www.ucsf.info

Issued by R3

About this certificate

This digital certificate with serial number 04:60:c7:46:2e:f2:cc:b8:32:c9:7e:0e:59:18:01:bd:d4:bb was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ucsf.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:c7:46:2e:f2:cc:b8:32:c9:7e:0e:59:18:01:bd:d4:bb
Serial Number (int): 381381131735619789496239790746074403951803
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:83:48:a7:5d:b4:47:ff:48:24:4d:d9:3f:42:5f:4c:9e:1b:bf:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:0e:19:7c:00:c6:35:94:de:f0:1a:ff:b4:86:0b:d9:ee:8a:4a:ab
Fingerprint (sha256): 3e:9e:02:c0:e5:4e:1e:fc:00:6e:5b:30:60:d4:96:06:ea:7f:15:8a:37:c9:15:89:bb:0b:26:d8:2a:6e:dc:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ucsf.info

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ucsf.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adapptive.co
andria.co
audn.in
benvenuto.co
bitotc.io
duanshipin.co
edgesecret.com
erasmo.co
getmdmcanada.co
goldcarehealthwellness.info
mvinex.com
satoshistudios.co
tributarios.co
ucsf.info
vidio.info
www.adapptive.co
www.andria.co
www.audn.in
www.benvenuto.co
www.bitotc.io
www.duanshipin.co
www.edgesecret.com
www.erasmo.co
www.getmdmcanada.co
www.goldcarehealthwellness.info
www.mvinex.com
www.satoshistudios.co
www.tributarios.co
www.ucsf.info
www.vidio.info

Other certificates including the domain name ucsf.info

(limited to 100 certificates)
www.ucsf.info
targetednetworks.com

Certificate

The complete raw certificate details for www.ucsf.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D+Ab3bveaCLtbklOj8u
wBWR5uGwB2aM8M4wmBxx/lKC20Hn7BIFPitBdyWhdhXLaaL1Rbx0R9S8PDptdxUQ
WM/GHW8Q52K3ilR7IC9nYk1KrYV1t19/YKjh28CdT9YwLXFdNoC4Q9LIf4M37Qex
uBaIKtRRAo4w+ZUwkcc49ty916YW4zL+4rCVqAdF3UNfuX50zRECk1FoIClaucM4
wkYJwRjxHN3m+2P9XIX4wvfa52/sDJ9+JXtHFKOn7Kq0UiYYC0fxyrO63HjpDa4/
F8YDCnEXF4RwzVqk3pWccWvuyOczM/31rehA++CPze5L06106IBDzT6bnJoviJ0p
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381381131735619789496239790746074403951803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 08:56:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 08:56:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ucsf.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27298787728423773333554858968983510859914104478975893403596653191390031358937141674625611822293716575047446117619337819850084414350715281611580310511023438859190603231673929648520405123525997009399218149459008097520543046181904941274067528319744173611786643348477504013767461724341025855940072162142382739617147527504935448762745845336864462810658833765785698502075082855046444275091376874841321735952748863181868721299881381140811956153701834352228188082974221360710768992829798469555296241191192813350050737945090048587973592555397147475948218004358935431385048788413111146955659638076975690564600617198303225653631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f8348a75db447ff48244dd93f425f4c9e1bbf8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (498 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adapptive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andria.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benvenuto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitotc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duanshipin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgesecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmdmcanada.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcarehealthwellness.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satoshistudios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tributarios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucsf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adapptive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andria.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benvenuto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitotc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duanshipin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgesecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasmo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getmdmcanada.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldcarehealthwellness.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satoshistudios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tributarios.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucsf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidio.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018958fb505a00000403004630440220169ef902b37e036f60ffd08117720dd0aa8362093d445b6e073af73416672d3f022043aad62d33ccebd255e13fd654850c28f7688f34c9e53aec30b9fad18b4b7012007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018958fb50b10000040300463044022047def72309d66dd3207ee1bc269597dc5ed6574164cc922baabc719ef19a75e0022066d393c6b30b2f1911ed211594a24defc2025faa04412dcd8f0a173f4255bd8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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