theartofbigdata.com
Issued by R3
About this certificate
This digital certificate with serial number 04:e6:ed:1e:17:a1:15:a8:ca:4b:04:5e:a1:0f:29:2a:2a:e9 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=theartofbigdata.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e6:ed:1e:17:a1:15:a8:ca:4b:04:5e:a1:0f:29:2a:2a:e9Serial Number (int): 427029271402021472578609587726412581317353
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 33:76:50:2c:3b:6e:ea:41:83:63:99:e4:30:fd:a7:9e:2f:52:05:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4c:bb:1f:b5:bd:8b:27:d2:5f:c6:af:12:a5:81:c8:73:12:e6:a7:6c
Fingerprint (sha256): c3:29:86:eb:c8:4b:81:ab:f6:7d:c3:34:dd:b1:38:8c:bf:aa:db:99:59:34:80:4c:8d:bd:1b:6e:fd:6f:8e:5e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate theartofbigdata.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for theartofbigdata.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitrageatm.com
asicmech.com
beerfilm.com
blackjackblog.com
californialegalforms.com
constantinedumpster.com
djneedles.com
futureinterests.com
heritagemills.com
hometheaterdiy.com
ketobible.com
paulraff.com
rxsugarchocolatesyrup.com
terroristaction.com
theartofbigdata.com
thebloodsugarcoalition.com
warsawcard.com
www.ukenvelopes.com
asicmech.com
beerfilm.com
blackjackblog.com
californialegalforms.com
constantinedumpster.com
djneedles.com
futureinterests.com
heritagemills.com
hometheaterdiy.com
ketobible.com
paulraff.com
rxsugarchocolatesyrup.com
terroristaction.com
theartofbigdata.com
thebloodsugarcoalition.com
warsawcard.com
www.ukenvelopes.com
Other certificates including the domain name theartofbigdata.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for theartofbigdata.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgISBObtHhehFajKSwReoQ8pKirpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjYwNjQ4NTVaFw0yNDA0MjUwNjQ4NTRaMB4xHDAaBgNVBAMT E3RoZWFydG9mYmlnZGF0YS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDks8J9ij5GbzXBDbeZOzYwUZMABEX1NFACnXgQz5hE5RDRHjlK9YDlqAxZ 9lkxE9+4GWidsnvUACxBkRscZo3ClNRE9rJYSXtn5p6wq91nBl7HBfXM1TqA+HeT hjxwxH0a4d/QPn/wLFAcoWYdat4xob6r/gTGRRdFkWqv8/i55Ycz+b44Vvv93cy/ U/qECg+sEitvPFmsF6wCIes4v9l1pWLia8pT9w+BrmPhLvL2M2NbNQElrr1cl38D Q/r7dPFlSqmXUmPV+uQiR9AHxA3q/fZ7RQ9fN0hm0kVQ5kdjyzcBymjvOS6/ixXU wJng/gXJS2k4+F9LtjLCaERXF3xLAgMBAAGjggNoMIIDZDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFDN2UCw7bupBg2OZ5DD9p54vUgVyMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIBbwYDVR0RBIIBZjCCAWKCEGFyYml0cmFnZWF0bS5jb22CDGFzaWNt ZWNoLmNvbYIMYmVlcmZpbG0uY29tghFibGFja2phY2tibG9nLmNvbYIYY2FsaWZv cm5pYWxlZ2FsZm9ybXMuY29tghdjb25zdGFudGluZWR1bXBzdGVyLmNvbYINZGpu ZWVkbGVzLmNvbYITZnV0dXJlaW50ZXJlc3RzLmNvbYIRaGVyaXRhZ2VtaWxscy5j b22CEmhvbWV0aGVhdGVyZGl5LmNvbYINa2V0b2JpYmxlLmNvbYIMcGF1bHJhZmYu Y29tghlyeHN1Z2FyY2hvY29sYXRlc3lydXAuY29tghN0ZXJyb3Jpc3RhY3Rpb24u Y29tghN0aGVhcnRvZmJpZ2RhdGEuY29tghp0aGVibG9vZHN1Z2FyY29hbGl0aW9u LmNvbYIOd2Fyc2F3Y2FyZC5jb22CE3d3dy51a2VudmVsb3Blcy5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25 gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY1Evj9vAAAEAwBHMEUCIQCGM0iU ME4vUHXrn+rp33axTzYuZhO+9Dd9l1qAGuIZagIgEeoKAD/9mbi4BWWDievi5bua ZN5iQOQtk2G43DKqYAcAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1 mwAAAY1Evj+dAAAEAwBHMEUCIQDEuEbQYAv4HLP2tPkWxnr+f47aXzgrajYC4zXx znZy/QIgR/Irt09H0Zs9to4Qnw61yMjyREAv6t8Erl28oh6usp8wDQYJKoZIhvcN AQELBQADggEBAGcgdGWHqCUhUT4l5taU9V9t6xsSKCHIzqyDxJmsRpw2vUmpkWcx