keyserver.ubuntu.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:63:82:3d:0a:68:06:af:90:61:3a:e8:72:77:6e:da:51 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=keyserver.ubuntu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:63:82:3d:0a:68:06:af:90:61:3a:e8:72:77:6e:da:51
Serial Number (int): 270656751510371856623940347399937217976913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:a7:a3:dc:5e:a0:8f:d4:a2:2d:04:29:97:87:29:0b:c0:17:10:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:17:6f:7e:dc:f3:c1:7d:68:69:b9:31:1a:fb:fe:d6:75:b4:4c:9a
Fingerprint (sha256): 09:08:af:2b:88:65:f7:d1:fb:90:3a:58:5a:f7:ea:93:f5:cb:d0:ef:f6:3a:d9:38:8c:82:40:74:90:5e:2b:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate keyserver.ubuntu.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keyserver.ubuntu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keyserver.ubuntu.com

Other certificates including the domain name ubuntu.com

(limited to 100 certificates)
changelogs.ubuntu.com
old-releases.ubuntu.com
usshop.ubuntu.com
lists.ubuntu.com
facebook-apps.ubuntu.com
people.ubuntu.com
buy.ubuntu.com
connectivity-check.ubuntu.com
search.apps.staging.ubuntu.com
maas.ubuntu.com
tour.ubuntu.com
myapps.developer.ubuntu.com
api.staging.snapcraft.io
manager.assets.staging.ubuntu.com
auth.esm.staging.ubuntu.com
design.ubuntu.com
jp.ubuntu.com
start.ubuntu.com
jp.staging.ubuntu.com
staging.ubuntu.com
docs.ubuntu.com
fridge.ubuntu.com
hr.archive.ubuntu.com
upload.apps.staging.ubuntu.com
assets.ubuntu.com
daisy.staging.ubuntu.com
webstats.ubuntu.com
juju.ubuntu.com
old-releases.ubuntu.com
certification.staging.ubuntu.com
assets.ubuntu.com
daisy.ubuntu.com
*.ubuntu.com
phone.docs.ubuntu.com
cn.ubuntu.com
assertions.ubuntu.com
docs.ubuntu.com
redirect.ubuntuforums.org
code-review.phablet.ubuntu.com
ask.ubuntu.com
discourse.ubuntu.com
upload.apps.staging.ubuntu.com
design.staging.ubuntu.com
keyserver.ubuntu.com
insights.ubuntu.com
ubuntu.grad.hr
developer.ubuntu.com
cloud-images.ubuntu.com
phone.docs.ubuntu.com
lists.ubuntu.com
jp.ubuntu.com
help.ubuntu.com
buy.ubuntu.com
merges.ubuntu.com
support.one.ubuntu.com
people.ubuntu.com
assets.ubuntu.com
*.staging.ubuntu.com
brainstorm.ubuntu.com
font.ubuntu.com
assets.ubuntu.com
pages.ubuntu.com
system-image.ubuntu.com
apps.ubuntu.com
ubuntu.com
login.staging.ubuntu.com
cdimage.ubuntu.com
certification.ubuntu.com
people.ubuntu.com
assertions.staging.ubuntu.com
fr.archive.ubuntu.com
qa.cube.ubuntu.com
releases.ubuntu.com
docs.ubuntu.com
bileto.ubuntu.com
keyserver.ubuntu.com
errors.staging.ubuntu.com
login-lp.staging.ubuntu.com
keyserver.ubuntu.com
brainstorm.ubuntu.com
kernel.ubuntu.com
hyperscale.ubuntu.com
fridge.ubuntu.com
buy.ubuntu.com
odm.ubuntu.com
start.ubuntu.com
assertions.ubuntu.com
errors.ubuntu.com
patches.ubuntu.com
discourse.ubuntu.com
daisy.ubuntu.com
support.one.ubuntu.com
certification.staging.ubuntu.com
summit.ubuntu.com
api.snapcraft.io
phone.docs.ubuntu.com
geoname-lookup.ubuntu.com
hockeypuck.ubuntu.com
start.ubuntu.com
try.cloud.staging.ubuntu.com

Certificate

The complete raw certificate details for keyserver.ubuntu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQRzvRHZf0SFx/RUkVBT
CN/R4Lf/WIA/w3/TGl253q0FEIgvhKUpwaU5F2UmjhmOfZu2STxpqaxHGjjz2oDQ
BDa6gMhlCgvZRMqmlMxsDzhBHO2h/qzSsAMAMYl896XSFHu3VOTxO+HVosC+VkcM
rVMA7T7KY/5UNIhiP2jWrJIDsshIZAytFZ9RhHmw9zjYM5Zgu0tmaZsMO3YUCckL
GZjuOTXgqRGyIMYTf1TG5rT1oiEBxIsntbOstJppGqDDLNqa5ybg/icg30Vr3fWf
yZ2FJy+EVYNMfWBAH/UzkxPXiOgevQyvqk3dge7JdRVejMQw/6LpD0HL9n+RCEts
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270656751510371856623940347399937217976913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 02:01:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 02:01:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keyserver.ubuntu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25881047932213047296583834245260517013678547126556024643483915150428721683844301312157293466011939503170912165992369889275311388372475060848697009090178894197787232089400537282071626885684003097580718079856243022647694144260192108679981889978301368935365537841025350551687016687238391245210042879720914329474722508167807717093158200575632150149914701303990167182526788570130068994742566154798081309727306214539524749634197441447608866984085131835666361649929625406565406054420753849291799720203881687604412198305824188804488467097017261379620767121649412270681753720859924211080005024631001674827334726263112381197503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5a7a3dc5ea08fd4a22d04299787290bc017103d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyserver.ubuntu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db8c3d3cc0000040300473045022100b2c9f11f1b10abd315073efff965989ba5472b2fded52b0f4b0a565ceae3936c02204cd5c63f59e66d27280511e5f8efbcec8b717c1b79de4a556600e40ff911af87007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db8c3d3ba0000040300473045022015e92c2fd1700d8ba6d73df7b20bb770c58b26af2216c44d9bf5f3b9a0f19c5b022100c7f8d870df6e16d23e4db3212f463bc48745ecfd8d861d8db2b4613415a0e690
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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