www.notwell.net

Issued by R3

About this certificate

This digital certificate with serial number 04:1a:0a:36:f4:d8:dc:47:4f:eb:90:46:38:7f:d8:0b:a4:3c was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.notwell.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:0a:36:f4:d8:dc:47:4f:eb:90:46:38:7f:d8:0b:a4:3c
Serial Number (int): 357310062897062995983359218500822150915132
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4f:94:2b:59:ad:00:61:db:73:2b:ec:05:b0:a6:90:98:4f:5c:21:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:be:33:20:79:1e:99:a9:5a:5a:7e:04:5c:83:52:15:73:4e:5e:1a
Fingerprint (sha256): 0f:0b:0f:c2:1e:0e:46:7c:9b:f8:ce:d4:0e:9a:d9:9e:81:72:51:14:c4:83:5a:75:39:fa:46:a7:12:04:28:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.notwell.net

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.notwell.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.managednetworks.ca
cd1.ca
hostednetworks.ca
hostednetworks.net
mail.cd1.ca
mail.hostednetworks.ca
mail.hostednetworks.net
mail.managednetworks.cloud
mail.notwell.net
managednetworks.ca
managednetworks.cloud
managednetworksca.hostednetworks.net
notwell.hostednetworks.net
notwell.net
www.cd1.ca
www.hostednetworks.ca
www.hostednetworks.net
www.managednetworks.cloud
www.managednetworksca.hostednetworks.net
www.notwell.hostednetworks.net
www.notwell.net

Other certificates including the domain name notwell.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.notwell.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqzr6W0y1g/kE51c7ssRV
WyXLLcBoYU52avGaIJwbdBmXV11WjYN5k0RyAdyiG1KKVndhEMdgtD/jgL27TYq5
+2zqHFOLl3ygJ1j4MU+lXedMEZWeeua0siTylVnBVPSekegvGOCikQJsFEN2Xf/X
B1lRh+46oMd9iV+AUsoaqAp1q3C2/49FwWrBlLAML+qPECV2GTNTjAKBcZBCBovL
UphaCGCjceKFRz2k6MGH0fCa7yqYjZKCx8G3fO1R9bidkg92/nYBloO4+gKG2nxK
I5twG/DhBuLMMgxq/UzeKXD9Ylz/iU3SXTeWzf4b35/Vy6g7QEeOwq1pP8+kVhpQ
/lQkWh6VLeyhw5qAeim3dj4szcZr+tBi74R9MZ1VMbUGh/olHPOvWMrItNa8WXCV
twrAzk52IwBlqFloTqzTsQ+BE2LFaqgI8qB2VubyA4iJUyRv+keAzAdHUDjnOSba
hA6CicLASG4xvqGXDroKKDBnoveA8HhW+i65EVaymOzMDkc5kvbfZKVw2lYYfIGT
BrM7A4H8cSUPLsdaJzFrVCP1u28AQqwnXxC0lHmO6PjPitLDdb9YgyleEaP69gyu
CESawrHj8PAtdFM8y8VfGSefYNL3MYbqh/AplAf0VHhsq5Mp90+ZHwgmWWd+5ITl
wdyDI/KbnUqccd2CikxfZ28CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357310062897062995983359218500822150915132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 04:11:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 04:11:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.notwell.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698559014798618777744105596223698043824091288686628271285155377586985893726465894251425026705979034535501361552513242135961466357636613466209742694469514963918245408825390804366685321362597162981978119932194859765132019566420486610075153484472282951524114010708000030435155556967300230461366655357159176506541287223306599315839806280604857871400130906723982856145327749661807518574871342204676881196031211405477396308048817384082389669655077894830543804387125557573780739597849604049406429809272191802850103889802704483319470800759532987568220316077018830942947158646875831346758332960896097792574801034952100594987734629018033132002982079803302194322201107450583213801584125029794505123562700610608722517320066854274877993527949387311549034233733967475475978420277042279594907733145534438365478635107985080335594954424438002300853936546391469840505690917344311812137441018681683449306314342030885467669606702760588141395071728698665183899464394906327848407555328312340178517371395174665532049880580646112170637682100817189825561484371118502845160481365101240618807409649360003827741587423592407540908223552828741299828764536787835501056903663509508714625040556346891670284881522290113687249076654961307148340092387597661207124731759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f942b59ad0061db732bec05b0a690984f5c2157
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd1.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cd1.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hostednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.managednetworks.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.notwell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managednetworks.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managednetworksca.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notwell.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notwell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cd1.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hostednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managednetworks.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managednetworksca.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notwell.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notwell.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bfa970aa20000040300473045022100f8fb6708796335fbf559c77fb209c0e07b9915a7dbdb91baee8469214706bf08022077987abf0a25b61715ff450378faa6b28b038d544720be50f3dfa7b919bca63500750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bfa970aa30000040300463044022026ef2029afaa917415754bc368c8f8e83f20f25416dcdd8009d4a19649f1cf1302203a54b13eeee6ffe38f237ef6914e06d326a77135f0b4737c1c1e6483d3c2050e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079ee40fb336607aed03137880bb2befe582cc4b1acd0deda03ee50e06bc1ca6385340e180fbd50685ad5e6c0ad1277fdd6ae566d1c4cfd78e75024ffb1ed4e5f1a7d7ace03a8a34b20504c8de6a2e677ac7c9bcf503b359d798c846245770eb892edd5dc2655e16eb409c09350d70e99d05b23e2d6fc47bc3832f1fae6b6b5e0bb78c4a806d2f73bd1a47c515a2a03b83debf69292204a4face6e6d788b1fdc9f0fb76039075e03ea85a8f4a951ba61e26c93e0b16e7b7b24df1bf42dbd9e8c8b01a56e6a9ddf5937d2f8dedc257ae16499b097ea28018021d5d15a9b11c435b2b180971be7d1dc7ca13cb7b5dee9deef8fedc699214e65a2d2ee7017bd02bc3