freedomap.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:69:ff:a8:d9:35:57:47:4b:54:5b:49:24:c6:ce:69:42:d9 was issued on by Let's Encrypt.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=freedomap.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:ff:a8:d9:35:57:47:4b:54:5b:49:24:c6:ce:69:42:d9
Serial Number (int): 297406336172285653993147828306932293780185
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:10:18:c8:6b:47:49:be:fd:e9:45:f8:2f:9b:2b:f8:d5:d3:9a:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:e1:46:fe:bf:14:d2:41:4c:7c:04:33:c0:7d:a0:26:62:e9:44:7b
Fingerprint (sha256): 18:3f:74:3a:06:51:cb:94:c6:c1:e3:fb:e1:12:74:b2:4c:a8:a4:32:ff:fa:3d:88:7b:1d:14:64:83:15:e4:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate freedomap.ca

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freedomap.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bollywoodfashion.in
buydirection.com
canibuild.community
catholicfaithhandbook.net
directtoconsumerambassadors.net
filmattorney.co
finehealth.org
flyoverwellness.com
freedomap.ca
greedyrat.com
hallofmirrors.top
highcaliber.solutions
iarbitrageurs.com
initi8.com
jenniferhill.email
lawyerfortworth.com
mosleydolphins.com
mountjulietnaz.com
redriverparish.com
shemalecalifornia.com
shibaghosts.com
shop.talosdevices.com
shovel.net
spank.bdsmsecurity.com
supremebuds.com
surfhq.com
tannergerritsen.com
totsland.com
ukdetail.com
worldviewmatters.tv
www.nationalfunding.partners
www.rockweedtrading.com
xn--uoq139aoqjx3w.com

Other certificates including the domain name freedomap.ca

(limited to 100 certificates)
freedomap.ca
guidetoprivateschools.com.freedomap.ca
freedomap.ca
freedomap.ca
gamersground.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca
freedomap.ca

Certificate

The complete raw certificate details for freedomap.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF8+QNP0jAK8x9ozQBwx
RlM7Bf4ZvyFkNO8BK+prhyTY1X0cmppjJzNG7uRoQ2YZRyyRPGkDQroVA14rOUtb
oUiHpUHfRuWw3xdiWGYoaEZ/TeZaNqS62X1uzqtFMrjo0UEKuO/TwGtCinmSU4o1
lXMt9sBDGJ/FtciQb7Pbm54GAqiNtKry8T9hfxRNTsb6LFhV/LUfrqnEw5rv0iJO
NVWQJ8oqFR6uuURc0yjoS+6sZWk70qyoDV5BCpnQXBLP3joZRSOG2mHIs08rIXFz
4GEPeY4jLFRAEGNHiF0M6A4E7VNo5ImnnHRGsUm1wLni8MJlfFvj3tR8dIKkA0Eh
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297406336172285653993147828306932293780185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 08:35:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 08:35:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedomap.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22769861054772146289436303489164279944524127865079733957281492315796033870222444136854399500270960092747367035678427390857499330301223461228937279328045003866268632842213604524401127147902200513290170762025696201691221007088272877157021400895792785079330817102858898781809736478595751772352383595742980746591400552258198589711574307569082718103820574963963909787120048316133323369762718556126180737367835740564957540052977858937038857720776813573529010242086100443473025763337877107099670252712731915170689504429051946273041441881547666881461108613029144390426886967832601303640686924676406773365063689842010492051923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f11018c86b4749befde945f82f9b2bf8d5d39ae1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollywoodfashion.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buydirection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfaithhandbook.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directtoconsumerambassadors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmattorney.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyoverwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomap.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greedyrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofmirrors.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highcaliber.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iarbitrageurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initi8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenniferhill.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyerfortworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosleydolphins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountjulietnaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redriverparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemalecalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibaghosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.talosdevices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shovel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spank.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supremebuds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tannergerritsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totsland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukdetail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldviewmatters.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalfunding.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockweedtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--uoq139aoqjx3w.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d82ec65f50000040300473045022100b69efd45428c5f11e620a08f433c943911a9bae3565fa75253348337e4cef7210220551a7a5e2c00f747aaa6285e474982e1955d483ac6bbf16522855278557e8578007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d82ec65b10000040300483046022100d844b7654c64d1842d7d0e971240854b6c6f2bd3e1d738b922f2830e921f4db20221009abe9f538044a39891bdd8b8f6456d70ed9ce3b793a10ad53b0a862b5b1178c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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