sculpit.space

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:e7:b9:ab:e2:50:30:1c:f8:80:f8:c5:f8:fa:0d:ec:d8 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sculpit.space

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:e7:b9:ab:e2:50:30:1c:f8:80:f8:c5:f8:fa:0d:ec:d8
Serial Number (int): 282402097905625554639584386478635035258072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:f4:31:6e:00:22:bc:6f:1c:05:61:5b:31:5c:53:28:d2:9f:55:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:33:a7:3f:ea:c9:3f:b3:77:58:d7:7e:f8:bf:e9:60:66:cd:bf:74
Fingerprint (sha256): 8e:69:a4:40:5d:2e:c3:aa:44:05:ce:be:e4:bd:e5:15:71:80:1e:56:9c:9f:bc:cf:09:9f:c8:0d:85:df:c1:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sculpit.space

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sculpit.space

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitchinbitches.com
buckscountyinsurance.com
catowing.com
charlotteeventplanners.com
cookecounty.com
desertairehomes.com
editorcompiler.com
icecreamshopnearby.com
mitulpatelod.com
mrharris.buzzank.com
nancyandpj.com
nichetraders.com
prompttrading.org
sculpit.space
shemalesexmovies.com
vitalicious.com

Other certificates including the domain name sculpit.space

(limited to 100 certificates)
sculpit.space
marsexpress.ca
sculpit.space
goldenoldies.ca
goldenoldies.ca
illuminatiow.com.sculpit.space
sculpit.space
dumptruck.ca
marsexpress.ca
goldenoldies.ca
dumptruck.ca
sculpit.space
goldenoldies.ca
potatostudio.ca
protec-security.asia
marsexpress.ca
webchannel.cc
sculpit.space
sculpit.space
marsexpress.ca
sculpit.space
dumptruck.ca
sculpit.space
ebaytes.ca
goldenoldies.ca
mannys.pizza
shepper.ae
marsexpress.ca
marsexpress.ca
goldenoldies.ca
marsexpress.ca
sculpit.space
goldenoldies.ca
marsexpress.ca
marsexpress.ca
sculpit.space
sculpit.space
marsexpress.ca
goldenoldies.ca

Certificate

The complete raw certificate details for sculpit.space in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iAFxK8zjbhEzxoQ/nfj
R6xxxqRIDtYc/+B5s2Cs2L/RQnw2fjgGxfR2MEFdYGKiEEDxhkZ9Sm1uzPF1Wfsv
wFqZ1UyGeZeBtk4LOlWxEPnAlnrSimqJg0YTfWRMMTtsW8lPh3lP9IAHBKD5TKsd
IlQuhLXfzkvhVLW7/cpq+5hTaorfaqtG1I8M6F770O/kyHVe5yxfzqjwqA5LjOqs
c0iunzD8CHR3uWasfhzAfCE/v7JAJJdNOrIyvvmfVNuMsGmSsqyLV15aWFW1+TeQ
b/OJ6j5FU7SG2AcaVIPEClalA5anzWGhfF2qUBUFpjEFSrEYMKAJY4k6CnXhsbHH
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282402097905625554639584386478635035258072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 13:35:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 13:35:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sculpit.space'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29050601041462428025449286320143004580761029184494269120249386675188527397113734915421187581220736976787669020751555733584489310554528796162343003551910174160043699558013121664467970476164173854086853625189141030139487875374287481429386561747770283272794784330448307856379232396579569834706554389470269033745804446153436775511381676134009592988802242641544870805999226938141274496923520885297640215887994883057484028979905801097194509575808852153955571344321483326196468643895366166015878850631294959486039619285594734333462370193281269485294068299371609663854336140783969908220324103359415168098046403778495034541919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8f4316e0022bc6f1c05615b315c5328d29f5512
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (321 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchinbitches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckscountyinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotteeventplanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desertairehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorcompiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icecreamshopnearby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitulpatelod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrharris.buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nancyandpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nichetraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prompttrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemalesexmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalicious.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7609b986000004030046304402204a4932ac56d21cf3620fce5ba54ab587b377ea19079a0b1120e8432d47503459022022628ce3b770a782e0a93a1393c05c6095cebda1e7a8fa7fd0ad9271ec5d385b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7609b9790000040300473045022100afb98e79337ee8c03344ff3afaa036a6bbb418d37a74bfac4b1de336cd11847c02205d239d8e7f2da8450fbb786814e0fbc1ee3898e7a4c076136df6bdc6789a7ed6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006603887d16d02c1fa2a3cd43929378482bcde93b558ddd0a329080cb6f4efa980f89307126cb8204cdc27d6ca385ed0f37e969219cf8888369c75341d1446593c9a5c032bf76567504acde424b739450b508f50af38cd21337f6d137aa07cb54a0f3c15982e2aacc45422b3e1fff84844abc2738ebb53c9dee55e1bb2f24351c7588e1bc81a009fe3051fe654f2381c732679d03ce55a8bd721a3b78357e77c57b31b4c5b9546bce45d68d21ec00cf4bbdcbaa706051d6151396f573681c6faa9aee13fee3ba45909d210d6d1fff19b0c945ad7e38c84bc8ddf1ef179a1e397b24d7b40195eb500c56b67cf1de9bc8550bde7c5fc324994154bf3ac1a4d0d7f0