gitlab.ruizlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:d7:73:de:ed:9d:1e:74:e9:3f:e4:bb:fc:9b:36:34:38 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.ruizlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:d7:73:de:ed:9d:1e:74:e9:3f:e4:bb:fc:9b:36:34:38
Serial Number (int): 320151810560435276566388959644990846678072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:2f:fc:b0:0f:8f:26:28:d9:42:c1:29:97:79:e8:0a:58:f3:93:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:8c:b5:fa:82:98:00:26:60:54:40:ad:a7:f8:1d:c8:a1:1d:2c:55
Fingerprint (sha256): bc:e5:08:d1:8f:67:15:a0:12:e1:bc:c8:f4:f5:d5:96:5d:9d:28:93:2e:df:82:63:e5:61:72:92:4e:20:c8:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.ruizlab.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.ruizlab.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ai.ruizlab.org
gitlab.ruizlab.org
registry.gitlab.ruizlab.org
selma.cise.ufl.edu

Other certificates including the domain name ruizlab.org

(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org

Certificate

The complete raw certificate details for gitlab.ruizlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnjCCBYagAwIBAgISA6zXc97tnR506T/ku/ybNjQ4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjQxMDQ4MzZaFw0y
MDAyMjIxMDQ4MzZaMB0xGzAZBgNVBAMTEmdpdGxhYi5ydWl6bGFiLm9yZzCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMrg70qi4hkBR93GaULYA3MCVKc5
aJG9RGJD0EzAkyM7DdcAYaSDEgUMiT7w8srWkKVWG2Lz3CcxFLdZltoWKQ152v2L
71NBJzedH5jSoO8wLdeeV6gmBlVCtIdPcfqwuK5/0HD7E1Nn0QRt8sPpMvnqxuZc
y24lTq32Bdhmn+MU7fD9AluZ9BymCzFzH2NqzSz1/Z3OTWhjttvhRYxF1tRueIie
gHIkPUmeIFljDVrBwGL54c0xTakJdhGZbmmS9KKvWZDrMskOyeWE5u9davMRE2ip
yUEhS6TxnWrl0g/F/A9zS9s+3I8TZzpFVSSwd9VQXDrYHArqmP0yprfbkX/lwUcI
j9FyaSBa3ayZlw/DCy3tAT8WWsCBO/CP8rf6z/3OO3lkK9/lUM8l9pJ0SzEIZ2OA
qzHTtGmsxgBgxB9BkIH8r3DXlQCl109w9l2FeY1jEQsRZLggAccOWYk7+lUBta0A
XtjxYfcHoxFzxW6KArBUyXoGb+TVkArYoq0A5YLJXRsGJh5FBzGjsdsKDkcMxqQT
ntG2ZN2qvZdp+udcocLDD6CbHDUX/qkUFBFNipYCUZqxPmMLZkK+Q6OGDz2U5de8
f1++wVryGz3w1nazB/TqMKBBncku4NplDDo7RH6kipMcGbEY4t28wmfNjnz66IKq
bxwiOxL2WUMdmAIvAgMBAAGjggKpMIICpTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FO4v/LAPjyYo2ULBKZd56ApY85OTMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wXgYDVR0RBFcwVYIOYWkucnVpemxhYi5v
cmeCEmdpdGxhYi5ydWl6bGFiLm9yZ4IbcmVnaXN0cnkuZ2l0bGFiLnJ1aXpsYWIu
b3JnghJzZWxtYS5jaXNlLnVmbC5lZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDRgkAQLS+TiI6t
S/4dR+OZ4dA0prCoqo6ycwAAAW6dPgHBAAAEAwBIMEYCIQC2CsF7bxw7ZBZhEeWd
BqK3J4Ayd/ExyNSABM6V985FHQIhALpCgeQwDcmWXjbij9hhow5OWJyu7KtJyrhs
lONOaILhAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFunT4B
sgAABAMARzBFAiBIBPzQhWE+4dxbt2gwFXS4ODh8MkVQQzPgphrQzEQaZgIhAMxJ
QFWJv8z9UpGIDGYCTnMnXsiXnG5zbB3JuJ44RMUsMA0GCSqGSIb3DQEBCwUAA4IB
AQB8V+UtOS04exIK4GGtnXgiHCq+rYd5zVyqOH7wUzyt3nvkdXskbjcz6086LFdV
OuT55bL9REzS8OomUGTkMj5ZbRNz1wAN9WsnZHBArBsQ5ysYUt66ZfczzWxaxZXL
dAzI/kaQvk0of2s5TH9fJSxRPFAy3ILwP2cfi6ozU8FVODAqjVvF75i1Rme1cw1s
07I3a+KmJaBj62Y35nNdGo/3/WitUzoejHcNpSA0nmE2Nf4OSPUEBwnAAWCauywY
WxI118qqpS/h0M3FAtA5wjdlPHXLY/Z3ytcGLVrYJ5uVicVluDEkIaz9q0KOu9Xe
QR4Zqv8pqRha204hSUXOJJ3J
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320151810560435276566388959644990846678072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 10:48:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 10:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.ruizlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827672686300924795526000710847656894273545395882204729326067387210525537216018119965824017953326267427411291004803064102320304868645906076410256795311309770207993795628531638462531721049733948383726102203568048687523798515365450542799073030545794744120147309647617944694035612059659372630940289458579150863337110703745493096549363461999456086943003779790847686957962639502590774020700984978483509550981266021977897866629909620117506923544899702164793382571297039670093913277904539999767123781857657495286522547690800338797465260798144477207480605174393326323223971696242683390320181701995815273658695469055742062915502377766697993638207124439393981291436193429764443101592673455742461976804333339799726283861564737713749800030374686091904433186092867006291692298659729036496677024377405027050793371764745629895810928422567176461797827936453729989687643928728775102784380085700942739407238972309242777084744881165620698359069987872355856827170771763207549043875999646783268038673395121396287025553523115961453610721321729561656182991732072234840873928618156414526931964876105555193458473040259349265665160513021224345189083869570845718688309928821260781377725857203924599259223929571486596300418902695742757474496050579902479048639023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee2ffcb00f8f2628d942c1299779e80a58f39393
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selma.cise.ufl.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e9d3e01c10000040300483046022100b60ac17b6f1c3b64166111e59d06a2b727803277f131c8d48004ce95f7ce451d022100ba4281e4300dc9965e36e28fd861a30e4e589caeecab49cab86c94e34e6882e100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e9d3e01b2000004030047304502204804fcd085613ee1dc5bb768301574b838387c3245504333e0a61ad0cc441a66022100cc49405589bfccfd5291880c66024e73275ec8979c6e736c1dc9b89e3844c52c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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