canalmosaic.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:4d:8a:ca:ff:e5:3d:01:eb:6f:eb:44:42:fd:60:07:d0:d2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=canalmosaic.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4d:8a:ca:ff:e5:3d:01:eb:6f:eb:44:42:fd:60:07:d0:d2Serial Number (int): 374835373477513569752105209211347739857106
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7c:5e:0f:62:d3:ac:a5:c8:7f:b8:e1:86:9b:8c:f6:b2:53:d8:48:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 11:a9:e8:26:b2:ee:4f:ba:82:35:30:06:57:55:92:0d:f8:95:f0:36
Fingerprint (sha256): 18:90:ba:58:cd:d4:a2:f2:5e:b2:59:b3:58:b4:22:4f:0a:d9:0f:55:44:78:8e:0a:b5:e4:0b:65:b5:05:67:4a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate canalmosaic.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canalmosaic.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canalmosaic.org
www.canalmosaic.org
www.canalmosaic.org
Other certificates including the domain name canalmosaic.org
(limited to 100 certificates)
www.canalmosaic.org
www.canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
www.canalmosaic.org
canalmosaic.org
www.canalmosaic.org
canalmosaic.org
Certificate
The complete raw certificate details for canalmosaic.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgISBE2Kyv/lPQHrb+tEQv1gB9DSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjEwNTUwNDNaFw0x ODEwMTkwNTUwNDNaMBoxGDAWBgNVBAMTD2NhbmFsbW9zYWljLm9yZzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ1WuertlkgA5FRCxE5C0eYpGXh9ox5t oKFSMXamjGp78T6RWa1OphAnQFHd2w1A6ka7jQgNfyUzNvkXAg0uabMeNY33l/1J 4yNh4vkUH+WL9EqQNc6/C4/nAkYNVSJEzn98Z6xcR/M9MSKY9eMNnsVGNOyPhCjG 5Ft8iYlroeCSiqKHRqto5RlGpnNSaOiAHAGqNDY9FDhty7X/Jnaw+TkpF1HsMRgC bfM2p7hB3wjNssSe9ii5vTsDtSuOstBZVSBX6hoaE9mjW4hIFRSrBqPcAsuIBYQ8 zHbm4XnqT+Er52U5xGq1T+yZ9OtsgaKGkskOFH5BP/PfBb1Q7nyhCC0CAwEAAaOC Ay0wggMpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUfF4PYtOspch/uOGGm4z2slPY SBcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzAvBgNVHREEKDAmgg9jYW5hbG1vc2FpYy5vcmeCE3d3dy5jYW5hbG1vc2Fp Yy5vcmcwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 AMEWSuCnctLUOS3ICsEHcNTwxJvemRpIQMH6B1Fk9jNgAAABZLua0usAAAQDAEgw RgIhAML8s1fDFPpkM54nLwPZJaSVvstE0rhbAC/4wNyzf+5SAiEA4ZaSMp1gz0M1 GwC7VbHysesAkW+cwhRa5CIpmkz9+BkAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWS7mtTxAAAEAwBHMEUCIGZR8hOl2/jn9A9DhuH6ZQbagJJo XCwzAVKLRYAe7FrPAiEAz0NOTYNtgZp6wkFtst9HY7GhMyYC+baBrkkoPRzmt98w DQYJKoZIhvcNAQELBQADggEBAGUJOIjvLPl2eywXsClwEGsoeX+OlzR8QjDvJlbe b3YZ4CGtoX8C23szGAgBZJE5N5pY1Rgli7WvV5JGqGunt8739kosp+BnJMy/iK2/ VZFWNJ8ZWp/mErI6NOgghhTKJ0JQprv4NU1c8XD9VCfVVD7wxsvrfjyveVKlJUm2 v9dzr0pLY0o+6iyHr/CXURrt1Nou4os8a5skEZT057ifFhqSKe+GEKCYKshhajdS 31YpZTVtiy9+AGEbx+jvZNbDfu2zh1b17pQkyZhKb0TeHJW8n15flGVougerZI8n OMALtVKmNuBwcRQeShfzg+tjj/5Mi9w8QOhBipqIYiGExak= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVa56u2WSADkVELETkLR 5ikZeH2jHm2goVIxdqaManvxPpFZrU6mECdAUd3bDUDqRruNCA1/JTM2+RcCDS5p sx41jfeX/UnjI2Hi+RQf5Yv0SpA1zr8Lj+cCRg1VIkTOf3xnrFxH8z0xIpj14w2e xUY07I+EKMbkW3yJiWuh4JKKoodGq2jlGUamc1Jo6IAcAao0Nj0UOG3Ltf8mdrD5 OSkXUewxGAJt8zanuEHfCM2yxJ72KLm9OwO1K46y0FlVIFfqGhoT2aNbiEgVFKsG o9wCy4gFhDzMdubheepP4SvnZTnEarVP7Jn062yBooaSyQ4UfkE/898FvVDufKEI LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 374835373477513569752105209211347739857106 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-21 05:50:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 05:50:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canalmosaic.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19862180183014444424070957196916155027864085119754747038382238193321677791329366793376341299507038134835769740365717327657165706448948568231660715495131432947152961250579549836617669046740305357139885205750107638141121734459274556611833185678099034805562279595582333565957278887914620103902087700516150149615927734794662856206557284944116726014451812673486477213479104874443503264733689392559919114196787200324380461168900691045007569696477430221500900525859417742272700717843339500347978555580460371547197604987501016534768828977153550960395059257952254767657542016507684642816189678274584281591683231944204693342253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c5e0f62d3aca5c87fb8e1869b8cf6b253d84817 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalmosaic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canalmosaic.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164bb9ad2eb0000040300483046022100c2fcb357c314fa64339e272f03d925a495becb44d2b85b002ff8c0dcb37fee52022100e19692329d60cf43351b00bb55b1f2b1eb00916f9cc2145ae422299a4cfdf819007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164bb9ad4f1000004030047304502206651f213a5dbf8e7f40f4386e1fa6506da8092685c2c3301528b45801eec5acf022100cf434e4d836d819a7ac2416db2df4763b1a1332602f9b681ae49283d1ce6b7df . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0065093888ef2cf9767b2c17b02970106b28797f8e97347c4230ef2656de6f7619e021ada17f02db7b33180801649139379a58d518258bb5af579246a86ba7b7cef7f64a2ca7e06724ccbf88adbf559156349f195a9fe612b23a34e8208614ca274250a6bbf8354d5cf170fd5427d5543ef0c6cbeb7e3caf7952a52549b6bfd773af4a4b634a3eea2c87aff097511aedd4da2ee28b3c6b9b241194f4e7b89f161a9229ef8610a0982ac8616a3752df562965356d8b2f7e00611bc7e8ef64d6c37eedb38756f5ee9424c9984a6f44de1c95bc9f5e5f946568ba07ab648f2738c00bb552a636e07071141e4a17f383eb638ffe4c8bdc3c40e8418a9a88622184c5a9