cruciverba.co

Issued by R3

About this certificate

This digital certificate with serial number 03:58:21:91:48:fb:b0:aa:9b:d3:ec:73:18:a0:80:61:88:ed was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cruciverba.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:21:91:48:fb:b0:aa:9b:d3:ec:73:18:a0:80:61:88:ed
Serial Number (int): 291326324971503150367455242829028086876397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:47:82:91:50:14:50:3e:d7:46:98:f4:5c:79:1d:0b:a0:bd:a8:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:a5:c0:bf:e6:3c:ea:22:f8:b9:1d:cd:09:cb:1e:5d:6b:36:f3:41
Fingerprint (sha256): 76:72:64:ad:fb:71:86:dc:3f:9f:83:eb:bf:ea:92:9e:92:13:73:35:6c:fe:83:a9:9b:0c:9b:77:cf:16:fa:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cruciverba.co

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cruciverba.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baostone.cn
bergov.com
canadabackcountry.com
cruciverba.co
decoys.in
i2.design
jabbery.com
legendaryhospitality.com
longhorndentistry.com
odyssey.design
sewbody.com
suppressorreview.com
traghetti.co
webege.co
weddingtheory.in
www.baostone.cn
www.bergov.com
www.canadabackcountry.com
www.cruciverba.co
www.decoys.in
www.i2.design
www.jabbery.com
www.legendaryhospitality.com
www.longhorndentistry.com
www.odyssey.design
www.sewbody.com
www.suppressorreview.com
www.traghetti.co
www.webege.co
www.weddingtheory.in

Other certificates including the domain name cruciverba.co

(limited to 100 certificates)
www.scrain.com
netsmind.com
cmsinbox.com
www.coingiftcard.co
www.massa.co
www.vzrncz.top
hurleyrealty.com
www.magiccircle.co
masterweapons.com
cruciverba.co
cruciverba.co
professionalhomeservices.in
cruciverba.co
kushalnagar.in
www.ottica.co
ooodirect.com
69490.com
www.borgarotorinese.net
www.cruciverba.co
www.cruciverba.co
tamaracrealestate.com
www.breastenlargements.net
btccanada.io

Certificate

The complete raw certificate details for cruciverba.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ddrbZ9kVpYpQ2Pw/c2
hqbIXk93VpO4VVFf/vVtd8Y1PkXGB8SE1awOGiM/adH0z0ElaZlot+8JJMmw2/Ba
G1K4AH07oMcQLoQJ1IANxEdoH74C/62ub2HtwZyhG2+wjO6hul34czuLwdGmhCKr
IfljTEAz5l0pysYmCsCjts8xMBJGyVrNj98ld1kBs9G0O3aL95cRJkcXcb14/gKV
DGQq+V6+J8H71zuOLZ0Rdmq4eH80X+frkvNr/imkwR6ktCrXTnZjWsVPrx7bFiSI
y5FmDmism30wmGpg3WrU0U61G5oPc4w+AFBwo69UWli6FZFTCuJbpgkNKjyYKf3a
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291326324971503150367455242829028086876397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 06:05:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 06:05:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cruciverba.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21180107934451928927280035690270057031462186258750961163763081694694802214588057304280308637581533972131815726666099945988131374722052142468212038436629649141561966072054679196891251951993482643224812135723296755464488874236395863992535707243809466414529845153125405438458681842923752236137826331750157596075984091532730028954652771415722173742597811725266496036501061447220724369075340450301791942627138069450833877517877857902494388221764636353463652365843847941885136404823505658339277660841993477697338950595108425856838252647488787482220234423276876271621637366699147857045097544889290478984227090103609266657899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d44782915014503ed74698f45c791d0ba0bda800
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baostone.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadabackcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruciverba.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoys.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i2.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendaryhospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longhorndentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odyssey.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppressorreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traghetti.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webege.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingtheory.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baostone.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadabackcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruciverba.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decoys.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i2.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jabbery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legendaryhospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longhorndentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odyssey.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sewbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suppressorreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traghetti.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webege.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weddingtheory.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189585dfff200000403004730450220384f868cbc22b6f08309725d3ff3509f98c2a0d912d6e942ba9625d651cf291b022100db03cdb68529f3de24f42d16de3b19e041784c2239993aaf4ee2db31be2bab470076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189585e00010000040300473045022100945a9474ebc32a6e477590d87736e178d0ca84e98dc60109fa650ed4f4ddc2e802203845b37061ca56761be521901dc1ddab7c84e667b3edc7c5bd0853d55ac78896
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005aa28b06e6970e76ec80536d353248fdf0d887992ad362739e724895cadab4a4416fa702e744884e598351269b1e4053ff028269e89236f6a8ef7b0894d438addca25a364230b041ddd1813bd04a7c625928184d272e6e6243acb72731b00eabf80fa25ca80a52e6e8f314ddff3f540e6971fe45ea9da43d073967b101e2d08b46b1f4a0186af19de524f9a20af219bfa809b94b11c9023ee7d3ea2e3eb178dd2cb348f92a38ea998c968fcd876341ae29cacf32c445209a026a4760719b1db25d4f71fb97ddcc34b0486a8228c2a4499dfddfb616f23187cf321402f870c8a7bb5c57eda7811a773fa5c8ac6faf2882d3d8db1a420500023ac974b213c6ce41