ruizlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:22:f4:d9:aa:3c:f3:b0:26:aa:ab:b1:19:ba:ef:a2:9e was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ruizlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:22:f4:d9:aa:3c:f3:b0:26:aa:ab:b1:19:ba:ef:a2:9e
Serial Number (int): 326717537331161629883710355839910339912350
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:1d:47:f1:1e:89:f6:48:05:35:ad:4b:af:2f:b3:39:a4:e9:c3:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:da:ee:ca:cf:dd:8b:f0:8d:5a:d0:73:9a:b8:bc:95:ba:53:07:21
Fingerprint (sha256): cd:fc:7f:30:be:8b:11:3d:06:dc:f6:a0:54:de:12:38:35:a1:0b:46:c0:ef:3a:83:ce:7e:3c:1a:27:73:0a:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ruizlab.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ruizlab.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oc.ruizlab.org
patty.cise.ufl.edu
ruizlab.org
www.ruizlab.org

Other certificates including the domain name ruizlab.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ruizlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326717537331161629883710355839910339912350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-01 09:47:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-30 09:47:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ruizlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699144724917037206159576327765500724333221170765144392890021896956076100698363285301641291430445468869635701344539729236835809594146308061013799787061239919957507553240954726600306226830870291788681067396949624551588003667857225402564360242472530000973697347021978220936802977061945532096181183163889280546239227689860806632455648977569812938507370039544478906220570734071132221436763387085597022363037889607821076047489403074161701223058945642098279119719631844567643613541485863242019210180585807457774302014099182102349451224755807107501095288453683677725595346634154558404002231122110418223715181941330607751411030656686335355849426046113707502001920920740780883831961713134043431768058514221697377333674557802120290981228018732492078957617143992722404892543476250478636178858832767980729268516071002670127302233430740642087784343214678939726164878488362454431447087101767828789733301472381400441920219574766161784069669041608983048072601886038279906280681366034266497324641151478259807332305884764382463848456975552890229069989758795586394100681844291173274008627053339163474974742188543603179250691807737931324515060442187917338829582972716013591297881277155541347701213041032474487390674680619698440751840112197289627672253929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d1d47f11e89f6480535ad4baf2fb339a4e9c323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patty.cise.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruizlab.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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