HLAs5e6GKz6aqctvJPowtWMwgaWCQcxpT6iu5vAu5G7uKJwpMtPq6fQnFVptR7WM LTnC9fk/H/yHzn+MLOSHSVev5GFCGPeoQWzyr8PRbsTPvmjbSFqYdEeoziqvNb3G DRw/QBd9SBLhOIpRk2P/9qXvnyuaIvRkrhHhnk3gJ6q2DykOQSlON6t0uo6ICE7W sui++9fMWD5Sgyi5Zs9FV3qrS0xn9bulnPBLCwnE/pIIK+pnE6UgC5YOF7b2SDwC DSOtHpafjiNYSEGEWkp9n7nmB312vxnsd00= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LPCfYo+Rm81wQ23mTs2 MFGTAARF9TRQAp14EM+YROUQ0R45SvWA5agMWfZZMRPfuBlonbJ71AAsQZEbHGaN wpTURPayWEl7Z+aesKvdZwZexwX1zNU6gPh3k4Y8cMR9GuHf0D5/8CxQHKFmHWre MaG+q/4ExkUXRZFqr/P4ueWHM/m+OFb7/d3Mv1P6hAoPrBIrbzxZrBesAiHrOL/Z daVi4mvKU/cPga5j4S7y9jNjWzUBJa69XJd/A0P6+3TxZUqpl1Jj1frkIkfQB8QN 6v32e0UPXzdIZtJFUOZHY8s3Acpo7zkuv4sV1MCZ4P4FyUtpOPhfS7YywmhEVxd8 SwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 427029271402021472578609587726412581317353 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 06:48:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 06:48:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theartofbigdata.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28870976357945198286901123374553534748871056673594860232481578100929145293938405854211128516439534187968616099275963731175753858447758137741227916715497384789170404485923732109323647218663463555348310324314750905899547854617819098863979186890105927569820681817244576074098280137215067056070221939568949115058917346349332420057700451626464478388678051553669724279229839798413005967092852077353829736483178005809237725255201270588800412470538366702148955753626520474586067588613137073522937434902469417524371359711419360890127691442649873719152035390856972883129344874045799547230348435045628099785353932465648944249931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3376502c3b6eea41836399e430fda79e2f520572 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageatm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asicmech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beerfilm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackjackblog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californialegalforms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantinedumpster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djneedles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureinterests.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagemills.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometheaterdiy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketobible.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulraff.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarchocolatesyrup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terroristaction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartofbigdata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebloodsugarcoalition.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warsawcard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukenvelopes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d44be3f6f000004030047304502210086334894304e2f5075eb9feae9df76b14f362e6613bef4377d975a801ae2196a022011ea0a003ffd99b8b805658389ebe2e5bb9a64de6240e42d9361b8dc32aa6007007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d44be3f9d0000040300473045022100c4b846d0600bf81cb3f6b4f916c67afe7f8eda5f382b6a3602e335f1ce7672fd022047f22bb74f47d19b3db68e109f0eb5c8c8f244402feadf04ae5dbca21eaeb29f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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