sculpit.mobi
Issued by R3
About this certificate
This digital certificate with serial number 03:06:81:19:e7:07:ae:ee:95:ba:da:27:b4:08:97:9a:cb:88 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sculpit.mobi
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:06:81:19:e7:07:ae:ee:95:ba:da:27:b4:08:97:9a:cb:88Serial Number (int): 263550156901529442643216371220305007004552
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:10:f2:5b:2f:4f:7e:95:f7:3e:d1:94:5f:04:3f:5e:15:d6:3b:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 47:fd:82:74:13:94:33:0a:96:8f:71:96:3d:f4:aa:17:2b:36:40:97
Fingerprint (sha256): d1:f4:a4:18:10:73:42:53:82:ce:33:fd:40:9b:db:2c:89:0c:34:51:cf:7d:2b:19:05:31:ad:78:2a:f9:5e:39
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sculpit.mobi
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sculpit.mobi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dumptruckcompany.com
galbeno.com
healthstaff.com
itawambacounty.com
koromba.com.internationalwildlifemuseum.net
morabba.com
sculpit.mobi
sroproductions.com
thecakecase.info
vegan.ngo.carcey.com
xinhxinh.xyz.nubilescams.com.wabashacounty.com
galbeno.com
healthstaff.com
itawambacounty.com
koromba.com.internationalwildlifemuseum.net
morabba.com
sculpit.mobi
sroproductions.com
thecakecase.info
vegan.ngo.carcey.com
xinhxinh.xyz.nubilescams.com.wabashacounty.com
Other certificates including the domain name sculpit.mobi
(limited to 100 certificates)
www.lorainflea.com.sculpit.mobi
hugabee.ca
exoniaconsulting.ca
playgolf.club
sculpit.mobi
ebaytes.ca
sculpit.mobi
promeia.de
impossible.ca
washingtongirlsbasketball.org
promeia.de
playgolf.club
hugabee.ca
hugabee.ca
promeia.de
sculpit.mobi
grocer.cc
cars101.life
ebaytes.ca
checkout.vc
bud.world
impossible.ca
jenksamericatoastmasters.club
playgolf.club
impossible.ca
sculpit.mobi
stemsterlingranch.org
impossible.ca
hugabee.ca
ebaytes.ca
sculpit.mobi
impossible.ca
ebaytes.ca
ebaytes.ca
impossible.ca
promeia.de
mindmap.me
hugabee.ca
exoniaconsulting.ca
playgolf.club
sculpit.mobi
ebaytes.ca
sculpit.mobi
promeia.de
impossible.ca
washingtongirlsbasketball.org
promeia.de
playgolf.club
hugabee.ca
hugabee.ca
promeia.de
sculpit.mobi
grocer.cc
cars101.life
ebaytes.ca
checkout.vc
bud.world
impossible.ca
jenksamericatoastmasters.club
playgolf.club
impossible.ca
sculpit.mobi
stemsterlingranch.org
impossible.ca
hugabee.ca
ebaytes.ca
sculpit.mobi
impossible.ca
ebaytes.ca
ebaytes.ca
impossible.ca
promeia.de
mindmap.me
Certificate
The complete raw certificate details for sculpit.mobi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAwaBGecHru6VutontAiXmsuIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTMwOTAyNTFaFw0yNDAzMTIwOTAyNTBaMBcxFTATBgNVBAMT DHNjdWxwaXQubW9iaTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPDB kh5lH/HsTtgJw+kVrkS6SrZdDQdQmuTRrP5IfFeWfLRuihkP4G1e7UwKxytX/j4K orZlqbMql4uUtJKrjedXW7DbnsFdZN6LpTedazWHjYX+nDCtnS1YGNQRBLJWXfmW x7IQY/b/+DTaVBHLPSHADhG2VtONTRMwmxuz+54xmMDU6FvQ0vXFXjT7lbB2WnlN 23SMBLQZto8SxabX/ezXu+1d43y9UmsiLQBUwn7UOPPSnLvzVN7t4l4M0XztTSqS OZ5zdPYGTsFSYyRvxbDrpuoP2GxQT+jyQXieaFjmogVN2Czcghuq3wWCXqF8DJB8 /Um0hB1Ll4ajemNLyT8CAwEAAaOCAv8wggL7MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU2BDyWy9PfpX3PtGUXwQ/XhXWO1wwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggEHBgNVHREEgf8wgfyCFGR1bXB0cnVja2NvbXBhbnkuY29tggtnYWxiZW5vLmNv bYIPaGVhbHRoc3RhZmYuY29tghJpdGF3YW1iYWNvdW50eS5jb22CK2tvcm9tYmEu Y29tLmludGVybmF0aW9uYWx3aWxkbGlmZW11c2V1bS5uZXSCC21vcmFiYmEuY29t ggxzY3VscGl0Lm1vYmmCEnNyb3Byb2R1Y3Rpb25zLmNvbYIQdGhlY2FrZWNhc2Uu