gitlab.ruizlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:09:0d:d7:6b:ab:5b:ba:ab:89:56:de:de:58:8d:29:fc was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.ruizlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:09:0d:d7:6b:ab:5b:ba:ab:89:56:de:de:58:8d:29:fc
Serial Number (int): 301502212013021214828754122946352589384188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:ad:bf:3c:21:96:8f:86:10:8c:3a:7c:44:d5:74:d9:a6:15:9a:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:99:92:a2:de:96:5a:a7:94:de:50:df:7a:e1:05:4e:1d:a2:71:61
Fingerprint (sha256): c4:0a:fe:9d:94:ee:a4:8b:4e:38:ae:d8:76:05:91:c2:33:67:62:0f:1b:c3:82:59:fe:55:9a:e4:ad:0e:fd:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.ruizlab.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.ruizlab.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ai.ruizlab.org
gitlab.ruizlab.org
registry.gitlab.ruizlab.org
selma.cise.ufl.edu

Other certificates including the domain name ruizlab.org

(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org

Certificate

The complete raw certificate details for gitlab.ruizlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301502212013021214828754122946352589384188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 13:29:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 13:29:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.ruizlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 642662802246834646748508092587446734462981991059525607677929793664672892212184796834283089901667691528544129147769540068763500849759404052437548196405372949398582269784846398356498438769617296270772867099001244754419251715842657969116220769966146032187288876950312113179401728358509410537172958225539042986118984070176012784654648585410099322271209611965604600344380292812948019282220511011284862273110231298891048537919601736743165166162778142342235757611694648651549798644583016920408952065753673862333595895175746889092964577382247026809818308288220401861662053590907333423016526669951007529907490375227886437031506788707562835981356502642188392920264522251721401001282788862197910194309723796523762334956232367731310160541369511010743473650278024243207511011198285509971081736099951399271670895943354638571573927284423251041756994466605354661322017861272351971250934666961053538267348215608922057047962990549912377925750936671089929675287305151909676261056199160899390075863642154591330857007436994825725459568243962000498024451335106656159891579102888777933117850250928179262710387833973604744509260355463647530121829836959888921533497262324324409302832335159651442611845948989456638452255277174454564214205348047135708947666229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71adbf3c21968f86108c3a7c44d574d9a6159a8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selma.cise.ufl.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016616493e13000004030046304402203840c07f661e46cdecadbce59878733a11442f5d2fae2e393d5816fd871134430220105b8cf16c57839e8e01d69ae599c6d1f685bfe1b565b2fe3eb5260e4bedfd1d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016616493e33000004030046304402205ed883c49cc3ce5b7662f25a5aa39a076007b5079ceb91fb68ca4816528e1b8f022063db89adeeb9e43bfc6ea8fdf02459dc3e5312ed8125fb6be585cca8c30daa7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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