khmerwedding.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:3c:48:a1:d2:6b:b7:07:f2:1d:ed:d5:60:6f:a0:e9:0f was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=khmerwedding.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:3c:48:a1:d2:6b:b7:07:f2:1d:ed:d5:60:6f:a0:e9:0f
Serial Number (int): 321646967547546953915765643252349668485391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:9a:5f:e5:3e:bb:4f:8f:a8:68:fe:ae:3b:16:b7:04:96:14:8c:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:ac:c8:6a:e7:d8:65:48:8d:b0:da:3c:3d:05:3c:10:49:72:30:c6
Fingerprint (sha256): 2f:22:67:60:ec:35:20:7e:c6:ae:8a:18:8b:3c:12:a2:5e:74:ad:9d:ba:fc:11:7b:a0:fe:7a:a0:fe:7b:bc:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate khmerwedding.ca

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for khmerwedding.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.hoksavann.org
cpanel.khmerbuddhistassociation.org
cpanel.khmerwedding.ca
hoksavann.ghosananda.org
hoksavann.org
khmerbuddhistassociation.ghosananda.org
khmerbuddhistassociation.org
khmerwedding.ca
khmerwedding.ghosananda.org
mail.hoksavann.org
mail.khmerbuddhistassociation.org
mail.khmerwedding.ca
webdisk.hoksavann.org
webdisk.khmerbuddhistassociation.org
webdisk.khmerwedding.ca
webmail.hoksavann.org
webmail.khmerbuddhistassociation.org
webmail.khmerwedding.ca
www.hoksavann.ghosananda.org
www.hoksavann.org
www.khmerbuddhistassociation.ghosananda.org
www.khmerbuddhistassociation.org
www.khmerwedding.ca
www.khmerwedding.ghosananda.org

Other certificates including the domain name khmerwedding.ca

(limited to 100 certificates)
cambodiavipassanacenter.com
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
khmerwedding.vimuttimagga.info
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
cambodianview.com
www.cambodianview.ghosananda.org
khmerwedding.ca
khmerwedding.ca
ghosananda.org
khmerbuddhistassociation.org
keeninvestment.info
cambodianinterpreter.org

Certificate

The complete raw certificate details for khmerwedding.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaheOtRTapAm3ali7DTj
F6J3pBolnyLRWhOzokPe+k0wRmgQN0tnc1raQJXedYEj/uup3jE8gYQu9zGbC8ZD
3thKghA0jSw9P7ktuwt45GcxmJfpHVlhbxZvrg/GlPIKDrojTma/9QFXRCk1twYJ
GwQEOt4Q6ULO4TnUBkhzU+Oq0kX9gQpE2i9TC+MQWYZbiaAZkj92SwVMAQn5VtuO
hMmi1Y/fRuBm4c4SzZu6rf37yx5QTzoQNuUvjQDaNuGTTjBE0YMIV7G3CDxreUbZ
yudAMBvNn23DWPBnDFuHB0FeRDIsuzdwC7soq0GJH+0coLO9nS6V1IeArKwWtkiA
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321646967547546953915765643252349668485391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 05:47:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 05:47:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khmerwedding.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19902439276865178633023834645504346626505497971379780059226770688661741099776708419997579502327357350161327309972112352456610960187457516134383912766428700179303298767118141987370120061656338572704871179111718989301506282996493425059732456486362399523234047717648479933678531918019106513739025035185738498620521545759799148612936089868634366199238195848523615891020630241570133747140385053064968376953517818904111924903384104708759230765669230297120300602505077897018165411303375913046439464581413436363363843356737186414516015914030467487559304283936221742979204514003608896841096350156822279341210830903889701142621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							619a5fe53ebb4f8fa868feae3b16b70496148c74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (676 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.hoksavann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoksavann.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoksavann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerbuddhistassociation.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerwedding.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hoksavann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.hoksavann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hoksavann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoksavann.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoksavann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerbuddhistassociation.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerwedding.ghosananda.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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