canafoundation.org
Issued by R3
About this certificate
This digital certificate with serial number 04:7a:6f:f6:52:54:27:1e:59:87:08:17:7a:80:53:89:a6:ac was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=canafoundation.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:7a:6f:f6:52:54:27:1e:59:87:08:17:7a:80:53:89:a6:acSerial Number (int): 390112415773779664115090551715399838836396
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6a:07:4b:0d:62:55:a4:50:bd:66:0a:c6:dd:be:1a:2f:af:8f:de:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f7:49:c4:6f:ae:35:db:fb:ab:60:df:43:c3:48:19:10:46:dd:2f:ea
Fingerprint (sha256): 51:2c:13:18:b8:72:02:c5:14:3e:4c:3d:9d:67:39:14:e5:6b:53:8c:78:20:78:28:4f:93:5e:94:18:ca:95:cf
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate canafoundation.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canafoundation.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canafoundation.org
www.canafoundation.org
www.canafoundation.org
Other certificates including the domain name canafoundation.org
(limited to 100 certificates)
canafoundation.org
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
sni.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
static.canafoundation.org
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
static.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
demo.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
demo.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
sni.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
static.canafoundation.org
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
static.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
demo.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
demo.canafoundation.org
ssl381742.cloudflaressl.com
Certificate
The complete raw certificate details for canafoundation.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISBHpv9lJUJx5ZhwgXeoBTiaasMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDQwOTQzMzhaFw0yNDA3MDMwOTQzMzdaMB0xGzAZBgNVBAMT EmNhbmFmb3VuZGF0aW9uLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJvvtPAIlvs8FYNWq5fGJgsrobC8FJXXGB30MIpFQrK7uO4jVuq5X/LQOz+ PJV+vcTAd+lSmlVNJeJ5lwzC8B/aHBMU1Pzep8dFbY36rYoGhJhOedha0zNoDocP Ybtc0b+yL0AgCzyBcfwyGxcaOQMsDh/yZa0GTVqZ8mcmgXwgqy+c50Q3emcaCO31 FpTW7SWf5XUNDDMta1WogK1tpz1g+vg+HSoq0QL18diebk26LGLuhwbdWmUDKeBo Gxklg5t4AnSKfyVVfTa2ILqRWQmOJxaNx18YkzJkxltGN5Wb0Cl2hXH4yFGT+BHM l5Yk1mRJIsKIuH6VbYAsV7EYTP0CAwEAAaOCAiowggImMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUagdLDWJVpFC9ZgrG3b4aL6+P3icwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wNQYDVR0RBC4wLIISY2FuYWZvdW5kYXRpb24ub3JnghZ3d3cuY2FuYWZv dW5kYXRpb24ub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHWeQIE AgSB8wSB8ADuAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGO qLUCNgAABAMARjBEAiBsuNNG43RL0t4DDjWpcBEQtM6/SddZ2bemRxrQbbwrxgIg UR0iNn5X+GI7vcOrlr1j0E8x/rHz3aoLxZ4xNH3R3JkAdQDf4VbrqgWvtZwPhnGN qMAyTq5W2W6n9aVqAdHBO75SXAAAAY6otQL2AAAEAwBGMEQCIBhb8d6LvvwWUD6e 0KKsMwd6sdzedkAszJO5p8LqU/c7AiAiixbUpx63WHRXiwEoR8glxkITd9rNDn5S xImsHi66zjANBgkqhkiG9w0BAQsFAAOCAQEAhQl5aOslF9rN5mjgbAzix8riHzuw F2ZDG/9n6NFkR1U19+tit59+Ba9ad5Be7rGqkJad5Yv57rC6zaYs0ThwmFNNrUdN 8qV9J3huoCSHGx7Z5sYmANm4e/uzO+MS9pSwNqeLBd64yJoXCsHwugUMESj99LA2 QQUMEe1RzVZO9F+PU5Z9XmPzjnS30n7XFwMblseiA2NUA+GJMyS0dMm62wS6uPL8 oFGHmCg/2nVaI3WmBFUbo+gYUQeTHb9n719N/w0PCrD62VuAv1kH/r/Wi9cj3wRC ct1jartS0Ff2bsyR+khQuNfS7jViFfVAPP3TCeD5ZE4p/GUG3+GVx3sRcQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm++08AiW+zwVg1arl8Y mCyuhsLwUldcYHfQwikVCsru47iNW6rlf8tA7P48lX69xMB36VKaVU0l4nmXDMLw H9ocExTU/N6nx0VtjfqtigaEmE552FrTM2gOhw9hu1zRv7IvQCALPIFx/DIbFxo5 AywOH/JlrQZNWpnyZyaBfCCrL5znRDd6ZxoI7fUWlNbtJZ/ldQ0MMy1rVaiArW2n PWD6+D4dKirRAvXx2J5uTbosYu6HBt1aZQMp4GgbGSWDm3gCdIp/JVV9NrYgupFZ CY4nFo3HXxiTMmTGW0Y3lZvQKXaFcfjIUZP4EcyXliTWZEkiwoi4fpVtgCxXsRhM /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 390112415773779664115090551715399838836396 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 09:43:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 09:43:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canafoundation.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22525522003592442170371102904189189549214562749995146507704119523551118070866409285722445899654957254349161721574275127695817256582181907226832463009239976733045911945584100944492426053868581131514863633391391717459220898270767960636709144710195853922516651044014105426255737037771964703688212670146765556939295360990093496209367446739216405444692359372209903408313849202980193390250499806033248516292996654557186490625059863005182697922439134866852250268736364106953842384333851066449077895759924284537054991184052255373170574910182973619770677944746787564849240464530028009280504094070790669423200334750570912435453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a074b0d6255a450bd660ac6ddbe1a2faf8fde27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canafoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canafoundation.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea8b50236000004030046304402206cb8d346e3744bd2de030e35a9701110b4cebf49d759d9b7a6471ad06dbc2bc60220511d22367e57f8623bbdc3ab96bd63d04f31feb1f3ddaa0bc59e31347dd1dc99007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea8b502f600000403004630440220185bf1de8bbefc16503e9ed0a2ac33077ab1dcde76402ccc93b9a7c2ea53f73b0220228b16d4a71eb75874578b012847c825c6421377dacd0e7e52c489ac1e2ebace . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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