crazyshrooms.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:37:3e:33:2b:fd:74:3e:d7:0c:20:a1:39:b4:4c:60:36:65 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=crazyshrooms.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:37:3e:33:2b:fd:74:3e:d7:0c:20:a1:39:b4:4c:60:36:65Serial Number (int): 367247351742795366440513596257592640812645
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 95:86:3f:42:f7:8f:22:85:9f:c4:41:6d:1f:d2:0a:53:44:e6:96:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0a:d9:e3:92:1d:d0:79:c7:33:72:9f:7f:70:5a:c4:17:3e:8b:4d:bc
Fingerprint (sha256): 89:7c:b9:db:8d:ad:3b:d0:43:7b:24:63:4b:86:87:f4:11:31:80:5b:bf:1c:b0:5e:d3:7c:8b:1c:61:37:29:92
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate crazyshrooms.ca
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for crazyshrooms.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bestincountry.net
coachdavebootcamps.com
crazyshrooms.ca
djj.co.in
dohaforvip.com
drivencustoms.com
dtcambassadors.net
erofiction.com
institutdebeaute.com
londondocklands.com
moolchand.in
northcarolinamortgages.com
punjabmatrimony.in
rawlog.io
reachlocalattorneys.com
reimaginesugar.com
rxsugarcereal.com
www.reversiblefuelcell.com
coachdavebootcamps.com
crazyshrooms.ca
djj.co.in
dohaforvip.com
drivencustoms.com
dtcambassadors.net
erofiction.com
institutdebeaute.com
londondocklands.com
moolchand.in
northcarolinamortgages.com
punjabmatrimony.in
rawlog.io
reachlocalattorneys.com
reimaginesugar.com
rxsugarcereal.com
www.reversiblefuelcell.com
Other certificates including the domain name crazyshrooms.ca
(limited to 100 certificates)
Certificate
The complete raw certificate details for crazyshrooms.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISBDc+Myv9dD7XDCChObRMYDZlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTgyMzMwMjBaFw0yNDA3MTcyMzMwMTlaMBoxGDAWBgNVBAMT D2NyYXp5c2hyb29tcy5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALzaZaF4OBFstKweV+8g9opY3pl5+/ZgVakacviq4TYr5BuFxsF8zUiOtyjCPsFx FlsIQRjTUe2Q7B4MunVgvhtRmUrCRmUveegpA7X865x86a39qNNMltE531vi/S8z BzRrNPWsJTYcp4uWb/KyeVlVqmfIBLTrgYTVp1OztkTiKaQvBtK9Duf6NtyMKtUw dsTK1QR/2xUhX4jmxZa/EUiGnOQhnuCiosBGZCqhwABpOCP/kVvcMMWUNNZ6dX6/ 0NNkGo5/7m/cKUCQ6Hkb+qRzf3WBjIR0hdwCz8t6Umi3gsn+goa71p4AOr2fa8iH JmQpyEjAJmKOu/8ybDUXLM0CAwEAAaOCA2QwggNgMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUlYY/QvePIoWfxEFtH9IKU0Tmlo4wHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggFrBgNVHREEggFiMIIBXoIRYmVzdGluY291bnRyeS5uZXSCFmNvYWNoZGF2 ZWJvb3RjYW1wcy5jb22CD2NyYXp5c2hyb29tcy5jYYIJZGpqLmNvLmlugg5kb2hh Zm9ydmlwLmNvbYIRZHJpdmVuY3VzdG9tcy5jb22CEmR0Y2FtYmFzc2Fkb3JzLm5l dIIOZXJvZmljdGlvbi5jb22CFGluc3RpdHV0ZGViZWF1dGUuY29tghNsb25kb25k b2NrbGFuZHMuY29tggxtb29sY2hhbmQuaW6CGm5vcnRoY2Fyb2xpbmFtb3J0Z2Fn ZXMuY29tghJwdW5qYWJtYXRyaW1vbnkuaW6CCXJhd2xvZy5pb4IXcmVhY2hsb2Nh bGF0dG9ybmV5cy5jb22CEnJlaW1hZ2luZXN1Z2FyLmNvbYIRcnhzdWdhcmNlcmVh bC5jb22CGnd3dy5yZXZlcnNpYmxlZnVlbGNlbGwuY29tMBMGA1UdIAQMMAowCAYG Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGO88LpsgAABAMASDBGAiEApxZG7AusBXwl0Yvc aG+Gr2a6Eip09k/PLsx8dQMC7dUCIQC0V++1TK0DFBG/ZrZCdlIxdpsJAa9OIHg1 9IYLifvH/gB1ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABjvPC 6e0AAAQDAEYwRAIgbnef1TpuWW3fGcbTfabH9IGCTSswPgCafuNypI3Bp1kCIEFt 2PwFVUOWBtHdDq3tDruFuoFxYCyUiAAhpV5OFvuhMA0GCSqGSIb3DQEBCwUAA4IB AQCSy7ftYlaWal+8/F0BSC5dlY5HNiRixyv/yhsx94mT2xEQ69zWtRXs6MdpOW5W