thegana.services

Issued by R3

About this certificate

This digital certificate with serial number 03:7f:c8:ee:df:6d:26:93:54:ea:80:39:fa:7b:da:8f:9c:70 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thegana.services

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7f:c8:ee:df:6d:26:93:54:ea:80:39:fa:7b:da:8f:9c:70
Serial Number (int): 304819804291674389135127199488467138485360
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:28:e6:c7:0f:4c:51:91:2d:e8:ff:ac:98:4b:7d:1a:5f:5e:8f:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:86:97:b2:90:31:07:aa:30:82:9f:f4:0a:b8:ee:ee:cf:69:6d:57
Fingerprint (sha256): 53:bd:d3:49:d2:bf:c6:29:4b:0a:6a:44:51:e1:6e:b1:a0:ba:bb:21:37:66:53:f6:1f:19:5c:5c:c6:ca:ab:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thegana.services

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thegana.services

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thegana.services
thegana.services

Other certificates including the domain name thegana.services

(limited to 100 certificates)
*.thegana.services
*.thegana.services
test.clasificados.elheraldodechihuahua.com.mx
*.thegana.services
thegana.services
*.thegana.services
develop.merchscale.com
globalchances.de
www.agrolocal.co
console.thevillageco.com.au
app.litorgize.com
*.thegana.services
group.tlpp.me
app.teacherswitch.ch
www.wordy.co.kr
thegana.services
www.copafacil.com.br
*.thegana.services
*.meroawaj.com
www.twilightbeautyspa.in
*.thegana.services
daway.in
taktikom.net
lf-cast-develop.pearsports.com
www.ksmjobs.org
www.octanejeans.com.ar
*.thegana.services
*.thegana.services
app.hiblocks.io
*.thegana.services
vglista2022.no
thegana.services
www.fantasynamemachine.com
backend.benellicaddy.com
www.adikaraorganics.com
*.thegana.services
staging.agent.aeroglobe.pk
*.thegana.services
www.vibewave.app
dashboard.rewego.com.br
www.vibewave.app
connect.cooeyhealth.com
*.thegana.services
*.thegana.services
share.thegana.services
*.thegana.services
inventory.morninglavendercafe.com
www.crea.ninja
acepictures.in
unitedbyblood.com

Certificate

The complete raw certificate details for thegana.services in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISA3/I7t9tJpNU6oA5+nvaj5xwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MTgxMDE0MTFaFw0yNDA3MTcxMDE0MTBaMBsxGTAXBgNVBAMT
EHRoZWdhbmEuc2VydmljZXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCCN033IoVEG8DfrAoWQWpjKnTNmXtCVRves7SSjBgHi2C6x4MsMzAnB5AES2QQ
1+9O8DMCGRNszZoXQ6tsEqht0UejU1aHUVXTVa+cpBwu7GaGAIUOr4X127vEzYsW
bZ23YS25SATrWQqXRz92ZaTDEtkNwWs4cIeAUPdp0n4hqouhbUEnkjJprBbqbXrj
zjDxa8VFFN44ZgEtDb4A8CXGlUt0j2R1xnMm80uGScXarnn54FKffd7UHSm+NiG2
Ic/mcucFG98KpKqqJoaZesGFsRlyEMp9Lvev69TykWaRtY6KdguBn2bz6P3YCMvN
rUTX8GPTkzfOje4ICJGED/DTAgMBAAGjggImMIICIjAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFOQo5scPTFGRLej/rJhLfRpfXo9QMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMC8GA1UdEQQoMCaCEioudGhlZ2FuYS5zZXJ2aWNlc4IQdGhlZ2FuYS5zZXJ2
aWNlczATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjvDqAj4AAAQD
AEcwRQIgR/q5UhYPtuA6gTzxCjaX83QeZcM4KkmNyosCRFfz4fwCIQDF4ukWew4f
izcMdMT21fp8J2reR7OJ3Xm6FJaAuLl37wB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABjvDqAjQAAAQDAEcwRQIhANI0e8fmDtHg8cmew7HlM8B3
eL9m3ANVhdKf5vyZqXDXAiBZJnlOjtc6vlbum6tIF8+DzVlE7QE6z7qSjtjMnaDF
5DANBgkqhkiG9w0BAQsFAAOCAQEAr0XAj8yywBDShCgFz1C4xSSDcLtAMdr899AF
RScTaMNqtF9pB0WNmzz6jaS2703tlrCTH3bVaGESA3y5eD1U1cjI3ntc8uvmEzYy
ziAwEEgiXj2JvBCjxqnrULMj19afl44g5GNdlfhTn0Sx46zYv/SDNSdLMm/+cakK
w8HkjtCptlX4lEeNnp8flR0Gt0j2ecEapvFkEeeS7Nj9Dw8Y7gYH3R0KIuUpASIb
j2txCpUcPW8Y9WCUE0btOPWsUn252DwI7mUpgCFqgeGDbIF1398qG/4kFd+r7hcq
l7uImybAh6wb4bSDodg/hrpQaaBwHmpUhaeO55T4IymkalA9hw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjdN9yKFRBvA36wKFkFq
Yyp0zZl7QlUb3rO0kowYB4tguseDLDMwJweQBEtkENfvTvAzAhkTbM2aF0OrbBKo
bdFHo1NWh1FV01WvnKQcLuxmhgCFDq+F9du7xM2LFm2dt2EtuUgE61kKl0c/dmWk
wxLZDcFrOHCHgFD3adJ+IaqLoW1BJ5IyaawW6m16484w8WvFRRTeOGYBLQ2+APAl
xpVLdI9kdcZzJvNLhknF2q55+eBSn33e1B0pvjYhtiHP5nLnBRvfCqSqqiaGmXrB
hbEZchDKfS73r+vU8pFmkbWOinYLgZ9m8+j92AjLza1E1/Bj05M3zo3uCAiRhA/w
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304819804291674389135127199488467138485360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 10:14:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 10:14:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thegana.services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16438251336721334873844610944340145954069596857992285655385218031403789073555250055937670570021541036199892438259359637231516203177080668877842213456903630838467309450934181687777794643128523985649449045574403577143188622772494126682852894773728225824810117319783299395001484587573543802935209179112261077034933906680632736778395018727947088519580908985294039326081091564211174504242729233712265628201300264613027226537326212556371085177617803143321970241111642396183095817683431490673601893144748463984098116309831638080090300770572176876959157986581759778397888585784779324510819778642671970497630964469874822213843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e428e6c70f4c51912de8ffac984b7d1a5f5e8f50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegana.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegana.services'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ef0ea023e0000040300473045022047fab952160fb6e03a813cf10a3697f3741e65c3382a498dca8b024457f3e1fc022100c5e2e9167b0e1f8b370c74c4f6d5fa7c276ade47b389dd79ba149680b8b977ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ef0ea02340000040300473045022100d2347bc7e60ed1e0f1c99ec3b1e533c07778bf66dc035585d29fe6fc99a970d702205926794e8ed73abe56ee9bab4817cf83cd5944ed013acfba928ed8cc9da0c5e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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