shaftdesigner.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:d5:bc:a0:91:bf:4c:84:2e:9b:fb:d4:35:23:42:c3:8f was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shaftdesigner.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:d5:bc:a0:91:bf:4c:84:2e:9b:fb:d4:35:23:42:c3:8f
Serial Number (int): 307899364668172786887699249934839390061455
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:fe:9f:9f:1a:01:3b:d0:ea:86:bd:82:99:70:98:e8:72:0c:d7:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:85:79:10:5e:be:2e:a2:a0:00:b6:41:78:dd:31:22:aa:37:e9:39
Fingerprint (sha256): 34:e2:d6:cd:18:05:65:e1:86:e3:14:ab:a7:28:89:43:cf:9f:22:83:04:10:cd:71:89:6e:53:42:2e:a8:b4:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shaftdesigner.org

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shaftdesigner.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2rx.com
3dseminar.com
asterify.com
chomis.com
circodepulgas.com
craigslistclassifieds.com
delpilar.com
deportesdecontacto.com
enterpreneurship.com
freechristians.com
gujjar.com
hazelip.com
mahlstedt.com
shaftdesigner.org
thesportsbeat.com
www.2rx.com
www.3dseminar.com
www.asterify.com
www.chomis.com
www.circodepulgas.com
www.craigslistclassifieds.com
www.delpilar.com
www.deportesdecontacto.com
www.enterpreneurship.com
www.freechristians.com
www.gujjar.com
www.hazelip.com
www.mahlstedt.com
www.shaftdesigner.org
www.thesportsbeat.com

Other certificates including the domain name shaftdesigner.org

(limited to 100 certificates)
prplittlerock.com
shaftdesigner.org
creditcheckcanada.com
shaftdesigner.org
www.sardiniahikeandbike.com
goldcareclinics.org
supraforce.com
healthstep.tv
www.voicebank.org
shaftdesigner.org
esportsyokohama.com
www.soundslikeme.bible
wizardsandwarlocks.org
shaftdesigner.org
www.292099.com
thingstodoinorlando.org
equalifefatlossity.org
www.halloween-party.com

Certificate

The complete raw certificate details for shaftdesigner.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OC+RY7UbkiyCp7wEGYm
RSZJUzeP0zadSOWOPSLzpoPZxV+UdLTRU79nZZ9oT4rz4peo4RjtMDrhnpsriIYB
o/++8jg/yZcdmDHB6LxP+WSGAkrAfVziS5xDTBNRgU4ivHpHk1y31Nzd+OlRjyw9
TZrUD4Kvkk3n+ZM/7cGZ/1ODd6JwoDp32I/PgBYHukDdXlD2v4g+xw8EpegPpC2P
7d2EyNiAxhmtegV5wjTlcIKCQ87DuhXMAnAhtoi4Sdox/Ozs6pVtQxUnhq3piAaA
x8BiHkw16vDN7a5jlZMZIuWRcbgZS5TUuqpy/MfeqVIvP7J0jVCKbctrv3lZfAlz
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307899364668172786887699249934839390061455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 12:27:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 12:27:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shaftdesigner.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29398111778648585670561037976494765494828574035526136777859721191625514189966893409987384118866145604150081633279419493253088061508465922692043960379583783016002359996264593506260117750118690317132612836511724128545839126390987408954881753957584424298312015642611364225052116855837787589635521819448228750233858712862675045104146978092693557984667481163620715734674543413703698730433023095878362121554188466610485395653694021185625665377299698676738111940081922079014132836266729730838223733148287372688627841014563622947392572499319411635952294517436515824570856191115533297840060311440326211178183118380469439787979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dfe9f9f1a013bd0ea86bd82997098e8720cd76b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2rx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dseminar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chomis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circodepulgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigslistclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delpilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deportesdecontacto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpreneurship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freechristians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gujjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazelip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahlstedt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaftdesigner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesportsbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2rx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dseminar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asterify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chomis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circodepulgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craigslistclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delpilar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deportesdecontacto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enterpreneurship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freechristians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gujjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hazelip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahlstedt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaftdesigner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesportsbeat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c7169ba6e000004030046304402205ba4f5ca021e6fc3473022cb35b0471fe17ae191021092e47af06b10b5c173e1022030a260bd49c846b1aa9a7ce18aca45d719c7cd5574277332b9974c61323ad0a6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c7169ba59000004030047304502203224b7effc2dc3a91b69cb9fb7ddbc1f6552a1ffb98b952cb4c4532d773377b4022100dcafb33d74401bf0af90b4767d8a21c506aa27b44178db19f95d1af5056f57e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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