pqs4Zs2Kx2JUGxfAJlXMONhCcWpWeFpXBgjjE/2a5z9ywimF23yNlqh7smbq7cfd txoAlwiW1gKzKlJlmumzCpb6DHlkgcrGqh/jvHeSbOvLyN4RVy3iJITUxhUhjz/2 nK1eQhQQF6XQuGQ6MBYnjIoUMKAD2hLK0S4RRhz40JzpU+i5nJyjjweBp6Sa9uwC sc9nstuXeCC6l2OpQ35/1feOlyVww+NHxtk/N4D2YZUkiHEHaEs38cmXmIO9EnMp q6croBX4PJc7FcEi7qwC57YX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNploXg4EWy0rB5X7yD2 iljemXn79mBVqRpy+KrhNivkG4XGwXzNSI63KMI+wXEWWwhBGNNR7ZDsHgy6dWC+ G1GZSsJGZS956CkDtfzrnHzprf2o00yW0TnfW+L9LzMHNGs09awlNhyni5Zv8rJ5 WVWqZ8gEtOuBhNWnU7O2ROIppC8G0r0O5/o23Iwq1TB2xMrVBH/bFSFfiObFlr8R SIac5CGe4KKiwEZkKqHAAGk4I/+RW9wwxZQ01np1fr/Q02Qajn/ub9wpQJDoeRv6 pHN/dYGMhHSF3ALPy3pSaLeCyf6ChrvWngA6vZ9ryIcmZCnISMAmYo67/zJsNRcs zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 367247351742795366440513596257592640812645 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 23:30:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 23:30:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crazyshrooms.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23840496905762231925066626736984176933591672817845786427371690090652087381334530019678228782890004706407457569745931062067703993977177368042145238823677076108651825030565929632672129984379954787282295626523504057636225531153188314008302040925589610830970905870040368610298889424773733585705340147057159195623792245236906450172999910780645171795893215049291834988923638425126518897401459420710813432296453890712338837066197344536365195132089045259092827522308080259481025201809443257678663741944504185267706281050489071878029038186484677621177461916560246560103331563036326543586452590321672770090828638053353706171597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 95863f42f78f22859fc4416d1fd20a5344e6968e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestincountry.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachdavebootcamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazyshrooms.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djj.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dohaforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivencustoms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtcambassadors.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erofiction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutdebeaute.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londondocklands.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moolchand.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinamortgages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabmatrimony.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawlog.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachlocalattorneys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reimaginesugar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarcereal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reversiblefuelcell.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef3c2e9b20000040300483046022100a71646ec0bac057c25d18bdc686f86af66ba122a74f64fcf2ecc7c750302edd5022100b457efb54cad031411bf66b642765231769b0901af4e207835f4860b89fbc7fe0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef3c2e9ed000004030046304402206e779fd53a6e596ddf19c6d37da6c7f481824d2b303e009a7ee372a48dc1a7590220416dd8fc0555439606d1dd0eaded0ebb85ba8171602c94880021a55e4e16fba1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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