aW5mb4IUdmVnYW4ubmdvLmNhcmNleS5jb22CLnhpbmh4aW5oLnh5ei5udWJpbGVz Y2Ftcy5jb20ud2FiYXNoYWNvdW50eS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB2/4g/Crb7lVHCYcz1h7o0tKTNuync aEIKn+ZnTFo6dAAAAYxioRCTAAAEAwBHMEUCIQD6OI5OvuRF1UW9UOvcBrVEdflr 28GacMrK+yhEFKFs1gIgCfojNkyVJ0UAjALQ8gmnErW+ReN4opq0Vd7n80EiO48A dQAp0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAAAYxioRDEAAAEAwBG MEQCICGWpnEogPsYFH/lBOmduv48LahTHzpPJQlqlqX7jNCPAiBZZOh3BnEzi1jB FB/Zj4LXgWITrvGpaLFGwSitaFPJszANBgkqhkiG9w0BAQsFAAOCAQEAAQWsbK6L 7TYaEfmp7xULWmk2kCiUrfT+I+8wCXeQky7PsM4Gvi1iRMY53Ub9nBmuyU0DfFd0 d4tplOokEFe/NoROo6K9uuOgg9dd2YgNjqrHS8RO9YI39zvm6tHatKiAUJ2lNOqn p3zC1ND/gGVAptYZA0qvouKt8dphimw2SnlBr5kqpNJGrIbFs+B3/bA4HHhN3hRz CFNpMH7Ooa4W0hVxGAvLZ664MQ+Nr9gVHaRM+kXl9jmhAFoSq/F1ms/7akqYwGFV ztDEWw+wcbGeuO0fLRRWfCnHE8Z2DkZ3JVRP45eKeUZwM6tRK2tQZOkNrDikL4QY a+lsL8xsG7GK3w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MGSHmUf8exO2AnD6RWu RLpKtl0NB1Ca5NGs/kh8V5Z8tG6KGQ/gbV7tTArHK1f+PgqitmWpsyqXi5S0kquN 51dbsNuewV1k3oulN51rNYeNhf6cMK2dLVgY1BEEslZd+ZbHshBj9v/4NNpUEcs9 IcAOEbZW041NEzCbG7P7njGYwNToW9DS9cVeNPuVsHZaeU3bdIwEtBm2jxLFptf9 7Ne77V3jfL1SayItAFTCftQ489Kcu/NU3u3iXgzRfO1NKpI5nnN09gZOwVJjJG/F sOum6g/YbFBP6PJBeJ5oWOaiBU3YLNyCG6rfBYJeoXwMkHz9SbSEHUuXhqN6Y0vJ PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 263550156901529442643216371220305007004552 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 09:02:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 09:02:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sculpit.mobi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30392646499236735501354945042608268685343767250103587419600655555552686604745393490661577431951720502085342771610444013793737678155438705038171379197160099124248785776499300683192763923675166611854802061372331782907650209480524262159271229556496334947955428778144844339110463515210220337024872762961434147353942000778154887639617493041714694391553611687413298214903336937277665702344348472850811242171214456855823199168768044281590126696842750876521924993275951404933105097042863673372002613899796211200659000787058977498243779891211221235227916876106217326001660495180563579236669629956812558381439784797985944881471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d810f25b2f4f7e95f73ed1945f043f5e15d63b5c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptruckcompany.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galbeno.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthstaff.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itawambacounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koromba.com.internationalwildlifemuseum.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morabba.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sroproductions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecakecase.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegan.ngo.carcey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xinhxinh.xyz.nubilescams.com.wabashacounty.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c62a110930000040300473045022100fa388e4ebee445d545bd50ebdc06b54475f96bdbc19a70cacafb284414a16cd6022009fa23364c952745008c02d0f209a712b5be45e378a29ab455dee7f341223b8f00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c62a110c4000004030046304402202196a6712880fb18147fe504e99dbafe3c2da8531f3a4f25096a96a5fb8cd08f02205964e8770671338b58c1141fd98f82d7816213aef1a968b146c128ad6853c9b3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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