ruizlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:4a:1a:2b:b0:0d:06:d2:b4:cb:e4:fb:85:d5:fa:15:01 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ruizlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:4a:1a:2b:b0:0d:06:d2:b4:cb:e4:fb:85:d5:fa:15:01
Serial Number (int): 297505287446398423860349644710924575708417
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:55:39:4b:68:59:75:3a:a6:cb:12:86:70:3a:d3:ea:3d:35:2a:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:08:ed:49:fa:42:31:cb:7d:3c:2e:00:37:54:cb:02:2d:85:15:26
Fingerprint (sha256): 0c:52:41:b2:4d:15:d6:81:78:63:3d:3e:63:ec:22:52:ad:f7:48:6d:a6:e1:cb:1a:5f:c8:ba:e7:6d:54:a0:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ruizlab.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ruizlab.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bio.cise.ufl.edu
oc.ruizlab.org
patty.cise.ufl.edu
ruizlab.cise.ufl.edu
ruizlab.org
www.ruizlab.org

Other certificates including the domain name ruizlab.org

(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org

Certificate

The complete raw certificate details for ruizlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297505287446398423860349644710924575708417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 10:53:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 10:53:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ruizlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913156774228331384680186143617332565016945139713918427086743376944068240881824347647144696693913554580579581095530614601408046218682314832391161809126329443197215319044874925170550297105964705759986398815281814449947251310655496924439238104321474494057391239016457049417371089159316115407693414131324415719044480574023258657800800086301239921189042314918160897896331256736696003646206905578875087243387666901730050772670400734211264231770736790511900928988311110741222671025684620127573920456744353056128188852612281794787202086057037810246821744712095991103642088806332803784781290470216537921557887739925850728232417011370474425955464999968111887288185358173332333971980013838931401862253517828454376300713756694652452569823790252895235467006608757840886472383364142772602172399489135501562935685786224522487026583934450881677170498032418941081682740645730657026744748042566989212375670947026510895504710216528367425253458045201827342356511003066611184132527358489057543522454425813676255033475394986728746314749034804550291909670655224656316433113471817650969541537438778825167638495557329759863731425989807402821134734546002783512385030151319063369500623999828039276264425912655192182173437956747203516226583878653953971362732381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b655394b6859753aa6cb1286703ad3ea3d352ad5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio.cise.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patty.cise.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruizlab.cise.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruizlab.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f758d33ba000004030046304402206f1384596884044c5b45e382cdd5d07a684b0972df9764c1cf6ef7952984e6b4022012c592b825d4851bc0f1221625b0864c01c85b3765b8cf95c2a4a5f950251246007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f758d33ec000004030047304502204273bccd3b34df2c5d6edd666db171127fa73c337f66ec3821a2097f02d6d4870221009f041f840b4d30ab99a35efa93ac805504b0cfa3e6882e518925ddfe9c36b4c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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