artisan.ninja

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:bf:be:f4:94:67:4c:b0:f5:f7:77:8e:d4:bf:2e:8d:b7 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=artisan.ninja

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:bf:be:f4:94:67:4c:b0:f5:f7:77:8e:d4:bf:2e:8d:b7
Serial Number (int): 429350938731567123989455807736555947068855
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:17:f4:eb:17:00:9e:28:a1:81:32:ab:f2:68:99:d1:a0:29:51:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:2b:ec:15:22:78:d7:73:82:2a:47:eb:1f:85:d0:2c:dc:0c:e8:eb
Fingerprint (sha256): 9c:fb:99:75:60:b1:fa:0a:3f:4d:30:e8:53:92:d0:21:99:28:6d:02:60:a3:85:c9:90:d5:9a:6d:8f:e5:08:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate artisan.ninja

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artisan.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amazingwomenleaders.com
artisan.ninja
awc420.com
caminorealdetejas.org
comingdarkness.com
e-dollarpay.com
ecrier.com
enerpactoolgroup.es
fuck.vc
icannabis.org
localbusinesstemplates.com
lovemail.in
marketersadvantageprime.com
monroelawyer.com
mystic-oil.com
ocdstudy.com
p-c.co.za
sanantoniohomestore.com
stratfordbankruptcyattorney.com
swealthypodcast.com
texasnewhomesdirectory.com

Other certificates including the domain name artisan.ninja

(limited to 100 certificates)
artisan.ninja
artisan.ninja
artisan.ninja
artisan.ninja
canadaslandtrust.ca
artisan.ninja
artisan.ninja
artisan.ninja
artisan.ninja
genevaforvip.com.artisan.ninja

Certificate

The complete raw certificate details for artisan.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbUGNtBHaRxTTeyX8QgI
7H7+fbAPiNDVd2IradIy388C8D9sFgkGNmcfmGzH9ZLt8uwjzFpAxjoFz5eGF5eU
tSxTIp9Q6TRYoZCPjQEMDXXxZuhXX4Mv5jOB+gw3PR1WLBg1eVp11VnFWD1AiRMn
itqCxGpv+BT+gvaZlR7RdgmOBmh5dfxpZNFJHKFgBLVcMgoW1S+Fh22Eazr7+i/Z
Xo6/ab/bjzE+LtsMyIjoycmHJJ24TaynwsfpoGv1X/+A4+ypwWYR08xis7TsdkA9
zG0RmUgfQCbmHWoOafdwr8jLdBOOFnak9nrkrtlixnh8z9aeXxDy6d+QcRi6N8sA
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429350938731567123989455807736555947068855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 00:20:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 00:20:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artisan.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19403727056265794070871534239069135457290702786242296713180548620369278997790846170852658704786155989810480477482951638098877664135980131855150412572080521741185937664321698081466047902449104693664428002607569550390916704942523247604864351685604264450756239172336210418560114860620551118661127242507462023512626345303688480916218463398928123487267574109258281158071635540895634304973459957181828165924738492371769369207761672833135959041489703771837524679132276147296245982965733267820584936036773036545243368151198515317592373988994010780247975836959236187704765661650435545656704157550951595043754148278369725907087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f17f4eb17009e28a18132abf26899d1a02951d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazingwomenleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisan.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awc420.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminorealdetejas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comingdarkness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-dollarpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuck.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icannabis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localbusinesstemplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovemail.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketersadvantageprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystic-oil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocdstudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-c.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stratfordbankruptcyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthypodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnewhomesdirectory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db9cd06e80000040300473045022100aeadab5e0885e518cc8b1d366045a10ba700c58e910aeaf87d05391b9455699602205aa62fb14d948878ad746155e68100ecde008a186b88b25b5abafbaa3ba23c640075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db9cd08490000040300463044022072dbc22ce810012f3a9d1b9e46941d17c111818ad0f264ab0c2d7523843b520b022043d5d97c61d6296511a171da329e53c17b0bee064bdb61c6ffab8840e13f50a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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