xn--l-1ga.at.wwwcanna.com
Issued by R3
About this certificate
This digital certificate with serial number 03:cd:e0:a9:43:48:40:47:c2:18:10:cf:eb:d8:28:9c:ba:25 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=xn--l-1ga.at.wwwcanna.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cd:e0:a9:43:48:40:47:c2:18:10:cf:eb:d8:28:9c:ba:25Serial Number (int): 331393368947943803427896907881382309313061
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e7:c2:c3:c0:a0:7c:dd:18:72:c7:3d:23:05:64:ba:86:d9:12:3c:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e2:e9:0e:b6:f3:a8:5e:7d:38:bd:04:3e:4c:2a:7b:54:75:8c:e7:5b
Fingerprint (sha256): 47:31:28:86:b7:e9:28:af:4f:58:62:40:ff:49:44:d7:ba:dd:c5:ef:d8:9e:8a:81:6e:f1:e9:a7:74:80:b7:db
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate xn--l-1ga.at.wwwcanna.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xn--l-1ga.at.wwwcanna.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beauty4vip.com
birth.net
hempartisan.com
jondavis.net
portlandhalfmarathon.com.civillines.in
siscum.com
sustainabillies.com
xn--l-1ga.at.wwwcanna.com
zombiewrangler.org.bestdruglawyers.com
birth.net
hempartisan.com
jondavis.net
portlandhalfmarathon.com.civillines.in
siscum.com
sustainabillies.com
xn--l-1ga.at.wwwcanna.com
zombiewrangler.org.bestdruglawyers.com
Other certificates including the domain name wwwcanna.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for xn--l-1ga.at.wwwcanna.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISA83gqUNIQEfCGBDP69gonLolMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDgwMzIxNTlaFw0yNDAzMDcwMzIxNThaMCQxIjAgBgNVBAMT GXhuLS1sLTFnYS5hdC53d3djYW5uYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsxUXiA88S1R00vytkcqQF0JdZjXotXVvw3Y5fjBwYeJqpjdAR nCTPxx14j/2bHERx+4jfe7QrLXECWGXCpku8yvscucuo8744qCWLYrcL7boHiT08 TqMUXBlr3i1p2yzArcn8XCiuXmXjHKg1H6lXz1tlZYY4O3CtrEkVnDbYDys1Poac tOxFzSUU4Zv1158f67nKJi+vi7xu2xqDLODf+Jj5ys5tM4ANMKpjmZNsMFGiZRSZ 2Z5ZzVBjWUMhteiIVW4PazObDrX2Zyy+50cwJXRb7MQFke/YSYOOL10cRFhAF1Au HWSpnKWdLaUcGY65vKpNf34xKddAKrqgS94FAgMBAAGjggLJMIICxTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFOfCw8CgfN0Ycsc9IwVkuobZEjyqMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIHRBgNVHREEgckwgcaCDmJlYXV0eTR2aXAuY29tggliaXJ0 aC5uZXSCD2hlbXBhcnRpc2FuLmNvbYIMam9uZGF2aXMubmV0giZwb3J0bGFuZGhh bGZtYXJhdGhvbi5jb20uY2l2aWxsaW5lcy5pboIKc2lzY3VtLmNvbYITc3VzdGFp bmFiaWxsaWVzLmNvbYIZeG4tLWwtMWdhLmF0Lnd3d2Nhbm5hLmNvbYImem9tYmll d3JhbmdsZXIub3JnLmJlc3RkcnVnbGF3eWVycy5jb20wEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/lagL6nTDr HFIBy1bdLIHZu7+rOdiEcwAAAYxHqTFrAAAEAwBHMEUCIDZ+NIKG52EsmAxVt9aC T0ANjP0mYBokPM4FqXJY99cSAiEApLCzk1ZCDXVRf8xb/jYQ7JHA18QuObMZgG2+ EDSiWBsAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxHqTFm AAAEAwBHMEUCICEklhqqRyaj3r5jvX7iX5BOSUNCLqkke2wVqIi1MhlDAiEA+4aZ tXjkbGfMVsCRxWd/HvwYhjj3HmVajqG/hyWytqkwDQYJKoZIhvcNAQELBQADggEB ALV0NxZM9HCE7VS1ZE7MEoQ+TPQTM0qNYft++4EFYS092g4lpJ6ilgH637B+TPsv 3y+SIk7nXFROL3VSszWqBAa8G76nsIH9H9vQFtMUUFyyXLwPDcWnGEABqT31ZRpP Wg+8apF6lx5Vy47pI08R/Q1HyKKTi20X72NuMfW9v2o+GeCakKRlcbnnm1/r1fWs WAQ4HtNjjQt6pLGnge0GIQktTarxjlFp1y3WhNrtFbLY7zz1q5xXy5jqcOrMaPAQ o8jNt5H7rmcb6cYSu7TfVolms8Oi47xQ5JKmZWvjNhuYt4vN7eIa25UfA3wSC+rC S9uxMHo64eqdwYMa/vEbroc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMVF4gPPEtUdNL8rZHKk BdCXWY16LV1b8N2OX4wcGHiaqY3QEZwkz8cdeI/9mxxEcfuI33u0Ky1xAlhlwqZL vMr7HLnLqPO+OKgli2K3C+26B4k9PE6jFFwZa94tadsswK3J/Fworl5l4xyoNR+p V89bZWWGODtwraxJFZw22A8rNT6GnLTsRc0lFOGb9defH+u5yiYvr4u8btsagyzg 3/iY+crObTOADTCqY5mTbDBRomUUmdmeWc1QY1lDIbXoiFVuD2szmw619mcsvudH MCV0W+zEBZHv2EmDji9dHERYQBdQLh1kqZylnS2lHBmOubyqTX9+MSnXQCq6oEve BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 331393368947943803427896907881382309313061 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 03:21:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 03:21:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--l-1ga.at.wwwcanna.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21810267386217462706225962234978503871219463311941301146090223129843405522083797221038897869681884167435926032432067936372361001201731588411568897108634931712263625175390921633820071149064540309091782407685036962678266157257699987646169667323487096425003621231761988020493272328880849846983234098693918231413370857606222048826549391260965506393575051560982752048990891346054504560142842010461343627090509206612839481829019589177528424600821098047842221639078681167074957992599827428431553398731820891217761959559141520146851722939249862582913405628403273280724830100158555120376393910507532309884171328041522614230533 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e7c2c3c0a07cdd1872c73d230564ba86d9123caa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauty4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birth.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempartisan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jondavis.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandhalfmarathon.com.civillines.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siscum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabillies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--l-1ga.at.wwwcanna.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombiewrangler.org.bestdruglawyers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c47a9316b00000403004730450220367e348286e7612c980c55b7d6824f400d8cfd26601a243cce05a97258f7d712022100a4b0b39356420d75517fcc5bfe3610ec91c0d7c42e39b319806dbe1034a2581b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c47a93166000004030047304502202124961aaa4726a3debe63bd7ee25f904e4943422ea9247b6c15a888b5321943022100fb8699b578e46c67cc56c091c5677f1efc188638f71e655a8ea1bf8725b2b6a9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b57437164cf47084ed54b5644ecc12843e4cf413334a8d61fb7efb8105612d3dda0e25a49ea29601fadfb07e4cfb2fdf2f92224ee75c544e2f7552b335aa0406bc1bbea7b081fd1fdbd016d314505cb25cbc0f0dc5a7184001a93df5651a4f5a0fbc6a917a971e55cb8ee9234f11fd0d47c8a2938b6d17ef636e31f5bdbf6a3e19e09a90a46571b9e79b5febd5f5ac5804381ed3638d0b7aa4b1a781ed0621092d4daaf18e5169d72dd684daed15b2d8ef3cf5ab9c57cb98ea70eacc68f010a3c8cdb791fbae671be9c612bbb4df568966b3c3a2e3bc50e492a6656be3361b98b78bcdede21adb951f037c120beac24bdbb1307a3ae1ea9dc1831afef11bae87