windorontario.com.canibuild.site

Issued by R3

About this certificate

This digital certificate with serial number 03:09:19:5f:c6:4d:40:a8:44:6d:38:1e:87:59:a5:65:ea:92 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=windorontario.com.canibuild.site

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:19:5f:c6:4d:40:a8:44:6d:38:1e:87:59:a5:65:ea:92
Serial Number (int): 264433127087703050316420394584005297957522
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:f9:e1:17:c1:ac:53:0b:63:70:1c:15:74:0e:6e:74:b6:38:5a:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:62:3e:55:c4:8f:f6:c7:2b:75:bf:76:19:2a:72:5f:25:f4:0b:c0
Fingerprint (sha256): 5a:99:d4:77:5a:05:c6:c4:c1:fd:a1:1b:3d:d1:3e:43:45:bf:67:30:06:a3:46:c4:47:5e:bb:70:cb:ac:25:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate windorontario.com.canibuild.site

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for windorontario.com.canibuild.site

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amasxon.com
arbitrageurs.com
awsmsauce.com
lrrr.com.the-i-team.com
niyshah.net.buyingsellingcollectibles.com
queryabout.com
saintlouisreferral.com
supercroseissugarreimagined.com
tiktok.ambaalamps.com.gopphoto.com
windorontario.com.canibuild.site
xn--dgel-5qa.com
yourdigitallife.org

Other certificates including the domain name canibuild.site

(limited to 100 certificates)
canibuild.site
rollupyoursleeves.ca.canibuild.site
www.canibuild.tech
canibuild.site
erin-gee.media
canibuild.site
trail50.club
www.shop.gutrad.de
windorontario.com.canibuild.site
arbitrageedge.com.boothlaw.llc
canibuild.site
bryancurran.com
shuswapsoundjourney.ca
canibuild.site
canibuild.site
www.oaklandsportsdoctor.com
pensionloansscheme.com
www.bikecomm.com
norwoodcastings.ca
canibuild.site

Certificate

The complete raw certificate details for windorontario.com.canibuild.site in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/IttQqiBlgl/JdzgkT3+
B7VEGjknM3oTLWY2SxHfPQek7NYrvp+FI7hkOb91qTngV0r1CZSvX4jS4YZ4zoxR
4VCegoeaI3hI29F8T69MP016jbp5hy3S6rr1UieGez8BOu03GSdlz9FXD1TbbhPo
8GgZZ5kuxOgt/E8YVt9VPPA7o5dPi2J4Nog9azbMd/J565MyW9VP5sCA4XJD84YH
DhiGjEO33ruNo9TtpRx2RemZuLimZzZYx7ynxzeiJxXL4hg6tCCccEB121HcoW8o
qgiXon+YQtsSSkP/1/Jt0Jn63513aR1Ef/bgTcColshV1jXYx89H3XI8AuX0XWjm
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264433127087703050316420394584005297957522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 11:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 11:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'windorontario.com.canibuild.site'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31880806768218478769769755005607685332558803457840574133496426435932745171964684520486567724620415526709119868809370856074954628748518313232338168119665478075792401569136570164760982216468406470919201092793174149394861237490442925840660226775887003477422088563296377912742330241080876294819045906625526792458872018544988620179627582823230629404835315154496746973667958537406819374099735442817959174692963558589127725921002048884380080377017195323467900013323271662303235428154489231240162353987923850946663366467984410898440669838035633578143099162732804158681172724334516339609676758493462421896337954140505862891073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88f9e117c1ac530b63701c15740e6e74b6385a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amasxon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsmsauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrrr.com.the-i-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niyshah.net.buyingsellingcollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queryabout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouisreferral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercroseissugarreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.ambaalamps.com.gopphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windorontario.com.canibuild.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dgel-5qa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdigitallife.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9de40b130000040300483046022100e4909ef5b87b29bb8db8edaaf4530cc294d61d95b583b4ba5cfff63db4275464022100b43558d40f2d09a7fb378cd641b54bcb115b277ddf556e846a55071b57d53f08007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a9de40b160000040300463044022064c8a5cf9d215169dea30541732c5148fa506702a11041de333694bcb46bed4902201dd23a676b022da9de7e08b881faf05cae0226b8ee7f3edbd6d6fa02f7121fbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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