www.ubiik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0a:7c:1e:76:e6:b8:b1:0c:e0:03:33:d0:1f:d0:fc:7e:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ubiik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0a:7c:1e:76:e6:b8:b1:0c:e0:03:33:d0:1f:d0:fc:7e:d8
Serial Number (int): 352016949848237426725854078252900689936088
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:fd:45:42:57:9a:40:12:55:bc:2b:49:f6:a2:54:83:97:a6:fa:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:25:9a:f1:b6:ca:70:fc:3e:57:8e:e7:a9:e5:5d:da:d4:9e:64:ec
Fingerprint (sha256): 93:84:5f:39:07:0e:8b:04:a3:fb:7c:3e:48:10:0f:2c:22:c7:4c:3a:10:e9:62:c7:2c:02:07:b1:30:fa:72:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ubiik.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ubiik.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ubiik.com
www.ubiik.com

Other certificates including the domain name ubiik.com

(limited to 100 certificates)
tatung.naomi.ubiik.com
static.dpsplus.app
www.tavernofcho.com
cepapi.com.br
*.ubiik.com
www.ubiik.com
ubiik.com
demecko.com
sdk.ubiik.com
ubiik.com
www.ubiik.com
maximemivilledeschenes.com
www.sendoofy.com
ubiik.com
ubiik.com
ami.ubiik.com
www.ubiik.com
ubiik.com
yjk.im
get.edeyshop.com
www.ubiik.com
sdk.ubiik.com
www.ajojose.com
www.naomi.ubiik.com
lifology.me
ubiik.com
etc-taiwan.web.ubiik.com
carahiggins.com
www.drtalhouarne.com
app.pakulih.com
www.wallwhiteweb.com
www.ubiik.com
ubiik.com
www.pikinsabicode.com
*.ubiik.com
dienstplaner.app
philtracking.com
www.3d-glass-ui.com
ubiik.com
www.ubiik.com
www.sendoofy.com
www.ubiik.com
www.ubiik.com
ubiik.com
georgechios.com
www.ubiik.com
app.iouapp.org
admin.greenschools.app
touch-pet.com
liveroute.app
*.ubiik.com
wpkit.ubiik.com
netwizard.web.ubiik.com
www.webcat.app
nurse.thestories.jp
static.dpsplus.app
ubiik.com
www.merklewood.com
topbalihotels.com
app.marcadinhu.com.br
scratchnwin.flycowgames.com
www.mygame.page
*.ubiik.com
www.ubiik.com
ubiik.com
www.kashf.online
ubiik.com
m.lasvegassportsbetting.com
www.lacandonia.com.mx
www.ubiik.com
www.repzoapp.com
wpkit.ubiik.com
x.orcacke.com
ubiik.com
ubiik.com
www.therebbesohel.com
portal-uat.medcury.health
tatung.naomi.ubiik.com
www.cruiseshippictures.com
paradisdelmar.porcelanosapartners.com
www.ubiik.com
ubiik.com
ubiik.com
sdk.ubiik.com
www.bladaanbieding.nl
sdk.ubiik.com
www.drtalhouarne.com
form3.argos-solutions.io
bo.stag.360concrete.app
sabercompartido.com
wpkit.ubiik.com
ubiik.com
www.naomi.ubiik.com
ubiik.com

Certificate

The complete raw certificate details for www.ubiik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DjDHWz78viC5HWQZbW2
Z3mRnQVm5Fl19NDul7szZ2KVNweVuvf/92ZRU/czH+rxYMbSApnHc9JKJ220GM5x
fiFEQG8tbGpsCH9vhPcNodYdrKDq3Sjtoc4TOFX55GXUOBJ1H0SbbX2+kcynVHEf
WH2mD4sQTzA6KBxKr7rJAodsVZ5nRQFh/IJmZGRofgSEcD7pNHozxgK0lBeeI9aB
zxFI9A+oQQgAGD/FGBSkoka8GFnVq9+mkh1hQvJKVd9BN9llELpzNZPYA5LTM84O
xKNsuVmR5wMhek8QJcgFp9f6OHs7qhhF0GcV4ZmKd9+hEQ4kUv1GGfYTzX3VCGkB
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352016949848237426725854078252900689936088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 21:19:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 21:19:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ubiik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28305370780534107423796621160454170503384790846549424237277002731098551132351514869527577706449529555530317840887217747264910481391061705542677351940803278808912593929858217145692787179507649534417518344406388915012396699374829649879150332890587704009726099482520913724383619149700383755104567457695036745028604751309434198440531314894837015742636841313637312759942649030795808436776998781956081099195489980108291697108066746560916110983595840845619979534790930542175551142013145817318996874211788464243762228282288468629621451639258577040702956764275409184698677994577828322478652796713076913741438707169470232199637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddfd4542579a401255bc2b49f6a2548397a6fab8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubiik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubiik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001643e2e6f6900000403004830460221008b784f58e2ce7616896260cb11e96c4e7f12e996aa752a24604d4a95547a85da022100d0429ee86be98274bd18806c59de46bd1470c6481fa4c5b78ac64e442342329d007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001643e2e6f8400000403004730450220789c992911862ec9cdd283f883e8fc3b6e778c2e304db8fdef6d4862255b6410022100e340d9125b544cabdd812cd561e615f9ab3fa4c146763afbed741639a15ceead
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084e2fb8f92f49f252215882f985ec0ce63cce793aa9f2cdadedfa3a804a2845bb9c31363b3744d51ab0ec1105adb9f0411ec67ca3ec24730e8507f067706e6017e4e79116eff91deecb5aee5e632bb8716a2450a51867fe8d3d06020db5ef45d49b492e12be3df0a3a9221d06e639d66e83518ffdead5dc84a79af28aa8c88627cfd89bdbc5a2a8a9ea27c4b9f765a914e2fc31e910acec75747a0af7d8ec0230bbc8884bb5e9a0682b958feb6dead3f453e1253eed5548a828ae308981103ac8dcb856ee9dad902648dbda141df18dcd346e116d8cbddd94d37e2c133d60d6f719e60b59d952b948cf1843a1f8f7d3168ec1a188a3f73ad21f5f62006bcbf0a