gitlab.ruizlab.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:7c:35:f5:05:04:db:b5:3a:b5:f9:3c:e5:09:93:05:6c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.ruizlab.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:7c:35:f5:05:04:db:b5:3a:b5:f9:3c:e5:09:93:05:6c
Serial Number (int): 298592740222461861629339628582974786831724
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:9c:20:b2:a3:8a:f8:67:cf:65:3e:67:4e:88:bd:4d:3e:77:7e:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:62:91:8c:62:14:5c:f6:67:8a:b8:73:46:16:0c:69:ae:50:2f:e6
Fingerprint (sha256): d5:9a:37:16:10:00:6e:ef:89:76:7d:f0:bb:b1:4c:52:5f:92:c1:00:d5:be:f9:5a:75:fb:93:88:57:9e:a9:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.ruizlab.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.ruizlab.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.ruizlab.org
hcc-pool.cise.ufl.edu
registry.gitlab.ruizlab.org
selma.cise.ufl.edu

Other certificates including the domain name ruizlab.org

(limited to 100 certificates)
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
ai.ruizlab.org
ruizlab.org
ai.ruizlab.org
ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
gitlab.ruizlab.org
bio.cise.ufl.edu
ruizlab.org
ai.ruizlab.org
ruizlab.org
gitlab.ruizlab.org
ruizlab.org
ai.ruizlab.org
ai.ruizlab.org

Certificate

The complete raw certificate details for gitlab.ruizlab.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298592740222461861629339628582974786831724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 09:52:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 09:52:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.ruizlab.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720257747263071232668308263238191270949627498001559675420005493080541028697801594423040189297268911213283959424592378925865441313104887252253371567874940079373620337354136525155511561343051910062109813998238104275983053409741420513210073199647150373647404115789538543700667119329778900484827348437895997904735480650605082161309388608361821917859933424127273820316805817066884971760547703723494656541999121438211622811688528539076938296012658311213891053933171889609773743838609188717909949860153045620521073576574065037214473461188661092098221118065448067773974177500245628779415748121282446338730138311058421966625171409592025638084987633800833632395469080300228911331190941192913036055876159041546076019892962393109773715275582936525277252503267316371559958734091018089015368122269574421488748136268397697875408920998804227315157315273656013818240003043806286843720204099380865312756266898440255390529612014438724388441827719637093658785417176549035916671462254499855624738347576937983439323662234096994973227921888151564584591551827146295342028885433153308736642675158454488523316908342316097456716150772464759588903532944403949859013442407744263197200051943974868401017070614838876387506218344849247887473462312196996486428813381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							969c20b2a38af867cf653e674e88bd4d3e777e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcc-pool.cise.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.ruizlab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selma.cise.ufl.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016594c2f39c0000040300473045022100bfbdbf4e1ebf3ab36b37001b95bb083c0fa4f19b297c6fe3df0f9474a17af5bd0220141e8845079da5c8c7cc2416577b3974ae5b967f07a286d97250ed05ecda4907007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016594c2f3aa000004030046304402202bb5a9f91c57cc506e4bb3504ceb99fff8362c7973a4984303b59f1ffd3dbfbc022017c4ac04f6cc2b0c4198332c4e7b221ceb102bef3feb41cf35e6863aec4b1bab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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