canadaslandtrust.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:00:32:61:98:04:f1:e8:e8:a0:61:a7:dc:9c:0f:98:dd was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canadaslandtrust.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:00:32:61:98:04:f1:e8:e8:a0:61:a7:dc:9c:0f:98:dd
Serial Number (int): 332456134076037748192520666282205129971933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:fc:34:8c:fb:89:8d:40:1c:49:bf:ab:7f:8e:05:d2:1b:e1:0f:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:ca:26:ad:97:e6:ea:e0:73:f4:21:d6:04:61:94:a3:1a:03:9a:17
Fingerprint (sha256): 7b:60:40:49:b1:b6:9c:c6:2b:27:af:96:05:36:7f:7a:8e:db:d5:92:a3:a2:3f:fa:74:ad:f9:ce:78:cd:7c:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canadaslandtrust.ca

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canadaslandtrust.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbysmyth.com
abrosimov.com
arcade-games.com
avoyellesparish.com
bideven.com
boardercross.com
calegalforms.com
canadaslandtrust.ca
cassopoliswaste.com
chillerresources.com
corelie.com
cpilouisiana.com
debtlend.com
grj.co.in
help.texasnetworksystems.com
hemplovers.com
highcaliber.media
hillcountrywomen.org
hittinglab.com
homewatertests.com
manfrommacedonia.com
montep.com
motoclassifieds.com
okfuskeecounty.com
p-p.co.za
pantyfreak.com
paulgrayfarms.com
pleasuretoystore.com
privateequityarbitrage.com
r-x.in
rikimbili.com
rxpeptidefood.com
showbackups.com
smokefreekids.org
thebloodsugarcouncil.com
tishomingocounty.com
tribalphones.com
uscisattorney.com
watermarkstables.com
xn--6-1ga.at

Other certificates including the domain name canadaslandtrust.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for canadaslandtrust.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0FDAEli7LwtlOFtTDh
DC9MR6HLU0nZEkTkhUmFFmY9SVA9GhcFNbWUJTSRII2H+vEh/b5uUiBjVBrsbTtG
tXWe6rQE8m0SEe1rwX7TNWXheW9/FiLOclN71NEEUsOFq9T2jwijtDdvRs/UdXCi
S+rTgGNjxgCZLW2GsGzK1afCWGWQD2a9Ki7bEw3eDHUCVQKeD8iCvH5uRRPRVo7W
t9lI4BBrgt8upVI7lAQYnhOjdwCyUzk67sGF/d6Qc/4MG52vkbIOGNvJ9Ik3/PzG
7q1rNBfJxEHhH+NzQQ4ZAMhOzonekgbnlfX8PMhfMZhLQ2mvImJEvUwnBti0PwET
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332456134076037748192520666282205129971933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 15:03:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 15:03:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canadaslandtrust.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22413719391944173317589487049573237777058109653002897744184008514688202948254488183084069704285386164617679057152158497457755107106657847601067506741849048659295194749768270148586957612743777282147925140488994771525455051575026131616966137789031881593580632420646089900935775516695277334464856573586126511611798338126962172784567874350611642136881190124836560877229165855776205394617216661954275424669638241934501444750638260638346831411425770912431403020898251144304217136897618779229057571392416620715006827739143224099887578311351545529331470869823775140000123197264472435081820056468517013824435267833660350469001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6fc348cfb898d401c49bfab7f8e05d21be10f20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (735 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbysmyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abrosimov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcade-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avoyellesparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bideven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardercross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calegalforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaslandtrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassopoliswaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillerresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corelie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpilouisiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debtlend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.texasnetworksystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemplovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highcaliber.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcountrywomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hittinglab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homewatertests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manfrommacedonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoclassifieds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okfuskeecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-p.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantyfreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulgrayfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pleasuretoystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateequityarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-x.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rikimbili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxpeptidefood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showbackups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokefreekids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebloodsugarcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tishomingocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribalphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscisattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkstables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6-1ga.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7f28c24a00000403004830460221008512715a435b6969c2d0a4fab8f562758e2c86340fd21664d899976910581d51022100e9860314264a9dc30e25554db917eb55ae30341a306aec571ecf84abc47e0c940075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7f28c44a0000040300463044022059f0074294752748649b289011d40dbac4be5a1416e786ef9dcbe1c279823d7702200ac163b76f5a3f474c34ef7957ea96faedcbaf7d5ac74e0b13d8415079494dbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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