canwebuild.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c5:34:b3:a4:0d:96:c3:bd:78:b2:e9:b2:fc:dc:af:d1:ca was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canwebuild.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c5:34:b3:a4:0d:96:c3:bd:78:b2:e9:b2:fc:dc:af:d1:ca
Serial Number (int): 415554822614776157746638079712645081977290
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:c2:32:b2:fd:de:b8:ed:a9:31:f2:9b:e7:f8:6d:d9:eb:64:70:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:f9:2f:42:8f:85:d0:a3:9c:eb:4d:04:19:c0:d7:f1:9b:ca:df:7f
Fingerprint (sha256): 1a:05:34:58:ba:0d:cf:e9:ae:51:f1:c0:5e:e4:12:3f:b7:e5:1f:97:3c:99:8f:a8:2d:9c:50:f8:56:97:6c:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canwebuild.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canwebuild.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bitcoinselite.com
bugfree.tv
canwebuild.org
closetcorner.com
cortlandbiotextiles.com
customdesignedtshirts.com
gayplasticsurgeon.com
linkedin.irvinglopez.xyz.heavy.baby
losbebes.com
saintlandryparish.com
sarpyconservatives.com.sky4vip.com
sovietyardtools.com.fundyourcampaign.com
thecultureproject.com

Other certificates including the domain name canwebuild.org

(limited to 100 certificates)
hiro.media
34755625397.ca
vertera.ca
canwebuild.org
dominiospremium.ca
grocer.cc
grocer.cc
www.canwebuild.org
vertera.ca
www.canwebuild.org
biblecourse.ca
mechanicforhire.ca
canwebuild.org
34755625397.ca
www.canwebuild.org
canwebuild.org
grocer.cc
www.canwebuild.org
grocer.cc
grocer.cc
www.canwebuild.org
canwebuild.org
34755625397.ca
5272653.ca
jimmy.cc
vertera.ca
zapmedia.org.zapmedia.org
allanblock.asia
caribooranch.ca
vertera.ca
ofresidents.com.canwebuild.org
mcsglobal.store
dominiospremium.ca
fatherflanagan.ie
grocer.cc
34755625397.ca
canwebuild.org
hava.camera
vertera.ca
radiator.cc
prothena.org
leaselock.ca
travelsky.co.za
grocer.cc
34755625397.ca
34755625397.ca
grocer.cc
mna.vc
leaselock.ca
canwebuild.org
grocer.cc
go.oton.club
canwebuild.org
grocer.cc
solarmicrofarm.com.trueamericanmedia.org
myautoloan.world
canwebuild.org
allanblock.on.ca

Certificate

The complete raw certificate details for canwebuild.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkWK0Xn54jl0zRpb4CBp
zjRAKU+evg2M9cpOUFrEqozJq4Q09pnXXB1196O9uMUJRk3+GCfHVlYclohiQ3Gr
TI8m2E92wK2KEa3QUl0arXveL7wmkIaCvpiGwmujVzkCyFq7wJFctf0bOKVs21Cc
QXKTo7cn16aq0SMuW9GFWvQlqSn5xvUQkescZWOpGFvpzEFf4qVubX7dme285k59
k/kLleycae5vgvqEZ+kSKZKSCzhs74zUkPJ8nTR9wzCYiDb2odVpw7klwyW0hTrO
BCJQFVYPKLyKOQL7GNWJENCHKeUHvs5QMsWIRX9h0mpE/7MwniHVCzbehcJFDD4L
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415554822614776157746638079712645081977290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:26:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 23:26:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canwebuild.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21999757630038149328211914823603899226687998431414260994540715121549571812959890005427118007213904113603305791471624357967696461494278292906796172506671412849464435771780965885178957724472678098611842503916835454357488459964867176933934975807374645341083293520959119143826461261470185214511735329943176319215185208390523475124072982679895043376157262177490202742958809836941011225806995146759542437953509745204825078833076949157460373507564614794069089880522577496408928655117218042459613295543724503835767460313670261922961848269469170093581776428902118048235583405544853735196692940752977359549017507524939448454041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16c232b2fddeb8eda931f29be7f86dd9eb64703f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (319 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinselite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugfree.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canwebuild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closetcorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortlandbiotextiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customdesignedtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayplasticsurgeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedin.irvinglopez.xyz.heavy.baby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losbebes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlandryparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarpyconservatives.com.sky4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovietyardtools.com.fundyourcampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecultureproject.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce1501a010000040300473045022100a797622552e79601bed0795ca5ce50a6073a627dbe8e60f87621fb55bdb117de02206433ffb53f6adc6c60fe435257f375daba892a96dca7df4fe50961bce1d552bb007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ce1501a260000040300463044022032f842677d2499784dd7b94575448826e52e7a972fb8166d1cbdd4879ca4e8c402202f3c0c002e7b3db42a210c3939a1519db2865dce61d3680ddfe69696870afa3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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