www.saskagriculture.net

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:31:74:6f:a9:fd:03:22:68:f2:e2:ac:85:37:31:9d:96 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.saskagriculture.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:31:74:6f:a9:fd:03:22:68:f2:e2:ac:85:37:31:9d:96
Serial Number (int): 407043447580486782186977999371675223825814
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:d8:96:ce:7d:32:0f:8e:ef:2f:b1:ef:7c:e4:e0:6a:37:96:bb:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:ed:45:9a:9d:db:63:1a:f2:f3:a9:db:08:7c:d3:6e:75:d0:14:1d
Fingerprint (sha256): 28:4b:be:a9:21:03:4a:24:35:eb:18:c8:15:1c:c8:f6:56:76:93:bf:ac:6d:b0:33:b6:c5:cd:63:85:aa:62:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.saskagriculture.net

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saskagriculture.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bering.yachts
cemac.net
debussy.us
earlyman.net
freehuman.net
girlmed.us
horra.news
jeana.net
jen.services
lungdisease.io
olyp.us
pressured.net
saskagriculture.net
shiva.business
thesecretwife.net
www.bering.yachts
www.cemac.net
www.debussy.us
www.earlyman.net
www.freehuman.net
www.girlmed.us
www.horra.news
www.jeana.net
www.jen.services
www.lungdisease.io
www.olyp.us
www.pressured.net
www.saskagriculture.net
www.shiva.business
www.thesecretwife.net

Other certificates including the domain name saskagriculture.net

(limited to 100 certificates)
www.saskagriculture.net

Certificate

The complete raw certificate details for www.saskagriculture.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBEKtUy6YQiK3W57XASI
3iDv5zkxBY9v0pi28X3Alx7HUzM3J0WkXNpxUWQ9eaQZ7Q7wefRA6560oUjFkhpZ
TxrnZrHIEW1suCKkv+z9nD2kfqGYgFyAB/ywAfLtYw+7WfarzGq0Qk+9NQ/B4XAc
qB0BP1k0uw+j1DoUvxwF17iU5HaKDBWHox88HXbM2yd+VCbBt1g1xNVZe7iByMLa
F1kEE32+7jN3i/PUsQQXA2aIfaXii6yFrkMPT4XxHKft7+c86M9nccJ/6gG6xT6N
toi/GIamWxLThoPM30rklEgjEAVmKzIUrPGnaSrs+Mtj5AVdOsCauu53D3/1sxeX
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407043447580486782186977999371675223825814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 18:25:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 18:25:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saskagriculture.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25256064632257217203861948070256586770113442400634498856566109303577375184854483261713318852783174503383450198347333908662720917006952746176625934758729643494220428660562497126202826501548037059928178235900841253353670918238237430858944555820208731859878864806749163882476117365345190972310440844599335264799391845337113581708695993865558642387376083753011617538626526738995687862926010344636760476135000620233320977333900627781968034743805257536095221372925645355580291146931314293079957900793880634592665088244714163288082754601350704436673422900358476002989125811618521291136509747460249925465434068894527354541907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2d896ce7d320f8eef2fb1ef7ce4e06a3796bbe9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bering.yachts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cemac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debussy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlyman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freehuman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlmed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horra.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jen.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lungdisease.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olyp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressured.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saskagriculture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiva.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretwife.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bering.yachts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cemac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debussy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlyman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freehuman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.girlmed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horra.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jen.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lungdisease.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olyp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pressured.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saskagriculture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shiva.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretwife.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895b0387fc000004030046304402207a72e63c280f246c40f392319e5236717b10b18ec5ac81e9a62d4880799ff1ec022060ab9535eeb360147514c2e193e6a1707d233d519f9a823478e44e86e77c7efb007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001895b03880f000004030047304502206985b165d1b7703ba71e7c3d1aaa6354298dc431a284079e386ac858c47915b3022100fdfa08da06dcdb40c1b2ed96cd48bac5de986d4a95f8b1e0b9641eb3a774a45c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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