gitlab.ruizlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:36:ce:36:66:2d:ba:53:7b:bd:67:a7:a4:46:1f:8d:40 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.ruizlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:36:ce:36:66:2d:ba:53:7b:bd:67:a7:a4:46:1f:8d:40
Serial Number (int): 308368673458641034782974267034259710512448
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:7d:80:63:32:8f:db:0b:bc:28:d8:7d:9f:32:a2:30:a8:d9:b8:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:80:85:17:6c:12:cf:ed:dd:aa:01:c4:bd:e4:fa:62:4f:46:9d:60
Fingerprint (sha256): 1b:61:75:55:4d:87:d2:2a:93:d8:48:c4:29:5e:35:dc:46:b4:a5:29:da:c8:aa:cc:4e:6e:c4:f2:22:19:ae:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.ruizlab.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.ruizlab.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ai.ruizlab.org
gitlab.ruizlab.org
registry.gitlab.ruizlab.org
selma.cise.ufl.edu

Other certificates including the domain name ruizlab.org

(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org

Certificate

The complete raw certificate details for gitlab.ruizlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308368673458641034782974267034259710512448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 09:50:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 09:50:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.ruizlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832121077088882830425438083018944199418726833977243419190987666477677554650788373191636296940850737502186977363729844736650442348153504739173492222388149958990529361621426318144429005050684031653589076831859376673541260962166983276834573217096783987593037008535388931205404299898118092363320665093681899808901077917918504051511468519319340137718797461540816728085698531219659234880759297844856040006682121669935007982603136492144448160940202990252819414260506761087374913407052797249989417161492150698008539153792998455253166353833254492742169392618259979003221965235124973847997858549715345236694291527188375983060833207155048488473616647753438427298954876873886881301379646473766139056361495598631483751562031858688713454665375945890735745299668733293379331741657805582207959323213470156816130257584723619213612590826654209392595529466418421248276216629418163488050072270863846205626961783380958315267238205732251540481040967991156382145448130555667714545447494980203099093158016141068623031834921726006680917587209551137450705021809947898142596079756603300372487219310126343712613007592215327592585633775609782541344791599777417199401986427570652223752388859416476420394837487502091957489463208818347762262150400858575814288604327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							417d8063328fdb0bbc28d87d9f32a230a8d9b8ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selma.cise.ufl.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d5897b7420000040300473045022055bd43dac277d33f4d9557f785e0d215153b325744e5dade3a1922dc2a64b178022100ef850ba120b87a89a04bb63d4079cbf40409279ea2a4f4ae11aafa7f8d60fd33007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d5897b739000004030047304502204282ceef020e7f87c18f86586e4dd5e824cd2ab2db2d0077dda3aaab882e1453022100d5bf89ad6606590548aa1b1073922ed7032403d9bd38ee26ada215cd64c50e1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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