cantinala20.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6d:a5:d6:7c:05:79:c0:75:5c:70:d7:da:3f:44:58:27:bf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cantinala20.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:a5:d6:7c:05:79:c0:75:5c:70:d7:da:3f:44:58:27:bf
Serial Number (int): 385760358007708128695691377089045488740287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:b3:a5:21:d0:13:86:8e:7e:1d:f5:f3:66:2d:b5:13:f7:0a:6a:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:47:5a:0f:25:03:63:90:2f:07:55:35:c0:dd:e0:49:c5:d1:a7:ae
Fingerprint (sha256): 17:8d:4b:15:65:eb:15:51:bb:d3:b7:85:aa:89:8a:1d:3c:63:ed:db:f0:e7:18:73:69:f0:e9:fe:84:77:51:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cantinala20.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cantinala20.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cantinala20.com
www.cantinala20.com

Other certificates including the domain name cantinala20.com

(limited to 100 certificates)
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com
cantinala20.com

Certificate

The complete raw certificate details for cantinala20.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385760358007708128695691377089045488740287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 02:19:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 02:19:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cantinala20.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879074689547938957456532836071199004361580245925834688561475267901652879827038659957721143714050382184880465076927042989580949031720096202085587048093686493607630407616267671438412551178693103099838390256384121715687202290345182807407176957897640755435526289977111809927641237574471507492503941372750837378856462130457350787612392790657995275098410916888890204046902034943291331836683095917099558722438273935648590989238872846631970647661102885739526331855386621266480740711388037512110296565469342430219865215228226147662613131641483353083763723795194206678701265518832160795866417853139583335196300152613961445933802186397671165166542958568846249280793772939826045070313631506960506363003620146725561110340125743742216175673646044955062041592650491903624340093602112318127032511524146769218109997015099649033529416727259947847104622081237168541369029174666985077579439894672407737029478077909155993514372289791512788119603640937580528516439192703677811697318441329617572661784335372555606655964746840764213435261493160610170261914327502361366414225857928839051968554160149664553306706290854314548360499160154733426030162017549537468324231342117671828032573727261576576559173581836194046057822713908530768576993655711246628198285239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5b3a521d013868e7e1df5f3662db513f70a6abf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantinala20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantinala20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9b537626000004030047304502204e3cdb143fd8389cecbd70ddf6dac18ee259153816f769e8ac6911540ea4bb2f0221008d6ef090bc492bd11686beb0868135dae0ec6c67f829f2f42274a710e230c657007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d9b5376310000040300463044022046dbc61047a5a07bdb3a15cd817042b8ac11603e2390853559a387e427f04c7b02205758c31b7e7c9d7e7a899e437bac09682815cad4c81ea190f82be8d988b4eae8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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