releases.ubuntu.com

Issued by R3

About this certificate

This digital certificate with serial number 04:63:cf:8a:4c:e3:ee:1d:bb:a6:6f:2f:b7:7f:64:db:68:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=releases.ubuntu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:cf:8a:4c:e3:ee:1d:bb:a6:6f:2f:b7:7f:64:db:68:4e
Serial Number (int): 382412966343829466006877418857054640760910
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:5f:12:61:57:06:6a:dc:bd:9b:08:f5:b9:88:c2:d2:29:4e:8e:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:34:de:fe:f9:9d:a8:6e:ea:29:b1:25:54:97:a3:42:c5:67:1f:a5
Fingerprint (sha256): 08:a9:a9:55:be:93:35:e9:a8:23:8b:a3:87:db:2f:e3:27:ba:4e:73:22:90:cd:89:4b:4d:71:4b:12:d1:71:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate releases.ubuntu.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for releases.ubuntu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

releases.ubuntu.com
www.releases.ubuntu.com

Other certificates including the domain name ubuntu.com

(limited to 100 certificates)
changelogs.ubuntu.com
old-releases.ubuntu.com
usshop.ubuntu.com
lists.ubuntu.com
facebook-apps.ubuntu.com
people.ubuntu.com
buy.ubuntu.com
connectivity-check.ubuntu.com
search.apps.staging.ubuntu.com
maas.ubuntu.com
tour.ubuntu.com
myapps.developer.ubuntu.com
api.staging.snapcraft.io
manager.assets.staging.ubuntu.com
auth.esm.staging.ubuntu.com
design.ubuntu.com
jp.ubuntu.com
start.ubuntu.com
jp.staging.ubuntu.com
staging.ubuntu.com
docs.ubuntu.com
fridge.ubuntu.com
hr.archive.ubuntu.com
upload.apps.staging.ubuntu.com
assets.ubuntu.com
daisy.staging.ubuntu.com
webstats.ubuntu.com
juju.ubuntu.com
old-releases.ubuntu.com
certification.staging.ubuntu.com
assets.ubuntu.com
daisy.ubuntu.com
*.ubuntu.com
phone.docs.ubuntu.com
cn.ubuntu.com
assertions.ubuntu.com
docs.ubuntu.com
redirect.ubuntuforums.org
code-review.phablet.ubuntu.com
ask.ubuntu.com
discourse.ubuntu.com
upload.apps.staging.ubuntu.com
design.staging.ubuntu.com
keyserver.ubuntu.com
insights.ubuntu.com
ubuntu.grad.hr
developer.ubuntu.com
cloud-images.ubuntu.com
phone.docs.ubuntu.com
lists.ubuntu.com
jp.ubuntu.com
help.ubuntu.com
buy.ubuntu.com
merges.ubuntu.com
support.one.ubuntu.com
people.ubuntu.com
assets.ubuntu.com
*.staging.ubuntu.com
brainstorm.ubuntu.com
font.ubuntu.com
assets.ubuntu.com
pages.ubuntu.com
system-image.ubuntu.com
apps.ubuntu.com
ubuntu.com
login.staging.ubuntu.com
cdimage.ubuntu.com
certification.ubuntu.com
people.ubuntu.com
assertions.staging.ubuntu.com
fr.archive.ubuntu.com
qa.cube.ubuntu.com
releases.ubuntu.com
docs.ubuntu.com
bileto.ubuntu.com
keyserver.ubuntu.com
errors.staging.ubuntu.com
login-lp.staging.ubuntu.com
keyserver.ubuntu.com
brainstorm.ubuntu.com
kernel.ubuntu.com
hyperscale.ubuntu.com
fridge.ubuntu.com
buy.ubuntu.com
odm.ubuntu.com
start.ubuntu.com
assertions.ubuntu.com
errors.ubuntu.com
patches.ubuntu.com
discourse.ubuntu.com
daisy.ubuntu.com
support.one.ubuntu.com
certification.staging.ubuntu.com
summit.ubuntu.com
api.snapcraft.io
phone.docs.ubuntu.com
geoname-lookup.ubuntu.com
hockeypuck.ubuntu.com
start.ubuntu.com
try.cloud.staging.ubuntu.com

Certificate

The complete raw certificate details for releases.ubuntu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPwrxe4v6+SioeO54ufY
wik7Fm/RX8PnzOYszg2kVkJCXF1Zt6a+dWPiU+Vr2hDzzqBf43+I0kW3ICJtlqT7
YYDwx71UQbAnCUaxd+7rUCa5QOegX5SaEYCJX9hFthjY57xvpOpEyYJnA1kt2t+F
a0HyZSWDfKNvyPdlgiIWFOt05mIejH2txjVAcU6fHhBvLgGunoE0GOJQnEcTiqms
kd35NBjgas5pHTxQ5tMniQJLcVlENXsHw1paEduDWFi3BEpC+ubeotkF+pRkhk0r
IIA+T+dffPGndjSNOa45Drlc63gyOy61bDI0JMgosKeQ3HN4OcUen0KMDH8WKMyG
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382412966343829466006877418857054640760910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 20:26:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 20:26:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'releases.ubuntu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24362104702717433717141002630054742562797632504510762605553169931443165851774896900545743197388160020693438121382158074103627817542805985929312776023355177714142127167042086281105248392860811072989703314299784165744313557783589336191702426376884239991274162969986009212536741284473126159955935228593470631368136177002346155347409961543336577768991329505405851823352548000160421507173382084244071503319847490032618664975582887410041937557104511555662951015845057965656811952830705888019508409742122940610944454707558422975476449018688502653081491793673472767042165613183182378906170177012651256426202828626080396248577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e15f126157066adcbd9b08f5b988c2d2294e8e92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releases.ubuntu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releases.ubuntu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5fed0191000004030047304502200ee7266c43baec13fa9970b2e2582442cc2cefa174821806fa886056cd042cdd022100ed0e72ad31394d45719f4d4c36700f868d96d22f426a9020a4554be9ed07bdc000770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c5fed025d0000040300483046022100ddf937f8c855f86afb343261d1813424945685ceb0cc246b03172e981f145ab1022100d15c9316a80f19ead9bc0a5be079c0b5f6d613912bc97d8d0d027f393d7455d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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