artisan.ninja

Issued by R3

About this certificate

This digital certificate with serial number 04:02:27:6e:a1:38:d1:99:c2:7c:9b:8e:55:33:3c:80:f9:83 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=artisan.ninja

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:27:6e:a1:38:d1:99:c2:7c:9b:8e:55:33:3c:80:f9:83
Serial Number (int): 349182122775342505603363240305366734535043
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:d0:77:70:18:ba:31:b2:7c:e6:2e:04:34:72:29:33:5f:75:73:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:74:45:2d:6c:60:0d:1a:d9:c6:2f:f4:c5:f1:27:78:18:9b:fe:29
Fingerprint (sha256): 0e:5d:10:46:f4:bd:a8:51:8c:12:b4:69:b4:30:40:0b:6c:c6:2f:13:31:aa:57:7c:a8:8b:a3:06:ec:6e:fe:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate artisan.ninja

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artisan.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitragemonitor.com
artisan.ninja
astmoney.com
blaschka.com
bookofsex.info
cgg.church
gifts4vip.com
hemppayroll.com
houstontxplumbingcompanies.com
jamshedpurdental.in
maxwellmdg.info
nappydog.com
nickcoombe.com
nilesrolloff.com
proecovers.com
rfid-reader.com
rockstars69.com
roofrejuvenationsarasota.com
schoolsprivate.com
takeactiondomains.com
timbergrovemanor.com
totalinfo.legal
vzh.org

Other certificates including the domain name artisan.ninja

(limited to 100 certificates)
artisan.ninja
artisan.ninja
artisan.ninja
artisan.ninja
canadaslandtrust.ca
artisan.ninja
artisan.ninja
artisan.ninja
artisan.ninja
genevaforvip.com.artisan.ninja

Certificate

The complete raw certificate details for artisan.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNFSeeqUELkxf31QpoMG
vsfiWyae7e0JXTnF2g0LipHqRzww3HL5Duijb0SMnNeR2OqRAFfE/iNoFSYr/MBC
7N2QlnuCDSYqPALwLMtXi7DVq4nkoNSvlVTahWKnxXXbDxJAiYU/3CRaGT4wuU6w
MlA3uPH+FKlm68+wQP5UNh7fFerLp+FZx6bS6X+LwIrlDrZkiZd2WH9P4j2J8aQ3
GvjWuBXClWuJIKDDtUYG1Gbm1PUdlNE6TJpGIfR9WTOM3dor2LzsEDdci/xIaAaU
HiTXivgMwNf8sP5rFE6UTD1xw4fpPJS5e2Qpw8UC8B9O2vNG6Nb+G4+0GITs2WeP
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349182122775342505603363240305366734535043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 14:56:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 14:56:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artisan.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22826115504380819467441564761508277213193974906850325306945348560237631142259835862173309744455608100279960609224584629383446819616069485292220585475812510073869728089945134443281525553063276696826855132758384716547067721080728608641051835391557183654865762705339368067238977354217437902819703813314824078596723739137857834485115194341588406109265412571928469872271421006876405810826344027528148348124632571843094076701500336756811662667582541572991386022536130012367859746002466882874979542098561932909226026538983640775741344463420651784953193845871490243911382568582669537272801015462116603600118435309448400965501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1d0777018ba31b27ce62e04347229335f7573cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (418 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisan.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookofsex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgg.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemppayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontxplumbingcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamshedpurdental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxwellmdg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nappydog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickcoombe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilesrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proecovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfid-reader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockstars69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofrejuvenationsarasota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsprivate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeactiondomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbergrovemanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalinfo.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df59513fe000004030047304502207289e94b660e3e2601b9e083bf96582d44848a59c49f7fee96c2fa73816ae3d5022100f9c1956f39a7e7f07e5cde86a8ed3a0f0abae0d77fdbfb3133a9a16b596bd44d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df5951435000004030048304602210093760de0a2ee0911468cf0f3eb51ccf8163748109c93f20b283b4b8def0b2488022100dd32eec1a89b52a18d397bbec09dd6000e952edf22061233e23a8eb3411249cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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