hydratight.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:41:b1:47:af:c2:5e:8c:1f:11:db:d2:56:81:b4:0a:64:29 was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hydratight.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:b1:47:af:c2:5e:8c:1f:11:db:d2:56:81:b4:0a:64:29
Serial Number (int): 370803143150054077947950900612732218401833
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:9a:fe:29:15:73:67:8c:1e:9e:5c:98:20:17:b5:63:7b:3f:f4:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:d7:49:ca:b3:b6:ef:8c:4c:c0:93:21:28:0c:43:09:0a:70:c9:58
Fingerprint (sha256): 24:1c:e2:8b:de:05:91:cc:1c:f1:c1:5a:24:ea:52:c8:ca:5c:1f:62:dc:f6:e0:2d:ef:d4:3b:cd:6e:82:57:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hydratight.ca

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hydratight.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

829.cool
agihealtinsurance.com
artistachingon.com
burlingtonjunction.com
emailtoo.com
erasmus.com
exchanged.media
freespeechforcampus.com
gayeroticaudio.com
howtocurepoisonivyrash.net
hydratight.ca
leadershipmonster.net
madisonmcintosh.com
maritimecruises.com
markcmillerlpc.com
marketforvip.com
meketo.net
moso.co
nylegalforms.com
partialteeth.com
pay2.org
pc-repairs.com
petrusville.co.za
pulpfan.com
queerniche.com
rauit.com
resellrightscatalog.com
salocalmarketing.com
sanantoniohomefinder.com
sellersguide.realbrilliance.net
spontaneoushealing.com
websterparish.com

Other certificates including the domain name hydratight.ca

(limited to 100 certificates)
hydratight.ca
hydratight.ca
bramptonhomebuyers.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
hydratight.ca
medicusshop.com.34725625397.ca
hydratight.ca
www.hydratight.ca
ticketsdirect.ca
hydratight.ca
medicusshop.com.34725625397.ca
virtualblackbook.com.finland.biz.hydratight.ca
westernaesthetics.com.hydratight.ca
bramptonhomebuyers.ca
bramptonhomebuyers.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
hydratight.ca
f1xed.com.hydratight.ca
hydratight.ca
www.hydratight.ca
hydratight.ca
hydratight.ca

Certificate

The complete raw certificate details for hydratight.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzja1n7tQq7+ERK6XVbC4
EA8/56c+qDR1jVUMgruE+270dZ9E4IuExR/JbS7MbVGjqrQIaMSmphHbYod13OdQ
XpK0Aq59MkkbFpQGRBcc8JzZGgpO9UaZWRZJi6Lkwyt3bL/buG+XSt/5AFjSD/YO
pVakUDNDs1OGMtwDShsk9OnoOSPjPWJTZy3jrle2OWKWvOCrOVgpMKq0oD+TZU8r
EU82OtbvUfhEMJkEDi8skoYRNKli7NCor97Zkmap0q4y7ecX85UENjbzMJ6FQen6
QzFBePLOUZA3brTTPDMH15tDTF3Guy/6dmw4YyQd0w3jCPyXt1ws+eEdUj5Caczr
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370803143150054077947950900612732218401833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 07:21:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 07:21:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hydratight.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26032069067449092437205211165305784759916272157962767477262415770710305004113082895319726907168565977767666255907636807007377979587991120613660562258783630052172638468827497526931728393421044932968926212470421362995394388590192096892635254662672059909082810876759794908280859267278012643721415525181742035575268828545264985719073906648423988025362830436097052284545390855979975379715670794611840445569953159949226040979488140338009716521891680864186319269283541430223507324653788299576841125915982260303740511389695355429733465290526040827561151526077107432413759366530562485130144090360271277291797703474683770104831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							529afe291573678c1e9e5c982017b5637b3ff45e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '829.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agihealtinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artistachingon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlingtonjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailtoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchanged.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freespeechforcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayeroticaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtocurepoisonivyrash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydratight.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadershipmonster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonmcintosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimecruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markcmillerlpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meketo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moso.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nylegalforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partialteeth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc-repairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petrusville.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulpfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queerniche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resellrightscatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salocalmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomefinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellersguide.realbrilliance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spontaneoushealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websterparish.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d82a8cc48000004030047304502201eb3bf012bf1b3731942e838b4f5ad09c7b19870189023c6492d66bb133077740221008789e4fa0fd99d4a3e05d7bdd200f01308b3a9fe0b5723ec9ae1f1fea8c07e3a0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d82a8cc4f0000040300483046022100e9743db13729e7db7144450ed3c548d5f5e5fdc500c89ca3e0cf809333d3ec62022100e48092640251f1cc58aa4882878d990a7cab7226d42b8346485bee2fa9d62188
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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