cannabis3d.com
Issued by R3
About this certificate
This digital certificate with serial number 03:63:44:ee:aa:ea:d0:cc:d7:d0:5f:37:59:34:46:98:1d:a0 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cannabis3d.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:63:44:ee:aa:ea:d0:cc:d7:d0:5f:37:59:34:46:98:1d:a0Serial Number (int): 295116438857432996562263279643080542133664
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 29:83:22:93:45:82:bf:43:9c:85:1a:fb:1d:e5:c1:cf:18:99:5d:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9a:83:b8:f1:68:bc:70:69:62:73:0d:0a:1f:bd:c0:a7:d5:eb:91:2b
Fingerprint (sha256): 70:29:8a:b6:cd:2f:e5:7c:dc:6d:56:25:4c:1f:b6:0d:26:b1:2e:1f:3c:2e:4a:81:a3:e2:dc:df:ad:e3:9d:11
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cannabis3d.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cannabis3d.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bicchu.com
cannabis3d.com
caribbean4vip.com
downingtownrealestate.com
electioncoverup.com
gawitnessingjosh.statenationals.us
getitn.com
lukesmith.top
minocquawi.com
nakkan.com
ostomyorders.com
ownbeachfront.com
plainseagle.com
smartcity-tv.com
starrcounty.com
talleylaneproductions.net
williamscounty.com
wydivorce.com
cannabis3d.com
caribbean4vip.com
downingtownrealestate.com
electioncoverup.com
gawitnessingjosh.statenationals.us
getitn.com
lukesmith.top
minocquawi.com
nakkan.com
ostomyorders.com
ownbeachfront.com
plainseagle.com
smartcity-tv.com
starrcounty.com
talleylaneproductions.net
williamscounty.com
wydivorce.com
Other certificates including the domain name cannabis3d.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for cannabis3d.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgISA2NE7qrq0MzX0F83WTRGmB2gMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDQwNDE1NThaFw0yNDA3MDMwNDE1NTdaMBkxFzAVBgNVBAMT DmNhbm5hYmlzM2QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 4KTxXjxWtDuNBt8UVlTNBFFTIcPu0lqfkmzANckrj7ZjRKO6PT+buwpP9dDBubHz I4ziw03eMgJ8YPP21DWPXu+L6bWvJZVunTa3AR9PIWnPEeY8s1cMXd2lDpNBtr/+ 5hyyOWh5AWAphBmKMq73YKb/LFG1uDJNrCswp4v9J/sS9qiN/uJi3MmnjRpjjmfV XxFUZAUVgp7izivYtE3qjVFdbo44ROvwu83kjIMT3rysVj3/mC56uITDH9unwkwn ngapDyDojRzoUBr2c2TCdSBBlRxw52vw5wvV4ueV6zCqmsZo0pnS4rft+81SDdvV AOFCxcY+6f6SUZ8OuxaB2QIDAQABo4IDVjCCA1IwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQpgyKTRYK/Q5yFGvsd5cHPGJld6zAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAV4GA1UdEQSCAVUwggFRggpiaWNjaHUuY29tgg5jYW5uYWJpczNkLmNvbYIR Y2FyaWJiZWFuNHZpcC5jb22CGWRvd25pbmd0b3ducmVhbGVzdGF0ZS5jb22CE2Vs ZWN0aW9uY292ZXJ1cC5jb22CImdhd2l0bmVzc2luZ2pvc2guc3RhdGVuYXRpb25h bHMudXOCCmdldGl0bi5jb22CDWx1a2VzbWl0aC50b3CCDm1pbm9jcXVhd2kuY29t ggpuYWtrYW4uY29tghBvc3RvbXlvcmRlcnMuY29tghFvd25iZWFjaGZyb250LmNv bYIPcGxhaW5zZWFnbGUuY29tghBzbWFydGNpdHktdHYuY29tgg9zdGFycmNvdW50 eS5jb22CGXRhbGxleWxhbmVwcm9kdWN0aW9ucy5uZXSCEndpbGxpYW1zY291bnR5 LmNvbYINd3lkaXZvcmNlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx H7WbAAABjqeJAxYAAAQDAEcwRQIhAMFgqROv/wn5IBOy3M/TU5rFQHOGN+kijJ9k IYeTaZSiAiBLwi7gDyWNi+u1Z2Hw3jx2gP0hgRPlP+6VRE4GyG5s2wB1ABmYEHEJ 8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABjqeJA7IAAAQDAEYwRAIgWrsi 1uv9/c+OZwjGTOjGs62F1Pbp8/HqzKEqg/TscoECIGIMsh2x8D/Aq6qP6/JpCOf2 FXgXSFqMVyYqOaAonkULMA0GCSqGSIb3DQEBCwUAA4IBAQBxtPP4j32+/g3CZRjb WF5iOeM6QlTuodLI86W34c31ZoHaTyphWR9nP6y3vHt7X2aqNe065dRkcmG2sdhd 