cantinala20.com

Issued by R3

About this certificate

This digital certificate with serial number 03:07:f6:0b:76:7e:74:45:f2:d2:ae:8f:ed:ee:fc:4d:e4:fe was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cantinala20.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:f6:0b:76:7e:74:45:f2:d2:ae:8f:ed:ee:fc:4d:e4:fe
Serial Number (int): 264045883969298908903367900775684376487166
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:29:65:79:68:53:cd:89:b9:e0:f9:29:0c:24:2c:84:1d:99:7b:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:7a:47:ef:73:9c:09:38:b9:e3:81:46:5e:0d:7f:02:e3:08:e8:52
Fingerprint (sha256): 8a:e6:8c:6c:bd:97:da:13:8d:b4:53:9a:6e:07:5f:40:0a:6c:a3:1a:fc:da:27:0a:ab:e4:ac:fa:0c:1b:e9:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cantinala20.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cantinala20.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cantinala20.com
www.cantinala20.com

Other certificates including the domain name cantinala20.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cantinala20.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264045883969298908903367900775684376487166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 03:55:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 03:55:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cantinala20.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910683786761764793243269155616041229681052831009932294397236343201858303194895411403625238288138847884555346307108952470562414067757826543624732417867886723731732160071450002551497825892703445916318330443362318339420749671382259466384442804110314266802784435447111114716266497649776872410435074324521827144084419897273441205583382537122392577592554172866168626834622649213373796333634346485523263265209403559090303067200515944992455112075210514242090623145794920930717717992358521101464860902479172522851454554645957499782283329324920745282319897533864518855123621668063354829934359445616195033263167271001954599727971595607756436354942234663655148893086715895742359084154292272353691861597945160573214122764410769322106965283632538130543838211177000958953550939109932762442619296789321615211782764771192820561435065224098619025136395675765040685148136948402995906044812530750778797099039639452931036428693332562113156880715634130424110108521788189345779241988813138430139608597612298646432388430979859049906164089342174635536505248477965334934393192756922868058795651990627440571560198060186062561888664717237507765157250823467562669656916050231411648711822529109806534779879840927861799112568443176629913257482478185333806881063271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d2965796853cd89b9e0f9290c242c841d997bdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantinala20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantinala20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189fcb2dd1d00000403004830460221008f3ccef6ac12c8df1aacf2b4fbda96e13829bf3aaff51b0b96a5c1c1667f4850022100af88941958a758c92b4b81a34f2e72748d21a5a9bbed824782333d3315578f2c0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189fcb2dd2a000004030046304402206f8b569107bd0ba85a1e9aa61a07f97e918a746f3aee28d4e39ac77f08c71cf10220721b0ed2409df05544fa9db5c0611383c431f9777ae6ea43c16ec9fc37b22ae3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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