carpinteria.ucnrs.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:6a:8d:13:23:c2:30:77:e1:2a:e5:7d:88:a4:58:e2:7d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=carpinteria.ucnrs.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:6a:8d:13:23:c2:30:77:e1:2a:e5:7d:88:a4:58:e2:7d
Serial Number (int): 337701738655180077092731929129808524010109
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:f4:8f:14:14:5b:ba:ff:f2:fe:9b:12:3e:9d:ac:7c:bd:ad:08:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:8c:dd:d5:58:d0:8d:8f:98:27:46:58:c2:f7:2d:e7:81:60:ea:05
Fingerprint (sha256): 20:ca:fe:1f:57:33:4c:38:e8:dd:ad:ea:21:26:ff:ca:e3:7d:2d:d0:6c:68:ef:70:16:11:1b:49:0b:b5:99:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate carpinteria.ucnrs.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carpinteria.ucnrs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carpinteria.ucnrs.org
www.carpinteria.ucnrs.org

Other certificates including the domain name ucnrs.org

(limited to 100 certificates)
iseeci.ucnrs.org
sagehen.ucnrs.org
chi.ucnrs.org
medex.ucnrs.org
anzaborrego.ucnrs.org
sanjoaquin.ucnrs.org
*.ucnrs.org
sanjoaquin.ucnrs.org
ucnrs.org
anzaborrego.ucnrs.org
ca-ecology.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
ca-ecology.ucnrs.org
iseeci.ucnrs.org
ecopreserve.ucnrs.org
iseeci.ucnrs.org
forest.ucnrs.org
ucnrs.org
burns.ucnrs.org
ucnrs.org
blueoakranch.ucnrs.org
iseeci.ucnrs.org
medex.ucnrs.org
burns.ucnrs.org
iseeci.ucnrs.org
burns.ucnrs.org
ca-ecology.ucnrs.org
ecopreserve.ucnrs.org
deepcanyon.ucnrs.org
bigcreekblog.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
stuntranch.ucnrs.org
ca-ecology.ucnrs.org
ca-ecology.ucnrs.org
carpinteria.ucnrs.org
anzaborrego.ucnrs.org
ucnrs.org
granite.ucnrs.org
sagehen.ucnrs.org
granite.ucnrs.org
anzaborrego.ucnrs.org
bigcreekblog.ucnrs.org
ca-ecology.ucnrs.org
deepcanyon.ucnrs.org
chi.ucnrs.org
ca-ecology.ucnrs.org
ucnrs.org
ca-ecology.ucnrs.org
chi.ucnrs.org
granite.ucnrs.org
ecopreserve.ucnrs.org
james.ucnrs.org
blueoakranch.ucnrs.org
ca-ecology.ucnrs.org
sanjoaquin.ucnrs.org
iseeci.ucnrs.org
burns.ucnrs.org
james.ucnrs.org
ca-ecology.ucnrs.org
blueoakranch.ucnrs.org
sagehen.ucnrs.org
granites.ucnrs.net
james.ucnrs.org
medex.ucnrs.org
sanjoaquin.ucnrs.org
ucnrs.org
james.ucnrs.org
medex.ucnrs.org
blueoakranch.ucnrs.org
ca-ecology.ucnrs.org
csfrs.ucnrs.org
forest.ucnrs.org
ca-ecology.ucnrs.org
carpinteria.ucnrs.org
deepcanyon.ucnrs.org
ca-ecology.ucnrs.org
chi.ucnrs.org
ca-ecology.ucnrs.org
ca-ecology.ucnrs.org
ucnrs.org
james.ucnrs.org
burns.ucnrs.org
bigcreekblog.ucnrs.org
ca-ecology.ucnrs.org
blueoakranch.ucnrs.org
deepcanyon.ucnrs.org
granites.ucnrs.net
carpinteria.ucnrs.org
paradisereserve.ucnrs.org
paradisereserve.ucnrs.org
chi.ucnrs.org
anzaborrego.ucnrs.org
ca-ecology.ucnrs.org
stuntranch.ucnrs.org
paradisereserve.ucnrs.org
deepcanyon.ucnrs.org
anzaborrego.ucnrs.org
paradisereserve.ucnrs.org

Certificate

The complete raw certificate details for carpinteria.ucnrs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0oNXJUbZhhBAxvLhlJ1
X7Vhqa1Y8vZMN0Tk3OS/1lC3rsQDkB8YjnOf3ZmXwshLwCEBs4x56Wvh4IuKbBz0
q9AaoyA7genpu1v1QgEAwx4EkBKCSpjxJ5P3ez9gDqiW0zVqyHKiiXRPyCzGloWn
GsSucJhVNrDmgEbIRp+yxVnDiMQDKEn32ZjQeGrbUlPfhc76jK7SaC6oJV2E7kAP
uJOMFePKXeVrPSNW8VmKcX7wzhCeT4NnJ5iocWOfR7BTA1gl7sKYmUihWtRxM1qq
xs/zjYcju5g43fTgzul6L42BnpAH8i6O2llJJtZR0i5ZmmjTydopJip/gnKpsa8z
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337701738655180077092731929129808524010109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 18:26:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 18:26:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carpinteria.ucnrs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23138126306612044619666535804761055182025205821508344093767946980251624088376256567812296644032725485389841768099500117181806633193914769878100952508184938683417413320452491607379924436181934480330899521041183155685895237693069269785490552297946288084429129206476037314838465536457277180504548124358853346402422822975389401944829858600176803627533318739991501734719102297844487629334509248050206065413184030366903839079293691549658763497907069089655756920747091665064068038340823278443501708965236686555885723836959504056608700832348267167959169368919970335482617541616497834158476928027933054923888502408941161886609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07f48f14145bbafff2fe9b123e9dac7cbdad0860
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpinteria.ucnrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carpinteria.ucnrs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c96bf4686000004030047304502200cd042271af91cb80f0e2f890605f3bceaeccdaf4cbf5a208fde56e9a6a6eb63022100ad75f08945e93ebc6468621973bc2040356f211a8f35744360519919b92f961000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c96bf46a5000004030046304402202bf5c1672a844c60448d4ba9041ca73a8a51566d31101eef3bcaa7635cc09a7602204210305007ebbfec604d38c0ed1d0d1d10f0f6c6d07d26c307c298ce1c140a62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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