cannatrition.com

Issued by R3

About this certificate

This digital certificate with serial number 04:41:78:96:50:1f:c5:11:1b:d0:3f:81:f9:22:4a:62:47:34 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cannatrition.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:78:96:50:1f:c5:11:1b:d0:3f:81:f9:22:4a:62:47:34
Serial Number (int): 370727785406034787400602644740727388653364
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:74:41:d0:d5:5a:26:7f:13:ba:42:27:05:93:ff:ae:0d:4c:12:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:c6:d5:f6:2e:e8:de:c4:d5:e5:10:80:bc:e2:e0:23:ff:e1:38:40
Fingerprint (sha256): 4a:b1:09:13:5d:62:de:ac:22:1d:67:21:c6:fe:6d:f5:42:27:1f:72:54:60:69:20:f0:2a:6b:d5:ee:cd:02:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cannatrition.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cannatrition.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cannatrition.com

Other certificates including the domain name cannatrition.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cannatrition.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370727785406034787400602644740727388653364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 13:14:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 13:14:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cannatrition.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743594298395393551454274875358454690244416609607641092021685693873865765302667602975386102671488527310301173379362570470412429849944967269815860251899357812843544741195497247567819803622575797427683029940939046297558386631144798696356859965691239389499898322341424252153861669373995045681987083884208740598358935320422505643884038550345895622838448850686314603170710906952086486491358149372832638973155587328272497535757529963447636499809610980651375113051983433927786607572151807279829357911271239876710346189650784833848211618920506853092432934473537863427238040549695549786532384413176831107602324399050403219846692577865371116693966166679818427519978915786355168314549709787541941669857926006396722598418606732359369912158280734554825236120730704439328874546606710864291970580518294884516759499767991230862644211616528587805131682908728672581710847578567338089283585282957886071111205332240936260981075098297200042773719198759190795506063577425561757196663160935274097393357225598535811453656864137045304325526558046266828267836229904588213603186157534193510162132711551196318532550340131992312822826609360395065640606614905034801047303421767057620417827545075115025267286829767131229159586393821154089683839090610552351443856373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							327441d0d55a267f13ba42270593ffae0d4c12c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannatrition.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a5118ad4e00000403004630440220046ed76382b8fcdca28591ab65d1c7f6ef426143b13e9583be300593339a588c02205526e51558ad6808295f083214ca5a0ea043aaf74e70f3f0b6843c27eea1c923007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a5118ad660000040300473045022100acfb06f8040954025b6920415e0f3376d6ffb1bc660e214b22e96f585f79048602205e67ba4019b4d65da7b33be39293f865c38227ab61a4cc95f34c39e323995b2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00176892ddfe8aeace49fe6a3396a352b549dbd59c0ec1f6c31b29cdb32d151b32dd95e30bb6ece0850d0cf69d3874fcf1787686f2a1b7cdf39c8929d43049faf333a0e57107067103bc1840c05efe9b6bbb149ede2786cb4abd4d4a82f56fd5c2517b54117aca02774be8c17d68c01955c9709b33dd22130fb92c87ac3e0e5d18be7d05e11e972cd7cd3f69b494c75273586e00d5679c261eff41b173c27b11d80e64c514bf14c4650c1e46e5d78ec6ee39a69181bd8db641cd3c21c64ad4617b438b76867def0e09e5c286c5c012010bc419473e270939a39db3219267d42d95b72babc7d84d73f523c04bcf07765ef48153e608b7cccfab5b1a2c749b3fdd2e