canafoundation.org

Issued by cPanel, Inc. Certification Authority

About this certificate

This digital certificate with serial number 8c:65:ae:1b:73:47:6b:b2:16:ca:d7:73:75:b5:25:86 was issued on by cPanel, Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canafoundation.org

cPanel, Inc.

Organization: cPanel, Inc.
State / Province: TX
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8c:65:ae:1b:73:47:6b:b2:16:ca:d7:73:75:b5:25:86
Serial Number (int): 186619872706708781513829246068027893126
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:a6:9a:b5:67:8d:24:be:3a:1b:64:65:a7:30:26:c3:a4:30:b3:25
AuthorityKeyId: 7e:03:5a:65:41:6b:a7:7e:0a:e1:b8:9d:08:ea:1d:8e:1d:6a:c7:65

Fingerprint (sha1): 24:ad:b8:c0:ed:f9:22:dd:60:51:e7:fe:d7:d0:02:03:fa:66:2a:2a
Fingerprint (sha256): 5b:5e:9d:5d:bc:48:d3:c5:45:c8:99:94:db:e1:ff:15:26:83:ce:55:09:7e:53:6a:87:7c:c5:42:a1:22:46:35

Issuing Certificate URL: http://crt.comodoca.com/cPanelIncCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl

Check the revocation status for certificate canafoundation.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canafoundation.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canafoundation.org
cpanel.canafoundation.org
mail.canafoundation.org
mail.mycanaprojects.org
mycanaprojects.org
webdisk.canafoundation.org
webmail.canafoundation.org
www.canafoundation.org
www.mycanaprojects.org

Other certificates including the domain name canafoundation.org

(limited to 100 certificates)
canafoundation.org
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
sni.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
static.canafoundation.org
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
static.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
canafoundation.org
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
canafoundation.org
canafoundation.org
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
demo.canafoundation.org
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381741.cloudflaressl.com
ssl381742.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
ssl381740.cloudflaressl.com
demo.canafoundation.org
ssl381742.cloudflaressl.com

Certificate

The complete raw certificate details for canafoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoasUh/04l6Ek/zwzAHdc
7TKgXmPtjCl0hkyYKhe3pwIcTUdcJhiHEk1S8Tq0RVrcIBaC/nuIv9y4pR1+rOqt
Yy42kxDMdyIrhC+99/l1wJcajeuqdeGI8VObBc/WpRcnbt8uQHhL6JYWmRaZdpJB
vBRv+eEQL7Rre04Qcy1WT5644sXLZ8lCnP+oTOXoPBK+ZBTiypPcIX0OY8do4Jd3
faHaXGiB9Gu8PYONOXZqyodTqgN/xzMK4hY3wuyqJZwru8f/tJJbx+GwbCzQsXol
ilnKlUBemr81dpU1yTRiLoaCyPNa2bTIAxQGZdSiT6tLu9GmbSOWbrYa4qXXlXYz
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186619872706708781513829246068027893126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cPanel, Inc. Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canafoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20408729890414346085543952822563674290398987139744521407312634042277177963473202377906290940186421481228503744971067311755785671746792374509878833240868346681351589291204913241706969409309450019911366360514802304047395341210555819373336489269964196855107611140699820370214439139066279298592734091322792179737270115887998713454910052486629073209999921626997041907247959822422228454462221233554623832733355749891672461922872603753162871385470051983825999201135759796556076369000921144119402963435519490548292036578155377495945148365341406907837097181912358466340115547635630866253206296369465088669050146862606107161597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7e035a65416ba77e0ae1b89d08ea1d8e1d6ac765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ba69ab5678d24be3a1b6465a73026c3a430b325
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.52
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/cPanelIncCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/cPanelIncCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.canafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.canafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mycanaprojects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycanaprojects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.canafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.canafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycanaprojects.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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