api.ucraft.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e1:4a:c2:11:ec:22:95:fd:44:bc:75:5e:83:4d:33:5b:c4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ucraft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:4a:c2:11:ec:22:95:fd:44:bc:75:5e:83:4d:33:5b:c4
Serial Number (int): 425112046825040293828662209139492351335364
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:16:08:99:3d:0c:72:1c:d4:ab:dd:f3:86:ff:45:91:ae:dd:d9:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:a2:61:e2:a5:71:4b:65:71:a5:96:d1:a6:6a:32:bc:56:90:d3:7e
Fingerprint (sha256): 02:76:5c:da:f6:59:10:68:41:84:3a:f1:cc:9e:64:a5:47:6a:89:65:26:03:91:57:50:88:d0:67:25:8b:2d:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.ucraft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ucraft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ucraft.com

Other certificates including the domain name ucraft.com

(limited to 100 certificates)
sni96102.cloudflaressl.com
support.ucraft.com
accounting.desotollc.com
sni96102.cloudflaressl.com
affiliates.ucraft.com
api.ucraft.com
api.ucraft.com
skydeck.ucraft.com
deck.ucraft.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
accounting.desotollc.com
deck.ucraft.com
sni96102.cloudflaressl.com
accounting.desotollc.com
academy.ucraft.com
books.caizio.com
covid-19-status.anexia.com
ssl374757.cloudflaressl.com
testing.ucraft.com
community.ucraft.com
sni96102.cloudflaressl.com
sni96102.cloudflaressl.com
api.ucraft.com
careers.tkdalewealth.com
emplois.lonniconsulting.com
accounts.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
jobs.myconnectx.com
ssl933139.cloudflaressl.com
recruit.openair.systems
books.sastitrip.com
community.ucraft.com
sni96102.cloudflaressl.com
sni96102.cloudflaressl.com
careers.goglobalgeo.com
sni96102.cloudflaressl.com
careers.ucraft.com
affiliates.ucraft.com
compass.status.atlassian.com
covid-19-status.anexia.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
empleos.profesio.ar
compass.status.atlassian.com
community.ucraft.com
careers.goglobalgeo.com
studio-academy.ucraft.com
sni.cloudflaressl.com
careers.wimoworks.com
api.ucraft.com
sni96102.cloudflaressl.com
books.greenseal.org
sni96102.cloudflaressl.com
accounting.desotollc.com
write-for-us.ucraft.com
careers.goglobalgeo.com
sni96102.cloudflaressl.com
skydeck.ucraft.com
careers.computerport.in
careers.computerport.in
academy.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
ucraft.com
developers.ucraft.com
skydeck.ucraft.com
jobs.caygri.com
write-for-us.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
write-for-us.ucraft.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
*.ucraft.com
trial.ucraft.com
studio-academy.ucraft.com
covid-19-status.anexia.com
*.ucraft.com
accounting.desotollc.com
affiliates.ucraft.com
accounting.desotollc.com
deck.ucraft.com
sni.cloudflaressl.com
deck.ucraft.com
covid-19-status.anexia.com
*.developers.ucraft.com
ssl387040.cloudflaressl.com
ssl374756.cloudflaressl.com
trial.ucraft.com
covid-19-status.anexia.com
studio-academy.ucraft.com
account.eecl.co.th
jobs.wifigarden.com
covid-19-status.anexia.com
write-for-us.ucraft.com
sni96102.cloudflaressl.com
jobs.ucraft.com
ssl374756.cloudflaressl.com

Certificate

The complete raw certificate details for api.ucraft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425112046825040293828662209139492351335364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 21:07:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 21:07:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ucraft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760193141972589404077739388257815271283121427934589974638165155119080589377844188723959819591388243310803768078906934569291035865988268722174034252625807465849808255161890816599863752680140343003737696268978146020923690560350037261759755408603602326629011418409828968633236592416761481937954958609414596866515786687218995200418498416662374576215637091527591973918043788616096387569144949725167270901870023675418030541602054676744260780454314639384704397786642298663366472835552242249398674404317163448733294573120479086826510924702408652632115960349938832728337537708060213323371897250956877010536681179824839544405681117498665518202973854842999397606181734735286560463631951576609817866249127859373285777401744468067629747858400554367146973810054606974554051312492169263481540226269366100926528673139943991200135889302389545347520795111775942177376347521031487550206718822289924737026923368626040869179193834386513528304689190182666125390300747898855597321005041450157314790043020516323186391127679077381309230457580188586248901838769734988652219494126364942622551280870781966511646306927279868948846290666833972125386679204036515141381333356449099469968758856569797863492357776184642374300527756613914826747565028027781175822565541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd1608993d0c721cd4abddf386ff4591aeddd9cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ucraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000018006116f62000004030046304402203de3296aa016bfc3faa5dd5322902d8d263482bfe2a2e55f5692bddd057ba52c022063f2b06d873f076422c064344ea9cf30cf1f34b6894e2c9831852f43072f4a1c007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000180061171630000040300473045022100dbad48be0701b3e67a833803c14bacd2a905820a189b73df2f9960e0bc3d641602202d898aad62be43cbd6907ca910733f2d84aa14127fed67666c1057736cf9bb5a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063dcea87b7d2219ae43e8dd9cd9793416f926ff5207459c79e30ae88404b5e8b098b0a0530c3da4cff022f4ed168b5d1cc2d45a42ee62577fd9e2da0e16941b314b5fbfc17805f9eaf0214312b998f8f5017d27742ebb622cdc0abf2d723bbde7d81d14401d58dd544aaeffd8c4d7054909650954d1d093a898315a20e2cfc5967e79a9f48cbc3a1d1a916b2cb64dcf865a4bcfab9fa3d054446862e65f56270c235e74eb1d1b04e19a9190776ae67c15b577292c48d8b94373d6c5cfb0ba5f5f24bbcffc5e561c1298bb28387e0ce195a0bf7412634809e20bdaf5913ea4b57696b26562523b04f6690d2a8e5e35ea0e0dffb3192bb7de61e8f5189acabf00f