supernova.dicesquare.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:9d:bd:30:9d:68:7e:68:52:60:98:22:5f:13:d4:84:99 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=supernova.dicesquare.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:9d:bd:30:9d:68:7e:68:52:60:98:22:5f:13:d4:84:99
Serial Number (int): 291831659576715579810919808806876582544537
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:18:2b:5e:0d:1e:3c:9e:31:98:9f:82:71:02:8b:54:7d:eb:34:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:b0:21:c7:b5:de:b1:64:37:78:67:9b:d6:76:89:a4:62:02:96:46
Fingerprint (sha256): 01:10:1b:3a:83:42:49:d2:a3:cc:7e:b4:2b:fc:b2:27:08:85:6c:a2:8b:e1:12:86:d3:ee:b2:81:e9:36:9a:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate supernova.dicesquare.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for supernova.dicesquare.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

supernova.dicesquare.net
www.supernova.dicesquare.net

Other certificates including the domain name dicesquare.net

(limited to 100 certificates)
supernova.dicesquare.net
supernova.dicesquare.net
dicesquare.dicesquare.net
*.dicesquare.net
thebeefstation.com.sg
exchangeint.com
*.dicesquare.net
*.dicesquare.net
prelitadvisory.com.sg
dicesquare.com.sg
dicesquare.com.sg
holarpolar.dicesquare.net
dicesquare.com.sg
*.dicesquare.net
hyflux.dicesquare.net
myasset.dicesquare.net
*.dicesquare.net
dicesquare.net
supernova.com.sg
supernova.com.sg
hyflux.dicesquare.net
wwolfgang.dicesquare.net
wbuildss.com
prelitadvisory.com.sg
wwolfgang.com
*.dicesquare.net
fastener.com.sg
*.dicesquare.net
mail.gentleoakvet.com.sg
*.dicesquare.net
thebeefstation.dicesquare.net
fastener.com.sg
prelitadvisory.dicesquare.net

Certificate

The complete raw certificate details for supernova.dicesquare.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7EVivDT0B7KNB1DcgiH
Ge9fXRY9TETv16AM/lYXm7Gp+S66r/dtxez2PeUWk50hrk26ELVYl44RSj/gch8K
nq5GlQMs/AJwp5WN7jpxxYKONvNwbCnvB/cPemU3JrEnF8dige8BCThnonFMprxk
8QxJ2ySg5LA3TeaO06AtUm4Z0bboEPw2cVY+R+fjP1EBg6DKghKtllLsry8iq3Ob
XLqE87z2Y0/TSLBX2uQvVwITzSyTZLprg9voWl3hPo+bV4NxhqLBGnTbpoaMUQ5y
+q1vczaiJGLIv4KPWCDdDq282uZ4IRex5vVd4oytv9Go0JpMcHFRLCpqlz24S74G
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291831659576715579810919808806876582544537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 00:47:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 00:47:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supernova.dicesquare.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23693886478257070787632588712974563359000618285828067199974332859448080963896822118337926035536981875001591343090058070630300140929856378373815067399614010253572099007592246847933300819975197209984646370614859525635302089062123767020009060446265121893889957477682474409749817337229298976171637083277772405706476379660914507947571727643657128537360660010513014088650203442250935085785729770800617337811118978064651448243089725778881314016081503666694802662592526251164287809934817507658610778710846961724010518913129256069588578712860774684220081421459202295695317885140491366978212948153714311623561372675788857280091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d182b5e0d1e3c9e31989f8271028b547deb3446
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supernova.dicesquare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supernova.dicesquare.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a83b01cc0000040300483046022100d153835abc12ef14ebd3a2c09e8fbf3c7dbfd054b45c33304e10c1616f136076022100ef7e3ca3904d6fdb538999f61735692f65431ee7dab938b8538acbadd5992c64007400293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169a83b0058000004030045304302200c26a31e6739325f69a911515aacef2a96f628f8b90831db436426e947d6c0e2021f01846e7c51679d2c2aa7100e746d247477720895930820ce0e68bab49104c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000316d8f35878fc8fe3c7ea871d5ec5fd90653f2695f3d9e157e347e263fbf7bbf2c6a60f3f403db20ba798b8f0f4da97814631d62536f8d7886086d33479a783edfb8982534e35c554a88a60eaafaafecc9867155a247b6f9aaec936c137430dedda4fcca6e17bc28bac4c75fcf45f85a74acb7a01e527f8ef8ac3806e986558b78567893ec11e693756ee7cba75b5ef48e83d543f3f9fd23467d1f940625abe1cb623fac82f4dd33fdeb88ae018565194f3aaaeb17dd7a41b37ec3712fb4c8867abf398460ef9795855eac6fcc718305b6cfee4568c0233b39f074dc68ce98303c7170a63be3044101a318204fc0befba14eab3414d626ae436b3a34eaae776