www.safe.space

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:8d:90:b0:d4:1f:f1:a9:df:03:5f:f8:1d:20:93:e3:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.safe.space

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:8d:90:b0:d4:1f:f1:a9:df:03:5f:f8:1d:20:93:e3:4b
Serial Number (int): 331282915438736773987460263944506678960971
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:f1:65:18:f9:43:7f:e2:86:84:a0:dc:c2:a5:c4:2b:4d:5e:2b:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:28:45:bf:21:68:8c:b8:cf:c6:e9:29:47:d8:b3:42:77:65:ae:fb
Fingerprint (sha256): f2:e8:cb:c7:18:a8:91:34:73:04:09:8a:37:19:47:42:cb:6c:c0:53:d9:ca:e3:8a:c8:be:80:75:60:7b:a9:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.safe.space

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.safe.space

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.safe.space

Other certificates including the domain name safe.space

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.safe.space in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331282915438736773987460263944506678960971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 07:04:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 07:04:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.safe.space'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847554940899783979653970048443276860211258556410372360782083185678772780557005244965350527604816994916359931704666378074395466216459221088219098110492476253259076258232509410098359026239369331599545220142348676849208879428257156254022479568355460267032361565867185043810397971797482534741245613940864627404913113995150960176672266754080713721221824802656934292971476584313738633734011097543023945069071379392824064662812659649275955309806724726459520142546536870475370810440419153934789598251929336215811257127130881565729776234134662709432725062937120885578267799510278866542565831831709264979295358036568842482102008566651865032903802567254431547711476572003703608245958925618681301637452416413309556036798302612697459494532877513076470342692488860237807816706584980267362256699078936674315643874996991919294299670636623985403798023176993284734049714781547857133979154634415619056656337689219782481378328974843718870272462758978573919015569701335077980845585572934393810331338352605204556473188907792361385864937574007821369298849094381828199139999213747174591588259833680518938472827914221564392409900096437964666001928514132170722478452976901089035183526796576458822286871490741638668964978914982636501243879349181414953996881429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2f16518f9437fe28684a0dcc2a5c42b4d5e2bfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safe.space'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c0e690fd50000040300473045022054839854bd0a22580d6471b37848acb21cfc79722fc2f5570d6c373e00f43546022100e930dca443804fb49e23cac7e429490bd4b365a089cbf3c649d71c2acbcb8d21007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c0e6911f0000004030046304402203a73f88466aac0518f7cd7a6246208300c40c6cce51df02f9397aecef348e887022040a2b3a34998aaa5e962ae395db83448d77aa5846e0fa5184d93791d90e16268
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00596939d1bfcca7ef89950974d3e36d708e28149048351d01f7f1da9278bad4a52a07fa2f81735041f3103dfa574f9fe87f97f3ab4b93fff1a62dd5f024b712df32605440288779136c39fc91ddf6b7011e9a82317dd8a44c614fb98ac988224fd8c53eab724b635abcef830f8094c155ce8441b2c3d8363a2b2a791532f20e6d7b549b3e566e042d15f8c641f772f4a84f68500ea0df72c113d801e6bb461187ffb8442b35128113c3fad2414a8c87b59f3ccb2ea54a43b1fced9265d11825e72d7bbf1fb8aa9186c6e6bff00ff2b1310371308caad9684367fcd311e557518a80dd503f0b23168e90ee908790598f3a224b54e478b586ef7bf2a11a7b6efbb1