DV SSL/TLS Certificate for space.ua

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the space.ua DV SSL/TLS Certificate

This certificate with serial number 05:0c:09:c0:f7:08:ce:ec:78:87:db:8f:b4:45:0e:a6:89:7b for space.ua was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for space.ua provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:0c:09:c0:f7:08:ce:ec:78:87:db:8f:b4:45:0e:a6:89:7b
Serial Number (int): 439657783045264434914224249929577099856251
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 30:71:97:7e:86:fe:01:30:7c:ae:47:dd:d8:3f:cf:3f:1c:3a:b2:95
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): e1:a5:ac:7a:c0:2d:ee:7c:d7:81:56:e4:3e:4d:6c:90:18:44:a2:fd
Fingerprint (SHA-256): e6:ac:bb:ae:fb:05:74:77:25:9b:ae:30:ad:c4:07:78:22:63:87:e8:c5:ca:15:02:8c:31:f3:65:87:86:be:0e

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/124.crl

Check the revocation status for certificate space.ua
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for space.ua

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for space.ua in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNsF0UrYVJ+GE84JxVxa
tPVcUckfXQeaf13pMIvZZQl4NSArcn+xs7EEOqetZuUTaZ9FnDUW7CNUducn4DO1
rOnx3xfWF/UqfL3K9QZOYIsLE5RfqfD2SfeI8mJUi0vz/LkLi9/ai2aoiwst6ugw
wWFT7J2Kc/cV3XNPdntAdFFGLqOTftCJd7i7iJGI6gk+AVi6pq/SZmYiBqpafRrv
HS8l7vT3+GYrovg5JBgiX8kaBMti9BE8+s/OrLUBQdwu9ik/Suag+K9A/sCR3R4M
Z31gwt4p6a5byN2QiEKmhpTcJ+1JN/fxdPqPsJx6YN5VE1uMum3jUrbqqaEFu1jR
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 439657783045264434914224249929577099856251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 20:01:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-28 20:01:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'space.ua'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24850711904314483545272180257545792979633523084056616348701715858836918300570573533145944351869271472765671692518732597698364419988661664671325057020670040471257521702703946391556450402956443876709141305601495872264707815640777010685655070696392045998111628431611697039596460325542937884759061316692091247835181285524981425040095290783066436940589005515583746185735053781808747310538730250727429063806789851385232867810326793111234263253307919647064089828768173392226868421064644796352103511060600524858690719685547319539150625086939890800438218549289302152244674266579379049225062564023421041283369748571328702108031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3071977e86fe01307cae47ddd83fcf3f1c3ab295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'space.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.space.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/124.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019722fe510d0000040300463044022004d68e3859b075291b073a06bd4359b0df15d3fd70aab0d9c0549d081c8550f502202169f4c310eb8a76a5a16a1ba8bd1a8f657aae9d17c97374b5a3a40af1b375ed007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019722fe5890000004030047304502201183c2be8863ebea5573f68f76e5916ce863604705b5a5f9ef36fd425e245261022100f8ceb89087215e3d9483e2d68f83fea6aa0c9b0e0538e304f9e4d56fff7b50ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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