xn--l-1ga.at.wwwcanna.com

Issued by R3

About this certificate

This digital certificate with serial number 03:cd:e0:a9:43:48:40:47:c2:18:10:cf:eb:d8:28:9c:ba:25 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--l-1ga.at.wwwcanna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:e0:a9:43:48:40:47:c2:18:10:cf:eb:d8:28:9c:ba:25
Serial Number (int): 331393368947943803427896907881382309313061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:c2:c3:c0:a0:7c:dd:18:72:c7:3d:23:05:64:ba:86:d9:12:3c:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:e9:0e:b6:f3:a8:5e:7d:38:bd:04:3e:4c:2a:7b:54:75:8c:e7:5b
Fingerprint (sha256): 47:31:28:86:b7:e9:28:af:4f:58:62:40:ff:49:44:d7:ba:dd:c5:ef:d8:9e:8a:81:6e:f1:e9:a7:74:80:b7:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--l-1ga.at.wwwcanna.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--l-1ga.at.wwwcanna.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beauty4vip.com
birth.net
hempartisan.com
jondavis.net
portlandhalfmarathon.com.civillines.in
siscum.com
sustainabillies.com
xn--l-1ga.at.wwwcanna.com
zombiewrangler.org.bestdruglawyers.com

Other certificates including the domain name wwwcanna.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for xn--l-1ga.at.wwwcanna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMVF4gPPEtUdNL8rZHKk
BdCXWY16LV1b8N2OX4wcGHiaqY3QEZwkz8cdeI/9mxxEcfuI33u0Ky1xAlhlwqZL
vMr7HLnLqPO+OKgli2K3C+26B4k9PE6jFFwZa94tadsswK3J/Fworl5l4xyoNR+p
V89bZWWGODtwraxJFZw22A8rNT6GnLTsRc0lFOGb9defH+u5yiYvr4u8btsagyzg
3/iY+crObTOADTCqY5mTbDBRomUUmdmeWc1QY1lDIbXoiFVuD2szmw619mcsvudH
MCV0W+zEBZHv2EmDji9dHERYQBdQLh1kqZylnS2lHBmOubyqTX9+MSnXQCq6oEve
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331393368947943803427896907881382309313061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 03:21:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 03:21:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--l-1ga.at.wwwcanna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21810267386217462706225962234978503871219463311941301146090223129843405522083797221038897869681884167435926032432067936372361001201731588411568897108634931712263625175390921633820071149064540309091782407685036962678266157257699987646169667323487096425003621231761988020493272328880849846983234098693918231413370857606222048826549391260965506393575051560982752048990891346054504560142842010461343627090509206612839481829019589177528424600821098047842221639078681167074957992599827428431553398731820891217761959559141520146851722939249862582913405628403273280724830100158555120376393910507532309884171328041522614230533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7c2c3c0a07cdd1872c73d230564ba86d9123caa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beauty4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempartisan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jondavis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandhalfmarathon.com.civillines.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siscum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabillies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--l-1ga.at.wwwcanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombiewrangler.org.bestdruglawyers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c47a9316b00000403004730450220367e348286e7612c980c55b7d6824f400d8cfd26601a243cce05a97258f7d712022100a4b0b39356420d75517fcc5bfe3610ec91c0d7c42e39b319806dbe1034a2581b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c47a93166000004030047304502202124961aaa4726a3debe63bd7ee25f904e4943422ea9247b6c15a888b5321943022100fb8699b578e46c67cc56c091c5677f1efc188638f71e655a8ea1bf8725b2b6a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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