canibuild.site

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:eb:61:9b:97:72:c8:44:61:2f:c0:7f:12:1c:c7:81:38 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canibuild.site

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:eb:61:9b:97:72:c8:44:61:2f:c0:7f:12:1c:c7:81:38
Serial Number (int): 408651715692703353769321973887667102253368
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:f5:bc:bb:a5:f2:76:74:a6:6e:5f:24:a0:56:6a:07:7a:7c:be:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:fb:df:74:33:a5:2a:a5:18:56:f8:64:58:6f:54:1c:92:9a:db:d2
Fingerprint (sha256): 35:6c:46:c9:35:5e:bb:70:72:8d:4e:e5:98:f1:ab:61:55:d3:50:25:e0:35:69:1c:fb:07:64:b5:fe:41:2a:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canibuild.site

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canibuild.site

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autotvshow.com
bentheimchurch.org
canibuild.site
fishandfit.com
iss-usa.com
lawyersfortworth.com
lenroot.com
mmafightslive.com
onetimespecialoffers.com
oxnardspa.com
rfidnetwork.com
see-you-at.com
shaadui.com
stjohnthebaptistparish.com
strongsuccess.co
sutsan.com
www.erieeffects.com

Other certificates including the domain name canibuild.site

(limited to 100 certificates)

Certificate

The complete raw certificate details for canibuild.site in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aby4t6vUU+/Io8jRFXZ
RUO7slqVeJhW9ircXe5zKw240wqnq7PgEChDVt15Ho5xpBcv2BINy5ISxKjK/mRh
EpbJrHxuEjzY9a1yDvg3RwtwtoNVN4YTzcMING7oI5SUaSBYnbD2aWp34DHQOCI5
JI1VzTY5FkxSkdbmsl4d132mOG9Kumq2iryfpSAAh448p6DYRSE4P4mnvFWQrU3p
QOVEjQANKlqT3SN+r9Ui8hDquyUbMaudrrz4HtN6n52AElWT2WKLai7FYyOe3nzs
+QYIlVZuJR0h0uwsGmAW8VYOvE0GwF7EnHyq9PnHBUb37ajjQQn/xEEWzf7YZtV3
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408651715692703353769321973887667102253368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 05:00:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 05:00:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canibuild.site'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27980990906399991110789933501538571530859879598939292071457141651614594621075812403743411955267384423163610332867499550466472083980267684286952935506802869631627440249535219161644611708670800073678800136975742564438919941524127094593020937622798631351112572736930394866732669360756402070570490399542304629197093092229683837980763534793880632168845821918902106662387474955839091169318971008322343377714326718814321779575582815822631965644499663761094320575706721810811802438173890601588034996606617948751451187086615285732874579802861336411233144862032555448579262667411873876149111698541988234263445447972119526078251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbf5bcbba5f27674a66e5f24a0566a077a7cbe5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autotvshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentheimchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishandfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyersfortworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmafightslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetimespecialoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxnardspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfidnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'see-you-at.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnthebaptistparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongsuccess.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sutsan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erieeffects.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbff40552000004030047304502206fb8704ca75367f8a0223ca6dc4d8cfb76fc6dce0d22f762b6d04c13900623d1022100f1a1622797949a851e54c6e7bc04d60fcccf19f46d238e289ff52202ac7fc33600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbff4074a0000040300483046022100c02026bc033dbd1b153d6a2d95b9f6712684d643a1c8761823a60fbd8f6b6c8e022100f50506fe53f936cbf800805fe1efc6420cd43571b230905b82368446e6443fde
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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