1u+1pjpVwZ9FbGMMlYTmLKguTqLnOxhtPlDiLhoXferMArXdAu2y+ZVJuBv9Rsv0 3NxWlai7eKqzu4JGcNBnQ5GadMudrhLceL3S0+yeCcsIoFHnhL6m2ezNqpBm9jSW Z+4agsvjsBI23a9kSTcQNRM6weDF1v5OePjpE4DK0GkXUI3viImHrvOVFPtf9E/M Ckba8MBTJlDKPpk0OM1PtklP5jkckLnRM/S6E5WZMSloc3HEIgBVEgy8zVqWvIXq XK30 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KTxXjxWtDuNBt8UVlTN BFFTIcPu0lqfkmzANckrj7ZjRKO6PT+buwpP9dDBubHzI4ziw03eMgJ8YPP21DWP Xu+L6bWvJZVunTa3AR9PIWnPEeY8s1cMXd2lDpNBtr/+5hyyOWh5AWAphBmKMq73 YKb/LFG1uDJNrCswp4v9J/sS9qiN/uJi3MmnjRpjjmfVXxFUZAUVgp7izivYtE3q jVFdbo44ROvwu83kjIMT3rysVj3/mC56uITDH9unwkwnngapDyDojRzoUBr2c2TC dSBBlRxw52vw5wvV4ueV6zCqmsZo0pnS4rft+81SDdvVAOFCxcY+6f6SUZ8OuxaB 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295116438857432996562263279643080542133664 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 04:15:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 04:15:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cannabis3d.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28358716660305860101815511476898653124926057880817710917520956927933034801928345191208388869158797373266718030902763457104974491026052000017941854303101658527235792901616034090646235032534255464692861733310669627641943671944232384871212112144922105583912141239909698737314395719278444429872627921400934036999761680688073369987525253064857115410630897265115482852028635559015930273492309452610279036493222141876573968228649940883550557512727892981827207235036566800995571296525183178777058577522778777730092737880856462503856179997512628102945418815821980931238936126143978515554078623510762717472802916788952366481881 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 298322934582bf439c851afb1de5c1cf18995deb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicchu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabis3d.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caribbean4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downingtownrealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electioncoverup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gawitnessingjosh.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getitn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukesmith.top' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minocquawi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakkan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyorders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownbeachfront.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainseagle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcity-tv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starrcounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talleylaneproductions.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamscounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wydivorce.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea78903160000040300473045022100c160a913afff09f92013b2dccfd3539ac540738637e9228c9f642187936994a202204bc22ee00f258d8bebb56761f0de3c7680fd218113e53fee95444e06c86e6cdb0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea78903b2000004030046304402205abb22d6ebfdfdcf8e6708c64ce8c6b3ad85d4f6e9f3f1eacca12a83f4ec72810220620cb21db1f03fc0abaa8febf26908e7f6157817485a8c57262a39a0289e450b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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