www.magicselfandspirit.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:af:cc:70:d1:1e:e9:77:27:85:30:01:1b:f7:47:76:fc was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.magicselfandspirit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:af:cc:70:d1:1e:e9:77:27:85:30:01:1b:f7:47:76:fc
Serial Number (int): 346981408308455924018942687681962312169212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:2d:ab:71:e9:a4:8d:c2:b2:24:58:d0:f5:a0:b0:28:89:f0:f9:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:5b:72:c8:40:4a:85:85:60:2d:0d:9e:c5:4a:17:a2:b1:84:2a:5c
Fingerprint (sha256): 43:65:d7:f4:a5:05:d4:07:4f:de:2b:91:0f:58:05:36:3f:b0:a9:b6:ff:ec:b5:6d:76:e6:fb:2f:7d:e5:d4:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.magicselfandspirit.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magicselfandspirit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agilesoft.company
ashlysellstampa.com
luxurytampabayhome.com
magicselfandspirit.com
marker37.cc
marker37marina.cc
pixelmepink.com
snoopys.cc
spiotta.com
sunsetisland.cc
weblogixinc.com
wp.pixelmepink.com
www.agilesoft.company
www.ashlysellstampa.com
www.luxurytampabayhome.com
www.magicselfandspirit.com
www.marker37.cc
www.marker37marina.cc
www.pixelmepink.com
www.snoopys.cc
www.spiotta.com
www.sunsetisland.cc
www.weblogixinc.com

Other certificates including the domain name magicselfandspirit.com

(limited to 100 certificates)
www.idahohomerebates.com
www.luxurytampabayhome.com
www.luxurytampabayhome.com
www.marker37.cc
www.rossroofing1950.com
www.luxurytampabayhome.com
www.magicselfandspirit.com
www.ashlysellstampa.com
www.snaplitics.com
www.ashlysellstampa.com
www.snaplitics.com
www.snaplitics.com
www.jrhbuyshouses.com
www.magicselfandspirit.com
www.bluegoatroofing.com
www.weblogixinc.com
magicselfandspirit.com
www.magicselfandspirit.com
www.snaplitics.com
www.weblogixinc.com
www.marker37.cc
www.rossroofing1950.com
www.marker37.cc
www.luxurytampabayhome.com
www.magicselfandspirit.com
www.snoopys.cc
www.rossroofing1950.com
www.magicselfandspirit.com
www.weblogixinc.com
www.luxurytampabayhome.com
www.flatfeeidaho.com
www.expressapplianceid.com
www.luxurytampabayhome.com
www.snaplitics.com
www.flatfeeidaho.com

Certificate

The complete raw certificate details for www.magicselfandspirit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbm8I58tcdeY8ZU9mN83
q9dPqQS5XL45aBIhNSlO026k8G3r/G7XTpEX6uHxtWoKjsfHhKOZ9q8cw6akkUL2
qaGyp2YlZjTYrkXjYiM9X4eydAzQxFhJAo0NyNWSuAxLHjDAssh5vlychIgs5NQg
r0tsaKcqxr22gI9Q/1Jr9+osXRBSqSLkgTt2U/H3qt2xBSqCGx5UHnqiDmRmbpGk
gbE5oNXL4ozQxGZDjT/tpltyiezcczfAeNxLvFYwp6vwf0TkyXhLJle/lIkxQUQT
9n7b3/ngQ0KbZ3+i7H8K3ybXLaW5u2u8X4DMUnbWBi824KCrGockqQ831CmFsadL
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346981408308455924018942687681962312169212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 06:40:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 06:40:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magicselfandspirit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18396143521993235627814065157055345855184164437673738098862690278339397145132462970552868530987534884391218505535981591911295686240465538640429077386571351126581580884208434934688386971335765546258334676038340566368151616458564699178380791266783463371352356485715753716065465874357895338981422373072195136897503822072460643484041790106316260936323059411934110584867878565502098666704653596876454410367794759063670849878431962497768613448323411693243048771751822800219775053735167925230627449476686056696456996881848164953204157851366659750181448829726599689994340184681005499232558598656815364027347729184960970967843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							012dab71e9a48dc2b22458d0f5a0b02889f0f910
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (460 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilesoft.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlysellstampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxurytampabayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicselfandspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marker37.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marker37marina.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelmepink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snoopys.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetisland.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblogixinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.pixelmepink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agilesoft.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashlysellstampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxurytampabayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicselfandspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marker37.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marker37marina.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pixelmepink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snoopys.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunsetisland.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weblogixinc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ed50123400000040300483046022100be0590aa4d8cf44469a978d5e1b363c776012dfbcd926d274d1deac6745abdc00221008e3f62e3d11bb11fca01ab3709b1afa29e42c575166f6428a3a7bbf4b10a5f88007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed501233a0000040300483046022100fd81d410ff33ab48577fce2233a95028b710eba78dc3a1eaa0498cf5b5d7671c022100ffb844eb9ad8ab351180d586b18287ef38e8cd549919e9a48c6227d9ac0ebf71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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