www.sculpit.sculpit.xyz

Issued by R3

About this certificate

This digital certificate with serial number 03:7f:be:43:47:0f:89:11:a7:5c:3b:cf:1c:ee:fc:18:de:7f was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sculpit.sculpit.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7f:be:43:47:0f:89:11:a7:5c:3b:cf:1c:ee:fc:18:de:7f
Serial Number (int): 304805621038610505734426744212602341613183
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:99:6c:11:18:a3:77:df:f8:20:14:ea:cb:6e:d2:6a:6d:7e:68:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:9e:8a:f5:49:b5:e7:4e:d5:be:cd:ff:e4:04:35:25:a1:f7:90:41
Fingerprint (sha256): ed:b4:eb:41:a4:9b:bf:19:a0:13:5a:6e:2b:5c:bd:b1:79:5a:06:9d:62:8d:8e:a0:40:f0:e3:5e:72:51:53:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sculpit.sculpit.xyz

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sculpit.sculpit.xyz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sculpit.xyz
*.zinnia.holdings
sculpit.xyz
www.sculpit.sculpit.xyz
www.zinnia.sculpit.xyz
www.zinnia.team.sculpit.xyz
zinnia.holdings
zinnia.team.sculpit.xyz

Other certificates including the domain name sculpit.xyz

(limited to 100 certificates)
abc3.com
gentlesforcongress.org
ontariowine.com
aquatic-tribes.org
xocognac.com
trade.xyz
*.sculpit.xyz
portland.world
xocognac.com
disasterroofing.com
capacify.com
grancanariavilla.com
allanblock.ca
scout.media
allcitybailbond.com
theconsumersactionplan.com
gentlesforcongress.org
www.sculpit.sculpit.xyz
solarpowering.com

Certificate

The complete raw certificate details for www.sculpit.sculpit.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO8HNZIPs0C7bEimIMGr
IwTD4FlbJebfN9+5xnD8gjibXOZSb2KwrwlQmHzzigDWrCMtyG9eCPvQQ+AnjT8U
TvbwOWh0iXHcXE09B/VVhw1Uit8YNWPgewBx66I1TmYgd+nC1P4r+5tM1TcxMqFc
Lj6GcaGNMr/pBg68O17pe45CHjBK86XPJHjYnZ4/Ul+YD39MBiGE9QFsIdnYgUif
kd9vzyCeIYqoZmc2py1rtBcgrPnjs70dspNLusReVmZg3Ngu2hkDstdVxjM0ez5M
YOAB6b6XtgZzeCZ7MVLEcIQsVV0l1f5KbL2ME8fmXiiyhwID0v4ZhJ5nAvCGIxA2
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304805621038610505734426744212602341613183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 19:05:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-02 19:05:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sculpit.sculpit.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21325904413616114502092174407653223883543044689363879060515949923289963434967274166149953985271191372350227022782537158713266932765635423352412897041836534912326646547070734964381294144288990503114515215505021074996508287344441938360601219623074703873035164805225514929722432410489209188769933081260536694803883677986639790913736865473586507455755888323593264708111977813028116783241304967358160969624257938096025552980248507095621690641916318503733981491257322447273775269253714118184695006671030813754674381591523166656206187496972969908519307363919712818807574528554425616314035755285538744529010993378578593232529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb996c1118a377dff82014eacb6ed26a6d7e68e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sculpit.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sculpit.sculpit.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinnia.sculpit.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinnia.team.sculpit.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.team.sculpit.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f45366ccd0000040300483046022100ab4cf1717af6ff76ad2fac6a22a4cd1304f97d5ef3e1d67e51a792b76447aeb9022100efbd8a9d6fe9d6a0c1b8dd5e8cd21321638ba49e192e175cf447b95aed9a33f900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f453670bd000004030047304502207ba649afbd903d965fc43a045a9906480e2ff1cac919d771c3f8c0dcdb5a8691022100dcafee5909d22c2465f589e7fee6a573ccbb2b592c92d789a2501faa38cb89bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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