ventosa.xyz.mamaweed.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:8f:ba:a3:4b:d0:f1:fb:59:bf:1f:03:73:22:f9:54:40 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ventosa.xyz.mamaweed.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:8f:ba:a3:4b:d0:f1:fb:59:bf:1f:03:73:22:f9:54:40
Serial Number (int): 431328807571481506659786769173650926556224
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:cf:d8:0d:a3:bb:3c:89:ce:de:20:83:c8:f0:31:0b:4b:4b:b2:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:78:62:df:1b:49:85:a2:be:72:33:2c:ea:0f:af:c3:13:26:83:80
Fingerprint (sha256): 2b:15:7d:20:e6:29:f5:fc:15:b0:6a:f7:56:bf:be:48:e7:21:e7:6f:11:ce:6f:3a:6f:cb:4d:e0:47:d5:64:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ventosa.xyz.mamaweed.ca

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ventosa.xyz.mamaweed.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

292.cool
allgreenrecycle.com
altaim.com
collegealabama.com
institutdebeaute.com.evangelicalteachertrainingassociation.org
kathleenspiano.com
losamerica.com
lotto-hessen.com
millersonstreeservices.com
orbain.com
orlandoofficiant.wedding.lotteryla.com
saeatsout.com.baitcatching.com
ventosa.xyz.mamaweed.ca

Other certificates including the domain name mamaweed.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for ventosa.xyz.mamaweed.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbwqTqXlGcNdHGzIjBsA
Wmbe1dicoqq/P54w/KIUSDoFcmZx5bYClKeVw0zTeTj73MRvQB2K8x76V2gCMo5e
bMl3CQ0q44nkpDGC6h9mV21BbY8vyKcUzZLBE1buAPNdU93IEbyDOyvRGQFnmQJd
Q5CuioUP6EmyGjYXUUMXy/NgqZLNseDGzyDJsGKm4aihCsGjr4cf2SXqTJwAIBdI
n9gdFMykaxtQcxNbTWGPb2IEiCI4TgYramCJ3TirbmKop92V2Ch+xq39iCqniuJQ
/4CMkOLhgM3Wqvck8t0eonOEJnlhVCbyEy5ZL0+nqGDGrLn0Qpr3H1WvUVOg4tNU
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431328807571481506659786769173650926556224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 15:26:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 15:26:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ventosa.xyz.mamaweed.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24961733827535390561348695445692921489344277939752960434369529461780294716501825278436928163756349252012463458317674629129100874170755279324052126396879395370725607316341181905811691316657518173281022183035810665889828606398148666479275231737091164025481509488524704644773499264936340490410695281485626658705528713355548513198733246056888982467490819676823240870596111947803900343570233769514778994299586715296715267474299846549172850981138116854709913124507572424942539164126785472927367689843427194765425263463364312316499344414432472363057896666829862326058000755911624196277982120438888778564627124791159119107237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87cfd80da3bb3c89cede2083c8f0310b4b4bb232
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '292.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allgreenrecycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegealabama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutdebeaute.com.evangelicalteachertrainingassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathleenspiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotto-hessen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millersonstreeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandoofficiant.wedding.lotteryla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saeatsout.com.baitcatching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventosa.xyz.mamaweed.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa91d0deb00000403004630440220136f3489698949153b7e6b9b0acf2ca10a783139ef7f4d63f931585b6747cc0c022031f48eb1c698e5cb9945c3e956886f82311ead3f7dcd8665103a23dd9f0702900076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa91d0e150000040300473045022100e51b5203de2b47b2b50758682843138314d177666286e669e61fa0cc1a189b2c02201ae3ce09f3a4b96e12e9b13e3652035a9e600186520aab9005846d1e7e0ec960
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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