api.ucraft.com

Issued by R3

About this certificate

This digital certificate with serial number 03:df:f1:0b:85:cf:da:ce:a0:3b:0a:6a:01:53:87:cb:2c:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ucraft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:f1:0b:85:cf:da:ce:a0:3b:0a:6a:01:53:87:cb:2c:d0
Serial Number (int): 337540229394928050354330490980547773017296
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:7e:93:56:eb:c5:57:46:04:ae:7c:5c:ca:38:30:b3:83:86:86:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:9b:18:1b:29:1d:c1:85:2d:f8:81:de:53:8a:66:fb:6c:8d:04:7f
Fingerprint (sha256): 12:a8:fd:5a:63:39:82:d6:df:52:3f:b4:7f:4b:0f:7d:f0:41:9f:a9:bf:f1:41:47:83:19:38:5a:17:25:2e:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.ucraft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ucraft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ucraft.com

Other certificates including the domain name ucraft.com

(limited to 100 certificates)
sni96102.cloudflaressl.com
support.ucraft.com
accounting.desotollc.com
sni96102.cloudflaressl.com
affiliates.ucraft.com
api.ucraft.com
api.ucraft.com
skydeck.ucraft.com
deck.ucraft.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
accounting.desotollc.com
deck.ucraft.com
sni96102.cloudflaressl.com
accounting.desotollc.com
academy.ucraft.com
books.caizio.com
covid-19-status.anexia.com
ssl374757.cloudflaressl.com
testing.ucraft.com
community.ucraft.com
sni96102.cloudflaressl.com
sni96102.cloudflaressl.com
api.ucraft.com
careers.tkdalewealth.com
emplois.lonniconsulting.com
accounts.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
jobs.myconnectx.com
ssl933139.cloudflaressl.com
recruit.openair.systems
books.sastitrip.com
community.ucraft.com
sni96102.cloudflaressl.com
sni96102.cloudflaressl.com
careers.goglobalgeo.com
sni96102.cloudflaressl.com
careers.ucraft.com
affiliates.ucraft.com
compass.status.atlassian.com
covid-19-status.anexia.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
empleos.profesio.ar
compass.status.atlassian.com
community.ucraft.com
careers.goglobalgeo.com
studio-academy.ucraft.com
sni.cloudflaressl.com
careers.wimoworks.com
api.ucraft.com
sni96102.cloudflaressl.com
books.greenseal.org
sni96102.cloudflaressl.com
accounting.desotollc.com
write-for-us.ucraft.com
careers.goglobalgeo.com
sni96102.cloudflaressl.com
skydeck.ucraft.com
careers.computerport.in
careers.computerport.in
academy.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
ucraft.com
developers.ucraft.com
skydeck.ucraft.com
jobs.caygri.com
write-for-us.ucraft.com
compass.status.atlassian.com
accounting.desotollc.com
write-for-us.ucraft.com
sni96102.cloudflaressl.com
covid-19-status.anexia.com
*.ucraft.com
trial.ucraft.com
studio-academy.ucraft.com
covid-19-status.anexia.com
*.ucraft.com
accounting.desotollc.com
affiliates.ucraft.com
accounting.desotollc.com
deck.ucraft.com
sni.cloudflaressl.com
deck.ucraft.com
covid-19-status.anexia.com
*.developers.ucraft.com
ssl387040.cloudflaressl.com
ssl374756.cloudflaressl.com
trial.ucraft.com
covid-19-status.anexia.com
studio-academy.ucraft.com
account.eecl.co.th
jobs.wifigarden.com
covid-19-status.anexia.com
write-for-us.ucraft.com
sni96102.cloudflaressl.com
jobs.ucraft.com
ssl374756.cloudflaressl.com

Certificate

The complete raw certificate details for api.ucraft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvvQxy+ovLFhixCocuSrC
5GwA+36GeDjsHIMPuZzy+5uPD7ZJ9wh60Xr76cwPbv5oO4x9+cLZ0YjkNdjfjfh9
Bl60OU6PFzI7ijfSgUv/FKGWZUebNOEw3V3eMeHT5KUiG3QGtWhoVgRwEVxQ+13n
FDxnRfP5JEQEsdQ1/CYToWlJNJfqI9swZzGAi9VldFIlUw/LHosTbeAwvhlyZM9v
X0gJRCEIda1Zpk2GoaCjSsDTr3ZLBzzLTaTjZBKSpdlrdh+C2Lj7g4hTD2JMPNnk
/QR3rPeoPcwVeJp2tmtwmspIAJBNppkzpd2N8CtVTcsTKG5YSBsC/Nr4EVaHsGrF
NlXQbyTqY7TuWl9ETg+ReQMQ5OU5EPyfJAbiM1/4oXrqq/IO6cNe0AMw1m7QLu1g
AFqpn/eAggQ5WJKlpRilfr49N6EhzONhOwGfJvx7X5sJXrn7DWTI8dfE+MwT3ucC
cMzNoaUfVwfNae+p+Y3h/5vSeHp23zydSAaV2Av+mpqsdGeHVvAik1DhRPkRKU2O
jmNg0JT4yZAiOpOBN6I5l/Bqf2Z9fRjbtnhHHL8k/xl9RcthjkuaLG7J3052QYMU
GtrYEQYSaSHnhPz/u/CVBlLTbTgegJt/jtn/tFoJPkZs9zjRNVXC/MGZrltpGDKZ
HIjvMH8d0PBobRz/z1hr6r8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337540229394928050354330490980547773017296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 23:05:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-08 23:05:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ucraft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779023883532229741153852602325755910344091742706476911543472291715149892199994920332218144748489435680969262427373774386213531004331609388796060520540308680535234675210945235607466485416014854404833516404724230438407033266781215222802040097348473659754691758028620886799424826879796194750802868182271291079993268289089391774616488589438779145598206475122745292544457442529259340407454304602580557968167766631302320174830688762823733116606725321473662837972054779359500959748819839421084453459443845180384349251334316279551086038311492798782188362529452260635246553962095627705291346865119667176737839072086955978349909490102253213777879992648171728629311656466707949013493176355934292785526555286651398899045390043958902892401492937979104758587140921842612541537167191313823050389873659471231060937876287912111393257023988483067303195761947963453550010457849119786368469868620538569714267470553141523643968146883970475725925670372300324674030562951343724452550494110515504868082811920012482330094121197728087209038180427292016970820066654279753980360458093872202608165063001148608013598400709173324717323317697243550827399638387401221295009794475423004215697342152075900396304118830165709040373074485193055342856260140586313053891263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							407e9356ebc5574604ae7c5cca3830b3838686b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ucraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d9c82b0b30000040300473045022100899a345ad683584d42ec45d6edb9b6f61a6dddbeb84fc1f1cb4f9348bbebe03a02204b8df868977d321196f2bf6d60f259d3c83714084ad9a629ee82d2fdf4da87cf0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017d9c82b0c1000004030047304502204a9a6110c70fe464d42d429f2372430d7a44c8161a6bec8d83a04f2e339efcb9022100ff112e3aef101e8ac98ea5d7bd2b3ce50c4acebb838052ae51dec6844a5b634a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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