e-connect.upcnet.es

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2b:a4:46:8f:aa:8c:91:76:d8:08:f5:36:c0:9c:44:5b:77 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=e-connect.upcnet.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:a4:46:8f:aa:8c:91:76:d8:08:f5:36:c0:9c:44:5b:77
Serial Number (int): 276187359338866782216344055746866127854455
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:9d:1a:30:7d:9a:cb:f4:1f:79:5d:fb:ce:df:0a:40:68:70:da:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:a1:e5:8a:75:2f:10:c5:e2:d8:2e:4f:3f:3e:80:88:64:46:6e:f5
Fingerprint (sha256): 0e:b4:d4:72:94:56:38:18:5f:fa:c2:61:42:dc:17:b0:e8:22:ce:e1:ab:f0:0c:28:22:dd:3f:a7:58:53:58:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate e-connect.upcnet.es

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e-connect.upcnet.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e-connect.upcnet.es
econnect.bsc.es
ge-connect.upcnet.es
portal.e-connect.es
tcm-empreses.upcnet.es
tecnocampus.upcnet.es
telefonia.uoc.edu
tip.upf.edu
www.e-connect.es

Other certificates including the domain name upcnet.es

(limited to 100 certificates)
podl2.ithinkupc.com
atenea-externs2.upcnet.es
lamp4.upcnet.es
genweb6-exc.upc.edu
atenea-externs2-2.upcnet.es
pod.upcnet.es
lamp3.upcnet.es
atenea-externs2-2.upcnet.es
vader.upc.es
atenea-test.upcnet.es
lamp3.upcnet.es
gempre.upcnet.es
blanquernapre.beta.upcnet.es
atenea-externs2.upcnet.es
lamp4.upcnet.es
disc-pre.upcnet.es
atenea-test2.upcnet.es
lamp3.upcnet.es
eines2.upcnet.es
atenea-externs2.upcnet.es
eines2.upcnet.es
eines2.upcnet.es
atenea-externs3.upcnet.es
lamp4.upcnet.es
lamp.upcnet.es
podl2.ithinkupc.com
gow-dev.upcnet.es
podl.ithinkupc.com
lamp4.upcnet.es
atenea-externs2.upcnet.es
atenea-externs.upcnet.es
eines2.upcnet.es
rrhh.upcnet.es
atenea-externs2-2.upcnet.es
pod.upcnet.es
eines2.upcnet.es
atenea-externs2.upcnet.es
disc-pre.upcnet.es
atenea-externs2-2.upcnet.es
lamp4.upcnet.es
alec.upc.edu
atenea-externs2.upcnet.es
atenea-externs2-2.upcnet.es
genweb6-exc.upc.edu
pod.upcnet.es
lamp4.upcnet.es
pod.upcnet.es
podl2.ithinkupc.com
lamp4.upcnet.es
atena-externs2.upcnet.es
pod.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2-2.upcnet.es
lampextern.upcnet.es
lamp.upcnet.es
eines2.upcnet.es
genweb6-exc.upc.edu
lampextern.upcnet.es
eines2.upcnet.es
iemed.upcnet.es
atenea-externs2.upcnet.es
pod.upcnet.es
e-connect.upcnet.es
pod.upcnet.es
lamp4.upcnet.es
e-desk.upcnet.es
lamp4.upcnet.es
atenea-externs2-2.upcnet.es
atenea-externs2.upcnet.es
puff2.upc.es
atenea-externs2-2.upcnet.es
eines2.upcnet.es
atenea-externs.upcnet.es
atenea-externs2-2.upcnet.es
cas-blanquerna.upcnet.es
web-xk2.upcnet.es
genweb6-exc.upc.edu
atenea-externs.upcnet.es
e-connect.upcnet.es
lampextern.upcnet.es
e-connect.upcnet.es
atena-externs2.upcnet.es
lampextern.upcnet.es
eines2.upcnet.es
lamp3.upcnet.es
lampextern.upcnet.es
e-connect.upcnet.es
eines2.upcnet.es
campus.ulearn.upcnet.es
lamp3.upcnet.es
atenea-services10.upcnet.es
drac.uic.es
atenea-externs2.upcnet.es
eines2.upcnet.es
atenea-externs.upcnet.es
atenea-test2.upcnet.es
lampextern.upcnet.es
atenea-externs2-2.upcnet.es
lampextern.upcnet.es
ulearn.upcnet.es

Certificate

The complete raw certificate details for e-connect.upcnet.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDMiMUd6pZaVEg0fXFUf
u36AXO9KpEEgCIeeaXKta4zxypkNOmWjyw9RwLLIVpU70nD0B3qOme0Y4jZx4VEQ
ctOHSrVyz3HN43QcGJAmjIrodTjEw+uwnslbQ/l1tZgtR/h4GMvLWiJB0LXwiQsF
DF1DcB44IoODG3mPTQ8I89t7qtmOqwCcJEkCwE56xZmW5pj4DCKzwJ+MH+6s2Czu
cLcILJnH2fD1Dd36cEmDEAlVMVlIFdJSpmhBtYOzwfi+lU5jVMH/No6aNTL9X2vR
Pb0pCEJZ4oZO80sXuSXfHdnkQvEFbOYn43kLsndB7Hmd0HXBQnfiX11xEDd0v+a2
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276187359338866782216344055746866127854455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 03:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 03:03:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-connect.upcnet.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19213437255239049167084454483000700261227626412440368099062392617695823586559466781785572953208588538972332652257213453989032378399287119659693230385929236173072594050434996920394600097961119130164186122430512653530110022957394465703262816334705899864895027885010744735692114894335515072852744915018018980773949336111000139432174514400301671797591282931762249566530114787995495227394837006306704448107486732285232776786285559414992081735934896113112929714067169637905702825738290465641417930891755504121040151501518368943262926361107896158184825767718156098440969340736362982158702502835598895481352188743337422272041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f49d1a307d9acbf41f795dfbcedf0a406870da29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-connect.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econnect.bsc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-connect.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.e-connect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcm-empreses.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnocampus.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefonia.uoc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tip.upf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-connect.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170bd75d588000004030046304402206d379d8124ed8526218a0f5d52a1af05989efbe296ee4d3b693b03c377bac2a002203b55000f15ffc94b7086b6508b8180d0c7905908f6eca3343bbe0f708e97784200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170bd75d5b50000040300473045022100f962c7479bb37cb3f99ffbcc735b0bdd308e100fd110f7ce4dfb23dc45863a5d022053cd0e66e04016eaf0d95f9e4678c29d8a49b4e63aac45aab7f7973786bd27ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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