greensaver2.barrieweb.net

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:7d:63:c7:a6:1e:e2:be:67:07:12:1b:56:06:9e:4d:4d was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=greensaver2.barrieweb.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:7d:63:c7:a6:1e:e2:be:67:07:12:1b:56:06:9e:4d:4d
Serial Number (int): 303358260512779225148645299172252453850445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:d4:0e:c2:3b:c7:9d:31:9e:cf:c6:a9:ed:ed:ba:13:44:f1:3f:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:56:05:ef:c2:73:19:06:2c:c4:3f:d0:70:d0:3a:c4:1c:33:98:16
Fingerprint (sha256): 1d:10:aa:f0:6c:35:58:bb:f4:6a:63:2f:25:81:a4:c7:ec:1a:5b:ea:92:f2:e5:2f:5d:c6:26:de:d3:e2:10:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate greensaver2.barrieweb.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greensaver2.barrieweb.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greensaver2.barrieweb.net
greensavermobile.com
www.greensavermobile.com

Other certificates including the domain name barrieweb.net

(limited to 100 certificates)
prolinux5.barrieweb.net
ontariosauctionpaper.com
*.customshowcases.barrieweb.net
sbarriecollision.barrieweb.net
prolinux2.barrieweb.net
*.customshowcases.barrieweb.net
golfind.barrieweb.net
bedford.barrieweb.net
pm.barrieweb.net
www.nortownmusic.barrieweb.net
win2.barrieweb.net
*.showcasesdisplaycases.com
win2.barrieweb.net
*.customshowcases.barrieweb.net
southbarriecollision.com
*.barrieweb.net
projects.barrieweb.net
win3.barrieweb.net
southbarriecollision.com
golfind.com
greensaver2.barrieweb.net
golfind.com
taylordocks.com
projects.barrieweb.net
barrieweb.net
sbarriecollision.barrieweb.net
southbarriecollision.com
barrieweb.net
golfind.golfind.barrieweb.net
barrieweb.net
win2.barrieweb.net
bnl.barrieweb.net
pm.barrieweb.net
golfind.com
prolinux3.barrieweb.net
taylordocks.com
southbarriecollision.com
www.raevareddick.com.barrieweb.net
golfind.barrieweb.net
sbarriecollision.barrieweb.net
taylordocks.com
prolinux3.barrieweb.net
barrieweb.net
showcasesdisplaycases.com
*.nortownmusic.ca
taylordocks.com
pm.barrieweb.net
win2.barrieweb.net
barrieweb.net
*.pm.barrieweb.net
projects.barrieweb.net
*.customshowcases.com
bnl.barrieweb.net
win2.barrieweb.net
*.customshowcases.barrieweb.net
win2.barrieweb.net
southbarriecollision.com
golfind.barrieweb.net
win2.barrieweb.net
prolinux4.barrieweb.net
win2.barrieweb.net
bedford.barrieweb.net
customdisplaygroup.com
*.customshowcases.barrieweb.net
bnl.barrieweb.net
golfind.golfind.barrieweb.net
*.nortownmusic.ca
golfind.barrieweb.net
golfind.com
ontariosauctionpaper.com
www.msexchange.barrieweb.net
golfind.com
prolinux2.barrieweb.net
*.kioskscarts.com
win2.barrieweb.net
*.barrieweb.net
prolinux2.barrieweb.net
win2.barrieweb.net
golfind.com
golfind.com
southbarriecollision.com
prolinux3.barrieweb.net
prolinux7.barrieweb.net
win2.barrieweb.net
prolinux2.barrieweb.net
win2.barrieweb.net
prolinux2.barrieweb.net
ontariosauctionpaper.com
bnl.barrieweb.net
win2.barrieweb.net
golfind.barrieweb.net
win2.barrieweb.net
prolinux4.barrieweb.net
southbarriecollision.com
win2.barrieweb.net
golfind.barrieweb.net
sbarriecollision.barrieweb.net
bnl.barrieweb.net
golfind.com
win2.barrieweb.net

Certificate

The complete raw certificate details for greensaver2.barrieweb.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGied29K6B/rD0e18bEV
ThcYzGRMz5D3hOiC7VIGHM869OGClDRfmNbKjT+I009BZsPoGw60nu+aSwuljN1X
8pfdme0KEgefH5qL5pqnyhLMJOA23WZUxpseCFK7ifE8nIW24zXdJG4yzt5XAiPx
ZJNqnkLnMkMCcRRspVmWfyxDDsrga6pm1rzaLVmnGu04YXMvWLJxAP8xWajcTe92
igbeuj5M11km2CmWDSOghzfCn7nOhovhzG86RVsnxHslsWQkQUQNa17rZTLzw17t
gFuHHn7TQcrTP6omnxQWj0TUta5L2IlNjmmeqg8InJYWcBA/Igunh1OKq4gEQgGx
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303358260512779225148645299172252453850445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 03:52:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 03:52:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greensaver2.barrieweb.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21764578010727401795224702733623796154384325879116477750616561571498746846650433792332445952369246429364552303999213878267096427842138422336091069765924151910256242980031298290041016009630641580732469722966026746078154591328715296648172329537762153428644774169872175552526356231607353403125466826139053143966743500527225370685644191817342876135049632184730595441037916852675596326376258581228801663132446181243213789434803258689622162605020816464828004002131175784196700169045167723440632484682612651019027123204697213378039226475147627968634070646602497032951189547296266990548500670293658624073342125371032323863031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0d40ec23bc79d319ecfc6a9ededba1344f13f57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensaver2.barrieweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensavermobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greensavermobile.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab6156b9900000403004630440220310a825e8e5dc7413157625ea67ecb73a4c2251daa4ccc4642a423b3d305e8be022066d1187622e120c95d99dc2c6aac508d5525975d5fac279f49c138287b51eba0007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab6156b8b00000403004630440220780c91fe67776afc0df5e656543f574e31bc5a9f336339d7c46c86eed1956c3b02207a82fa89964a51360c7aedb152e0a2f9e9f6c163328270a7ca63a9154d87168b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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