canadafarming.com

Issued by R3

About this certificate

This digital certificate with serial number 04:91:dc:fd:ac:f9:0e:c3:f2:86:87:1a:11:79:d5:95:aa:e5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canadafarming.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:91:dc:fd:ac:f9:0e:c3:f2:86:87:1a:11:79:d5:95:aa:e5
Serial Number (int): 398083834249061788562219516193031595600613
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:56:b2:00:b0:4d:4a:90:53:14:38:53:50:30:3c:65:63:26:4f:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:44:58:88:a3:61:1d:f6:73:1d:8c:5e:ab:a2:fe:59:ed:fe:d4:a3
Fingerprint (sha256): 6c:b0:0b:a2:2e:9e:6c:0d:a6:f1:9c:3a:c9:2f:5d:89:9b:f8:88:0b:2c:11:be:c2:b7:4d:ea:33:cf:d5:73:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canadafarming.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canadafarming.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canadafarming.com
www.canadafarming.com

Other certificates including the domain name canadafarming.com

(limited to 100 certificates)
www.canadafarming.com
canadafarming.com

Certificate

The complete raw certificate details for canadafarming.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtvXkX0PiLd+rvcj7NZpG
GbSwLCDoIOIxc34NY43FVlCiJgZC5MSL/fCWiwiMO60Q88caFZxizbqquUDAs+Is
0bJIa8MiDQ6DazdqJXfLC+PnNIG+qKgHC9KTrF0idWJ3V0O3aslbYLXWjd6KkAFa
3a1u79MICCjPuKDMuz9b2i+P+OdQASY0yZe3AotgMCvJGJ72qex/PT2A/W2WKvDV
xrHqiu6Kw+h8O83VVHG2/nNZ7zuMYUfaLrB08IpVl2ocTpXQsKeZ3jUZAeWCs1QM
3ddnHn23goOg+f7k18kUGlsdJJ0dTzbEa1VKVdDx32WyaU8iAmLdEZN0MslikOPK
nLJrGFlJanckicPpqIjDNndOlTNOXraBclwSrcBHqL3ARC2NJo83qRCN4Qufq3Ad
pwjko14NhoiyMVqRj9iHBVP6GXZJ1qGBxwkprloDmUY+6Z0QBGJgJpPIn52KEPXo
9SvsH/rFzSRUtZrp9optGTbfV9ScjLluXUMBIrYtNycBl9BO6llRSoMXzSmTh/xk
u9sj5UstGWspmR91dujY9blt2QswxgcME+Inc2sstS+IBpAxIbD+PqX9KGI2RWql
slwlh+aYt+Lfr+m8afbZMS/p1u4ULm1O2ZZ0BAkdbaP2lLPjsqxXlKLh445wc9x/
D6eImgsSi+ycPVBht8OtKTUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398083834249061788562219516193031595600613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 03:06:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 03:06:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canadafarming.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746413783504509370984693228519262986323239607216783831719503182916687224428996684252032011251351198096291145523534952737984282199131463041572454412228918916171512051041470952809525932570848463699359574164399184202517337911478304806065375463833899372491997626335415115058521775324832218085843149753432919811625838669354719292356284746297385625802056224628855695115305630919875481746560086386549721157252251817486825482304833048446554965254656127515703766328193979044384075897498727522922630525291377363908543213800023216459766218878163222210737384445655608942698987167929602022846472356586656315413787546739945979866436909312900532401623402584761338900553053339690063165881294993455215551653684740140682945229577951671165037926343796695937129258983482490904840057179365649900620442942270051450363386744166680299545570813278966234355767583594662748319828285604420287046851029520178561168203678490910724820304185386090940171935289405404666628869210395179852313994767567548229530795229392297658251380833192716669815453347342219603867937543119485191372632205003546934314726286061152345303899251972538117510580978258630268744301617180942691084781442431464931139476741213140951991332788246820566128347406381956851869189273960705333496981813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d56b200b04d4a905314385350303c6563264fe7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadafarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadafarming.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e73c9d5050000040300483046022100c1025d0bd542ec236513c05d111bf87253922d1ef6acd8974ef3724beee4b981022100ea11711e6c327e0a96b06d0f52ef803782ffff0174050a7c6509f57cc7b4ca71007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e73c9d5df000004030046304402203f8cb634f3ed80eb53279a969d5325e4dc2724a66095ba100e1f4393c709692002200cf65d70dcd1d5c78512caf6fa9659a13f8ee11277d731d411105a4667eddfa4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00972f3451b3aa196c3b8db81898c4131d7ade94ecfee624a4b9cba901f8da2cb7bb73fdc68f9b4a2b3ba1154ed216b8eda74fe31de8532a6f1ecfefd4f90e1b7b4d2919e549d3f051afef632c187a6bcc5c66c382ea8773e429fd905d19f178f1d340fc1e8281237980a378a0fa4dc1fc386518db39b8b0cd89668ea741bcaee43dc3594812e5b185235438f8fbd1fe08fc8cf98f1fdfc37f14c4829847e0d9d5e687ccf34e529ad7ba3ef884ed8e5e16ba261534a63ccc08902e0e46e2ca4ffaf1f7041783498cdb76e4a710b0ba6cebe2f75fe09aebbdb67ec14774e58864ddf321e45f834cdf496d50243b73d9277bed56f0e47cdb40bcb5725c85dd92f26c