thegana.services

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:18:dc:dc:12:54:af:d4:51:42:e8:3c:3f:4f:0a:2f:6e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thegana.services

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:18:dc:dc:12:54:af:d4:51:42:e8:3c:3f:4f:0a:2f:6e
Serial Number (int): 435254195532670439446792469682807194136430
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:28:e6:c7:0f:4c:51:91:2d:e8:ff:ac:98:4b:7d:1a:5f:5e:8f:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:e8:b8:43:80:52:39:a4:4b:cd:4e:a6:74:bc:e6:a8:db:4b:11:ff
Fingerprint (sha256): 12:cf:2a:64:51:27:8e:27:64:df:68:1e:40:34:6c:4f:b7:3d:0a:56:da:59:fc:26:9e:42:a9:43:0e:1f:b3:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thegana.services

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thegana.services

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thegana.services
thegana.services

Other certificates including the domain name thegana.services

(limited to 100 certificates)
*.thegana.services
*.thegana.services
test.clasificados.elheraldodechihuahua.com.mx
*.thegana.services
thegana.services
*.thegana.services
develop.merchscale.com
globalchances.de
www.agrolocal.co
console.thevillageco.com.au
app.litorgize.com
*.thegana.services
group.tlpp.me
app.teacherswitch.ch
www.wordy.co.kr
thegana.services
www.copafacil.com.br
*.thegana.services
*.meroawaj.com
www.twilightbeautyspa.in
*.thegana.services
daway.in
taktikom.net
lf-cast-develop.pearsports.com
www.ksmjobs.org
www.octanejeans.com.ar
*.thegana.services
*.thegana.services
app.hiblocks.io
*.thegana.services
vglista2022.no
thegana.services
www.fantasynamemachine.com
backend.benellicaddy.com
www.adikaraorganics.com
*.thegana.services
staging.agent.aeroglobe.pk
*.thegana.services
www.vibewave.app
dashboard.rewego.com.br
www.vibewave.app
connect.cooeyhealth.com
*.thegana.services
*.thegana.services
share.thegana.services
*.thegana.services
inventory.morninglavendercafe.com
www.crea.ninja
acepictures.in
unitedbyblood.com

Certificate

The complete raw certificate details for thegana.services in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjdN9yKFRBvA36wKFkFq
Yyp0zZl7QlUb3rO0kowYB4tguseDLDMwJweQBEtkENfvTvAzAhkTbM2aF0OrbBKo
bdFHo1NWh1FV01WvnKQcLuxmhgCFDq+F9du7xM2LFm2dt2EtuUgE61kKl0c/dmWk
wxLZDcFrOHCHgFD3adJ+IaqLoW1BJ5IyaawW6m16484w8WvFRRTeOGYBLQ2+APAl
xpVLdI9kdcZzJvNLhknF2q55+eBSn33e1B0pvjYhtiHP5nLnBRvfCqSqqiaGmXrB
hbEZchDKfS73r+vU8pFmkbWOinYLgZ9m8+j92AjLza1E1/Bj05M3zo3uCAiRhA/w
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435254195532670439446792469682807194136430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 09:38:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 09:38:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thegana.services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16438251336721334873844610944340145954069596857992285655385218031403789073555250055937670570021541036199892438259359637231516203177080668877842213456903630838467309450934181687777794643128523985649449045574403577143188622772494126682852894773728225824810117319783299395001484587573543802935209179112261077034933906680632736778395018727947088519580908985294039326081091564211174504242729233712265628201300264613027226537326212556371085177617803143321970241111642396183095817683431490673601893144748463984098116309831638080090300770572176876959157986581759778397888585784779324510819778642671970497630964469874822213843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e428e6c70f4c51912de8ffac984b7d1a5f5e8f50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegana.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegana.services'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbbcb9bfb000004030046304402202670013e9147b3ff2f525d427e7be9492ad17f70daac3f047af9a79d48476b0d022029e57c982d369704eb8071bcb8bf0b7c61c7038914fcee014f05bc2947c5915f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dbbcb9c3c0000040300473045022001c23ba4b7c4cb3daceac231848d8f60008a6c68e0cf1f9def93c50cd48d65b4022100b60b4e707d962951dbc81de71a53c833b41d12b1f0e23fcb01932e47a5dc2367
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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