bks2.ucarecdn.com

Issued by R3

About this certificate

This digital certificate with serial number 04:26:ca:66:33:00:8a:3d:97:ac:10:78:c1:be:2f:a5:38:8b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bks2.ucarecdn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:ca:66:33:00:8a:3d:97:ac:10:78:c1:be:2f:a5:38:8b
Serial Number (int): 361648908373910444935165411768032412645515
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7f:b9:9f:fc:5c:82:9c:88:12:b9:6e:6e:76:74:ff:27:e2:b3:ae:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:79:f3:c1:8a:13:01:fc:a5:84:d0:52:a7:3b:8f:3d:1d:4a:c0:41
Fingerprint (sha256): f1:6e:72:5c:c6:ca:dc:57:b1:0f:98:89:77:80:3b:f5:6b:ef:7b:bd:77:f0:f3:a8:0c:f0:ed:0b:65:77:6c:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bks2.ucarecdn.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bks2.ucarecdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bks2.ucarecdn.com
ucdn2.brain-valley.com

Other certificates including the domain name ucarecdn.com

(limited to 100 certificates)
img.binds.co
robots-max.uploadcare.com
cps6.ucarecdn.com
ssl4004.cloudflare.com
cps6.ucarecdn.com
ucarecdn.com
cps13.ucarecdn.com
sni28546.cloudflaressl.com
cps2.ucarecdn.com
ucarecdn.com
cps13.ucarecdn.com
cps7.ucarecdn.com
robots-max.uploadcare.com
cps7.ucarecdn.com
terratest.ucarecdn.com
cps13.ucarecdn.com
ssl4004.cloudflare.com
wonka.ucarecdn.com
cps0.ucarecdn.com
cps10.ucarecdn.com
cps9.ucarecdn.com
ucarecdn.com
sni133227.cloudflaressl.com
ssl4004.cloudflare.com
cps4.ucarecdn.com
indgur.ucarecdn.com
wonka.ucarecdn.com
wonka.ucarecdn.com
loupe.ucarecdn.com
terratest.ucarecdn.com
cps5.ucarecdn.com
cps5.ucarecdn.com
ssl4004.cloudflare.com
cps3.ucarecdn.com
robots-max.uploadcare.com
cps10.ucarecdn.com
cps10.ucarecdn.com
cps12.ucarecdn.com
indgur.ucarecdn.com
cps3.ucarecdn.com
ucarecdn.com
cps3.ucarecdn.com
sni133227.cloudflaressl.com
cps5.ucarecdn.com
wonka.ucarecdn.com
cps0.ucarecdn.com
sni133227.cloudflaressl.com
robots-max.uploadcare.com
cps3.ucarecdn.com
bks.ucarecdn.com
ssl2338.cloudflare.com
wonka.ucarecdn.com
terratest.ucarecdn.com
kx.ucarecdn.com
indeedfeed.ucarecdn.com
terratest.ucarecdn.com
sni133227.cloudflaressl.com
indgur.ucarecdn.com
ssl4004.cloudflare.com
ucarecdn.com
indeedfeed.ucarecdn.com
cps13.ucarecdn.com
cps5.ucarecdn.com
sni133227.cloudflaressl.com
cps12.ucarecdn.com
cps10.ucarecdn.com
cps6.ucarecdn.com
loupe.ucarecdn.com
sni133227.cloudflaressl.com
terratest.ucarecdn.com
ucarecdn.com
ssl2338.cloudflare.com
kx.ucarecdn.com
cps4.ucarecdn.com
ssl2338.cloudflare.com
cps8.ucarecdn.com
ssl2338.cloudflare.com
ssl4004.cloudflare.com
ucarecdn.com
huge.ucarecdn.com
loupe.ucarecdn.com
staging0.uploadcare.com
cps0.ucarecdn.com
cps0.ucarecdn.com
ssl2338.cloudflare.com
loupe.ucarecdn.com
loupe.ucarecdn.com
cps2.ucarecdn.com
img.binds.co
sni133227.cloudflaressl.com
ssl4004.cloudflare.com
ssl2338.cloudflare.com
indeedfeed.ucarecdn.com
cps13.ucarecdn.com
robots-max.uploadcare.com
cps13.ucarecdn.com
cps1.ucarecdn.com
cps3.ucarecdn.com
loupe.ucarecdn.com
indgur.ucarecdn.com

Certificate

The complete raw certificate details for bks2.ucarecdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf/zLAQpbO1+tO0Uumzc
4VLRzMNE7Y3FlZH6bbFes3kishBPIHURPYH43b5WADwdB/erAOHju+TCKqU9daAK
NzxCkC9mNwpH1RIQ8OZA111G5lNxXD53dgITIbHTyYAdDNz7FzJvJE6zqwkUuLSZ
3TiHoH0XPCSmQWpgPwF+W3ZPs5yfDNZIAAjEuBV16jGQbUrTfjf1BsFcXcYIYDRg
yePiMzIbgimbqQyxrK6Jf1cC/modLqqkjsGXWbw6MvobqdsSMIfCsybpB90sU2Ft
o87D3ob69OGQF5CaivgDTvRHz8koKUHGOPWhsPEVdECb6XTd0gorSp/NDDPWAUj8
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361648908373910444935165411768032412645515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-07 12:14:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-05 12:14:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bks2.ucarecdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23480300013714686693725450740393778239301142814714749482883739762219837090237124476346520688124461676189567432660892415374516827075697168933387334005048918665307114614681055353335488667504764836240955697322185571076124970367705583483699999521796354571196085173664668963174280510510646474002655177770372736004640236931893966899415877297625773789803389952352222331725742770437617454935426217633173451977116288624588135196719496422000750055895340733488923110205707480341778017364350193248656434906159709000161568808810800944859218512051361022605065563464773006534349327164564677368953396721514801151708618658565189074031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fb99ffc5c829c8812b96e6e7674ff27e2b3ae57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bks2.ucarecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdn2.brain-valley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00770174d429861e9d64e41168b571e1a812eba4f3621c1c00e48b01ef3b478b720725f0ff8a9d682fb78da79fab16c9c2118b1cf0f91d56c4706918edc963505a06cc83f9996946752b4e60979d8e06f659e15f2d5004b25e0f6439f7aed991a7ada34ae595d45e34aef315f1668db1ec3daf772148da32b1473cd38750d3fdcaf0cf22189ae951b7fae8b870fd579168beb5dae0a6c5c2d393e1d22bf89ce97bc1ae4f17f1eef26036175661022d9dc0673c6523e6b09dd66ae0c9996d83f191e7d83a3cc2fa79db51441c2c8e796258022b6613d53a5bde26127447ec4a05994c4f228e1d57482632ac94799a506e355faf8ecfadf19e7022fcf23bc99103d6