api.ucraft.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1b:87:ad:9c:d7:71:f0:99:99:2d:12:86:c0:fd:f0:11:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ucraft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:87:ad:9c:d7:71:f0:99:99:2d:12:86:c0:fd:f0:11:72
Serial Number (int): 270704828930058784405286172388187528237426
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:16:83:87:8c:0c:fd:fb:2c:b3:41:8b:b0:33:66:64:18:44:37:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:a6:0d:a4:51:df:22:d6:89:dc:1c:d0:1a:da:5a:28:72:19:bf:91
Fingerprint (sha256): 08:8e:cd:1d:1f:8d:9b:2e:27:ee:03:ec:e3:f1:a4:31:95:37:c1:87:e3:b7:35:ac:70:c3:71:fd:ac:35:37:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.ucraft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ucraft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ucraft.com

Other certificates including the domain name ucraft.com

(limited to 100 certificates)
sni96102.cloudflaressl.com
support.ucraft.com
accounting.desotollc.com
sni96102.cloudflaressl.com
affiliates.ucraft.com
api.ucraft.com
api.ucraft.com
skydeck.ucraft.com
deck.ucraft.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
accounting.desotollc.com
deck.ucraft.com
sni96102.cloudflaressl.com
accounting.desotollc.com
academy.ucraft.com
books.caizio.com
covid-19-status.anexia.com
ssl374757.cloudflaressl.com
testing.ucraft.com
community.ucraft.com
sni96102.cloudflaressl.com
sni96102.cloudflaressl.com
api.ucraft.com
careers.tkdalewealth.com
emplois.lonniconsulting.com
accounts.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
jobs.myconnectx.com
ssl933139.cloudflaressl.com
recruit.openair.systems
books.sastitrip.com
community.ucraft.com
sni96102.cloudflaressl.com
sni96102.cloudflaressl.com
careers.goglobalgeo.com
sni96102.cloudflaressl.com
careers.ucraft.com
affiliates.ucraft.com
compass.status.atlassian.com
covid-19-status.anexia.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
empleos.profesio.ar
compass.status.atlassian.com
community.ucraft.com
careers.goglobalgeo.com
studio-academy.ucraft.com
sni.cloudflaressl.com
careers.wimoworks.com
api.ucraft.com
sni96102.cloudflaressl.com
books.greenseal.org
sni96102.cloudflaressl.com
accounting.desotollc.com
write-for-us.ucraft.com
careers.goglobalgeo.com
sni96102.cloudflaressl.com
skydeck.ucraft.com
careers.computerport.in
careers.computerport.in
academy.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
ucraft.com
developers.ucraft.com
skydeck.ucraft.com
jobs.caygri.com
write-for-us.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
write-for-us.ucraft.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
*.ucraft.com
trial.ucraft.com
studio-academy.ucraft.com
covid-19-status.anexia.com
*.ucraft.com
accounting.desotollc.com
affiliates.ucraft.com
accounting.desotollc.com
deck.ucraft.com
sni.cloudflaressl.com
deck.ucraft.com
covid-19-status.anexia.com
*.developers.ucraft.com
ssl387040.cloudflaressl.com
ssl374756.cloudflaressl.com
trial.ucraft.com
covid-19-status.anexia.com
studio-academy.ucraft.com
account.eecl.co.th
jobs.wifigarden.com
covid-19-status.anexia.com
write-for-us.ucraft.com
sni96102.cloudflaressl.com
jobs.ucraft.com
ssl374756.cloudflaressl.com

Certificate

The complete raw certificate details for api.ucraft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270704828930058784405286172388187528237426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 22:07:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-07 22:07:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ucraft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767175458492006146121823268138662869286762578776212118565365138834757692925478710190910903353447174264754205911020998276098382274783052984652609997188285357355681179050983970760778304015730676682962466078589940551177676371323919760974887849845800330709072827055960962717606310354995695817484183059391731528318416782127101972619441924740279833215136765232184336318865983071213647959730596648836139843223245172870581887989525864071985773619706779732429538062573462141610736879893832095679546946381008270357010725092315387015566640330459300300979551056738473088792971640820695684627336910807203541616647758327418420656245482157493658510057771870904032337086286198554619519866452397407064344431915529790123488312098817334771305892956603298150379008360296790586848815025372704713988508549869397028819401560960125793795406424447433301677288806797218209261103328610453124708228927685952754996623857782054739080513268812841119125385402220877269337719271953995245520897685284433332587957022174567032292057064317129991363994541051626872855374221187542495102504101876438708591070718121514995078562423393976300098914216213095017391369209559675417570898368256213050260289215224089528643345820660969342291997754212036042092440888670887500352925331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							261683878c0cfdfb2cb3418bb03366641844378f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ucraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017ed14ac75e000004030047304502210094c61d1d022cbda56b39c518a93cc7a15f559c09f04d4308d4ae42ab3193d0c9022005a1759ced682a4ffaf6c1155cb9df97dccc479c7835737a6f976852164ad8f300760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ed14ac787000004030047304502205f343c6e551b58e639873434e9b403ceb184129b0522050c9a2e76c45ef885110221008540d399ac7ca766408ddfb408187ceb7233f77bded4ab139eb724250cd45f0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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