www.craftycultures.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:5a:79:b7:d3:a2:82:77:78:f7:a8:45:8f:7c:99:65:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.craftycultures.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:5a:79:b7:d3:a2:82:77:78:f7:a8:45:8f:7c:99:65:4b
Serial Number (int): 321346816889354828707036161198920098735435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:50:62:18:da:aa:e4:c1:dc:38:4a:83:0f:03:3e:b9:01:fe:cc:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:1a:15:99:9d:fe:c3:3a:36:6b:a8:bc:75:90:61:86:45:f2:5c:63
Fingerprint (sha256): 4c:4f:a9:b4:04:73:ff:80:18:65:56:09:21:a1:20:06:3b:8f:4b:05:ff:f9:3f:af:ad:03:cb:aa:a7:f7:a7:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.craftycultures.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.craftycultures.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.craftycultures.co.za

Other certificates including the domain name craftycultures.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.craftycultures.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgISA7BaebfTooJ3ePeoRY98mWVLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzAyMzA3NTRaFw0y
MDAzMjkyMzA3NTRaMCMxITAfBgNVBAMTGHd3dy5jcmFmdHljdWx0dXJlcy5jby56
YTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJVXzRPGXNzZdBAEdAKU
i9ZxegZodxLL71PpgKvcV99LXCu2Cig5cnGr2rGQB8724oN6BvVBYzLRfkOtaOu7
SSKG/9uZMpfIuGp8GNqpcz4odPVEWLsMuDd3Jlq+UCe3yPfcyXEPS3FuZWZ+KTYz
OXOBQ5GLDu99J9TKVAnfhyj8ntfQxnpv6JmXzR90Bk7mSza92/wvIayBG8BuGrfK
Y6GtalHX3YOGRsLS9zetTGljI2q0MNkRy8ZqxrPDJcNXv2rjHIaK7Dxd5NmblGhV
wldAcY60lJRyVu/h1syk/c4oxC4hBPEwq462m6QzOLm96raRXZcAykCzNS68U97S
s4scI0CkD7WYDofb734bIwF/gjDCEENFKdV0oFae6ZCeA/bEvK1KD+35r+jqV3nQ
32O0gh6zIbW+ecxTpVWMUIdRF22vUd3pd6mZS3FZMitaZD8Lxw5f5DNjI5q5JWk6
YYvlmsHcT9Sq+qyD/W0MMt9qrUkHa33TbhVNmojWq6CqW7ZnjCfpwTMhL6bAz+5w
0dIPRy/eCsCM0ddFvijLfsX+vZkwY2gzXJ04Zv9ZbijGneAUQhDLxfRvC7dOf5Ho
Nnq+opUWzWyynnNHix+6GV9EvfZirE3K5cjejmVAThgAq94RQBt8t0gDX9ZoYSIe
rY6KuDNMJGi2/WPmYJWjYZVfAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFPhQYhjaquTB3DhKgw8DPrkB/syLMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LmNy
YWZ0eWN1bHR1cmVzLmNvLnphMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfj
meHQNKawqKqOsnMAAAFvWUfJ0wAABAMARzBFAiEAt6M94tqJZQQ8yJAGXWJEFCc2
5SGmGFjDKtBfVYBOwoUCIBYVn2CMqt0kF3K+gZIMm0BnWjQwxvq5oH8C20OPuMIh
AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvWUfJwgAABAMA
RzBFAiEA/kFocgkTjnECFS7zp2OLzhYS4aauBYcJpV9poPUQwocCIGafgoGkJ5AV
+irPDC8uoKWiRoglnKzEXD1FKvJuIevWMA0GCSqGSIb3DQEBCwUAA4IBAQB9UCjb
z06/oocrX7xubnvE1L4BMXqdraU8rNyQySsp9TGjBeFcO2Yqxjm8tCR6eEjjn7Pw
XpSuQ+DSJQTtd3GXhWfRtuba38oW/oMkF5VtguVnA5PVGjd0XZXiVMY9auh11w8F
H2P+uH11EzLzmTyaawdaHwRASC82xU7z6J7acHlbn7bMyMdRywpDwMvDbZUXJFqn
nGPVjrbsd1HVj5g7PwTnFFGy3T2Wya6KIgfSpcPdABf+09bz6EWkvor4NYzvx2QA
EMGcyZ7LQLPD5fGmfZ8Brh7YsXSvVH9agkLWQgcTFb8fJBU/hJn3lgdIo1FbAzzL
39NCt9PLgNho8q3e
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321346816889354828707036161198920098735435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 23:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 23:07:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.craftycultures.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 609266173820105386474980436705947613875351486945126666979517250400521809020979133406769281064296964710390831081158012807978365017351395292413863798045041851387709824637849195167010969627388457330445660756000300390890721581346927260786343847342839666483681135000730605616607230649934662543868126067229046000433520095028481854965389531565097482258567294218018564885119083365694912790132276826109836889887485924802862149354031100209328789435041634438241714417465498766366775278603477424647355031299858776256450264507790187761823075823582034241644625055026164177671904942371535416014699349829619785664046330488050510441766110961253996723190738820452981915665134384126436335344495792098668989875665123574843325345359833041044348180783494550306819844512058310959743473188504287312471285921175747904790791859865250799880579818541210895526571319887675712807480890672881332756816597813566831242038092398528564253806524247296124566476398333344248988897207993846852906178213630922559645056419098786501959398290672504190154570986181255024687893358560620561715712226561322526178167784019000237861316525543625255549411932631149634832357577842371450162807558585306437867629478817931627420056657404160870459605857868020283184214427262783417112171871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8506218daaae4c1dc384a830f033eb901fecc8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craftycultures.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f5947c9d30000040300473045022100b7a33de2da8965043cc890065d6244142736e521a61858c32ad05f55804ec285022016159f608caadd241772be81920c9b40675a3430c6fab9a07f02db438fb8c221007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5947c9c20000040300473045022100fe41687209138e7102152ef3a7638bce1612e1a6ae058709a55f69a0f510c2870220669f8281a4279015fa2acf0c2f2ea0a5a24688259cacc45c3d452af26e21ebd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007d5028dbcf4ebfa2872b5fbc6e6e7bc4d4be01317a9dada53cacdc90c92b29f531a305e15c3b662ac639bcb4247a7848e39fb3f05e94ae43e0d22504ed7771978567d1b6e6dadfca16fe832417956d82e5670393d51a37745d95e254c63d6ae875d70f051f63feb87d751332f3993c9a6b075a1f0440482f36c54ef3e89eda70795b9fb6ccc8c751cb0a43c0cbc36d9517245aa79c63d58eb6ec7751d58f983b3f04e71451b2dd3d96c9ae8a2207d2a5c3dd0017fed3d6f3e845a4be8af8358cefc7640010c19cc99ecb40b3c3e5f1a67d9f01ae1ed8b174af547f5a8242d642071315bf1f24153f8499f7960748a3515b033ccbdfd342b7d3cb80d868f2adde