safe.space

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:29:83:a8:90:a7:37:fc:fc:e7:ea:ea:e4:55:d6:a0:83 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=safe.space

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:29:83:a8:90:a7:37:fc:fc:e7:ea:ea:e4:55:d6:a0:83
Serial Number (int): 316517783194093841131943362381084376866947
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:f1:a1:96:dc:04:e9:ac:74:09:3b:6f:e2:5f:cd:9d:1a:e0:a0:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:13:4f:8e:05:3b:d9:a6:01:b2:32:e4:23:2b:ee:0a:66:2a:19:68
Fingerprint (sha256): 73:0c:11:52:1f:7c:59:24:8c:5b:cd:85:71:e1:80:ea:ae:54:49:f3:72:6d:d5:46:dd:a5:df:c7:e3:63:1d:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate safe.space

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safe.space

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

safe.space

Other certificates including the domain name safe.space

(limited to 100 certificates)

Certificate

The complete raw certificate details for safe.space in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA6Ipg6iQpzf8/Ofq6uRV1qCDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjAwMzQzNDhaFw0x
OTEwMTgwMzQzNDhaMBUxEzARBgNVBAMTCnNhZmUuc3BhY2UwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCrvYpePhwGfaW5bRuihTxltsgzdClLh7Mj9aJD
zYg0AQhUkGMxayIVACX6WJEOO+0Fy1EYThmsYXmz/Q/zwVWqDV5f6LEC4HugXrSw
GFZ9h0ukqz4r2fthrxQFoUBGOPbK0UAn1D6woXNbgyA3pev5Fn+j/3DpRanXi0Eo
8OUrQnecer9BW5sexSexeQmx0MRPpqeH1X1BvRNr+1padUlIzfN1V9hpm+rZFLs8
1cQ1t4MJxLeUg8Ug8UrFrn9NaMEuH/zgWtEl0xj/gg2YH6ZsG7hQVd8jZ1J7YzX9
+7m8DPZ+bxNx/o2zJyRBDsJq5LtK2DxsiT9bi9NuxGXAYWRAVzUdHqI8SOvdVm6i
eC5Qhp9oDm43VDpBlcjqgUlf7dT/sfBhK9Nj2dSJHn0Z7b8uhmdNk1N5eAcKipQ+
DA0AbfpIPwVBDVMI7Ul/oJnlEUGjsD32QDvb5GiAQs3ItRh80Bymy1hRBNhT6cRW
PGA0GN2sbgWjvfNWPDusBPQU2YOzrkZR3pyN00fomq1ycA8KGDVYQtmIPNrBsNTS
XgmrhJsQtHTiQdUyPMv3yHe2k3aVvuYti9dB6kaT4rCcP4Zgafp/+pLkA8Z3HTuX
vAzbvdrIc98KxtCMkZzTIqyPCzF+xH9TiAcf609dWG4a/rPA6diD1K7kpPXT2Zmu
yqniQQIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRU8aGW3ATp
rHQJO2/iX82dGuCgfDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnNhZmUuc3BhY2UwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDi
aUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWwNsXLeAAAEAwBHMEUC
IFKCgBxKT8GML1sVooojjqb9KgBp0r9olXv6wa77SYdWAiEAw3E7qP0GvYgIkxZU
EnyXvxodrWZAj8xs3O4imUWVb6kAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4
scdoVEvYjQAAAWwNsXLQAAAEAwBIMEYCIQDwgCe/mIrk5WPrDlhDU1Bx4L5HTMRs
aoFKXUQ8KppOUgIhAOcyUDXNckO46xPl89e081GGnGtEBxvDI0M4Kc0pdrazMA0G
CSqGSIb3DQEBCwUAA4IBAQCa1L5Xu3cgEPVpk0B8MSRAj9FAE0DgqE83UgwO3vHu
+XXBXFWrlKvwa+kcImNgWNxShMQHvaLeegF6iii7xDRh435eyMqCi+yUMsgZxGDv
yrbUFDETjGqMFrrrDROx5rpLZQweNlpba15n9PxSU//7xY7oCfpOLcEn/v5XGEIj
9YOWw7kJthRC77ajB8jotJPsdWG8TaQcFcJQUEfCWviuB8jpLjef6mChXhWOu76X
0qCw8+D76hSAtJs/LlHofLsbxh4+CPbowABYwsKZKtpZv79ELdxBV3AElb02Nozd
FjMyewcfTcOQkrn7pU7K1KxsYjBnF66wDq2Tn+9Htqi4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316517783194093841131943362381084376866947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 03:43:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 03:43:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safe.space'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700639673829212712401865037702354632121366562792714322654845888831382425796936637670522180497053751047706693261158677796031233245637029936904869316355903842469210510872205190699602944707241986561363817309753198987856440186785864156461854341719099868716668140191161063135772970949103143512231259514470960146841803573544236040109157634433555579001275197483662734397096846094720631838973193457612215032719880515874570614033326418067436508319774243078401610603160054747227897315724607759239648463804091508244459374467129646683999776757032452470351533593728034323221365612432760539084761071298539360836778755854215603877204893275154553422971054764705779003049034541574178776659822878488218868016691502353275285677615878418363635531912320526413403111812837342738614859366278817245457616577584729023178708368691040254001626623891514687756434126697576868647197536603530668938051386586436038084755484347723626200009271406344108489738955406454011534515827092847441214795377657340590192094947601247875590483165113507594586678383368134698281273096348897386310128371539218063125222702524111257639545667125602238839744298988028419506791386560007898117171653889755170865128631222685352954145817693346372124591969698497058672348774058878687156757057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54f1a196dc04e9ac74093b6fe25fcd9d1ae0a07c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safe.space'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c0db172de000004030047304502205282801c4a4fc18c2f5b15a28a238ea6fd2a0069d2bf68957bfac1aefb498756022100c3713ba8fd06bd8808931654127c97bf1a1dad66408fcc6cdcee229945956fa900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0db172d00000040300483046022100f08027bf988ae4e563eb0e5843535071e0be474cc46c6a814a5d443c2a9a4e52022100e7325035cd7243b8eb13e5f3d7b4f351869c6b44071bc323433829cd2976b6b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ad4be57bb772010f56993407c3124408fd1401340e0a84f37520c0edef1eef975c15c55ab94abf06be91c22636058dc5284c407bda2de7a017a8a28bbc43461e37e5ec8ca828bec9432c819c460efcab6d41431138c6a8c16baeb0d13b1e6ba4b650c1e365a5b6b5e67f4fc5253fffbc58ee809fa4e2dc127fefe57184223f58396c3b909b61442efb6a307c8e8b493ec7561bc4da41c15c2505047c25af8ae07c8e92e379fea60a15e158ebbbe97d2a0b0f3e0fbea1480b49b3f2e51e87cbb1bc61e3e08f6e8c00058c2c2992ada59bfbf442ddc4157700495bd36368cdd1633327b071f4dc39092b9fba54ecad4ac6c62306717aeb00ead939fef47b6a8b8