www.landproject.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:3d:f0:4f:05:25:2f:8f:93:56:c8:bf:04:73:25:57:31 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.landproject.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:3d:f0:4f:05:25:2f:8f:93:56:c8:bf:04:73:25:57:31
Serial Number (int): 314843520063575014874446020146399315056433
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:61:bc:eb:1e:dc:5c:ff:b3:89:04:43:f0:dd:b0:4b:f9:09:b3:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:fe:ca:66:43:3e:88:cc:11:a3:58:23:46:fd:c6:fa:b8:84:1c:6d
Fingerprint (sha256): 57:f6:1d:d1:3d:47:71:15:6e:fc:44:1a:75:4a:f3:b6:ca:7a:cd:93:2e:b8:25:50:52:33:b9:74:a4:f8:42:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.landproject.ca

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.landproject.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

349.me
564.me
abstracted.ca
bureaucrat.ca
cabi.store
contraction.ca
costablanca.live
decypher.ca
digitalassistant.ca
dolls.llc
gardenclubofamerica.org
landproject.ca
ptr.ca
supportourfarmers.ca
themajority.ca
www.349.me
www.564.me
www.abstracted.ca
www.bureaucrat.ca
www.cabi.store
www.contraction.ca
www.costablanca.live
www.decypher.ca
www.digitalassistant.ca
www.dolls.llc
www.gardenclubofamerica.org
www.landproject.ca
www.ptr.ca
www.supportourfarmers.ca
www.themajority.ca

Other certificates including the domain name landproject.ca

(limited to 100 certificates)
www.landproject.ca

Certificate

The complete raw certificate details for www.landproject.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMdIT36Q/FdEkfsjnCT5
eZ8GT/aErRTZ+XNSMEsSTmVRZmfEWwVfAVOQ35H2RGt4cj+p9wjf3ATU9pVZLk2L
SU2P7V6oJfDIUvzaadYaa2WsNYymN4UhgxXGABoirjbE+xZHrD3DtuYcmhtEaUYu
msLT0lNNljTxExkMvPpPHESYI51VVC46JoPdOZvFRmWHy3UAT4uvHZlLgvKbTNyk
Ktfrc8rm+xA6FZ1C+/s95duOsaJ98Rwv+IRkBYN0vFmGGZvNG9CnemmBJOUmPFfk
Jg8qAQsf+nHxalFm+SyIzL88B+Ov0zkXax7xNVWItmj4dliGQmWRD1mKn42Ow4KD
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314843520063575014874446020146399315056433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 13:27:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 13:27:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.landproject.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25345930838278527443626872130091133550431140770461216683607940838488763787321487997413118382700661213033123389384974670159496002414602915410748516310343362760968771889640758325169383284259650456031847454261649566592356239236890501456863585077980134614427696292585256099202580827633638444988437144244815939617035517607596038623554774180439732441989015477456803279898875036217492986626682709719891533646137782604721323593679763852580157966039493834140845655482191756756286989806094734605613909488016935188200519580916627083033659738569512913322674496347542252539202603734815470391243104504092854357792969069180240429921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5761bceb1edc5cffb3890443f0ddb04bf909b330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '349.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '564.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abstracted.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureaucrat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contraction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costablanca.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decypher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalassistant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolls.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenclubofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landproject.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportourfarmers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themajority.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.349.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.564.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abstracted.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bureaucrat.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contraction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costablanca.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decypher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalassistant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolls.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardenclubofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landproject.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportourfarmers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themajority.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894a7fb6880000040300483046022100fca047a3662eed830b24cdca12a56ffc335277c2dfbde78ef2342894744960d00221008b3285c3929f94616e9600b78f7d894c83d8aad1fa6eda1cf5e084509d768456007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894a7fb68600000403004630440220445508171b240e9d2e7e6e4a33783656cfc8671dbacbbd738e6566fad61670af022027daa32d4e0e73282ca068636651f7f78b4fb26ca5ad62b5792bbdd14fa3fe45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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