c90afcd43459f3729142ece1e33f1ce5febff182a637d5593e58