a-sap.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:80:ba:03:d1:58:b3:6f:25:6e:d5:f3:c5:ee:d6:43:bc:2d was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a-sap.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:ba:03:d1:58:b3:6f:25:6e:d5:f3:c5:ee:d6:43:bc:2d
Serial Number (int): 305140256991318650868777138865776894393389
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:88:82:63:13:43:87:76:74:33:41:0d:f2:ce:85:49:9c:fc:96:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:34:91:2f:7a:d8:4c:bd:78:68:75:86:4b:c5:01:b7:e2:cc:d5:dc
Fingerprint (sha256): 8b:99:99:8d:29:6c:b8:66:ac:35:75:f2:a7:55:2b:03:d5:73:a5:57:46:3a:b5:fe:81:ab:00:21:09:32:10:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a-sap.ca

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a-sap.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-sap.ca
actionvideoanimation.com
bbtft.com
coolpcgames.com
dwirecords.com
fatherflanagan.com
frankclips.org
frankfurt4vip.com
geekstripper.com
hamburgerpattypresses.com
jobplain.com
lawbyzipcode.com
mahergroup.org
opentechno.com
ordertomake.com
parquedelrio.com
petslick.net
pollock.fund
profoundstrategy.org
quratedcocktails.com
reporthoper.com
ringgoldcounty.com
rxsugarcertifiedalluloseinside.com
sculpit.us
sheredy.com
skinrash.org
stpetebeachseo.com
tatden.com
technologyvideos.com
thegreenafrica.org
thewarriorsparody.com
truthrepository.com
usedmilitarycases.com
workforplay.org

Other certificates including the domain name a-sap.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for a-sap.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxSkte1WHbZAunnFvKRG
oXWv/EDiLbutMBlnKZsl3dKuGWM4vp7WBArjaRsamS0xZN/zgZVNVUwhiy+tI61v
ppEExgnSZUUwSo3nHhzErs7MN8jhq+CJe0Y2F4A6NG2sN5+ujD5pxuSIudGT1jLS
ecPKfkIsFjOzXZhjMp7zaCxA4XzpHsog99s5/pfy5dmvjAJuZGF6NMgsgu4Z/2Ea
R7pgw6fGFW885Y1pBjb1GwcKvd6/dFqec/QU5dmxRuiqTQi5gZhZQED2ykndHnye
wWYXTP4HNq4bFbDlL/wQebuiiBy0vmQuCQo3LhNcuzrjUcMN7/FwkEhAmmjwxA0B
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305140256991318650868777138865776894393389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 11:03:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 11:03:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a-sap.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24626649108808600099542155410329248535252406203614355931796683153991093858859595008419347086885047244938286086847022341516476308419623908664197492783564520476747462172517698165216495887807617245145722618252996470509413586802965206420052373012233974687656619546242471352338369474992311983195766703623247614999141010486874433039936696585133358678291088462242266546436215958476411773060569555432589633980833114003781122584069136988492543931722351450761236470187716566082674841211242431606275168662981192166959618667618013890434223601751020573241582581433783053571150416693855041502412879650135761089777615159717050253597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5888263134387767433410df2ce85499cfc9694
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (625 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-sap.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionvideoanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbtft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolpcgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwirecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherflanagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankclips.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geekstripper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamburgerpattypresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobplain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahergroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentechno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordertomake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parquedelrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petslick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pollock.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quratedcocktails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporthoper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringgoldcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarcertifiedalluloseinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheredy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinrash.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetebeachseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technologyvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreenafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewarriorsparody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthrepository.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedmilitarycases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workforplay.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7e4cfb7e0000040300463044022036e7187a19cc4a73527b4d54637c8a868a01e4ec074083e17d4966ad640e2e3b02203aec7498e37f88383f04ad94579eedb9a16a83790410af46ab8f532c4e6c75da007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d7e4cfbff0000040300473045022100ce47bf1836ec389cf5778a947874550552a4f2bdd791bc63e9b18a7da191552d022041a2932aad04d2294e7d40658c9ca33c4cd0e2e37069a7dda65d810d414d2b6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0091be88e3ad94300911472eb8983669ec6f02e21bae9a963ad9505c50206fe723d31c41d9f626c314580342c4f81a260f835257172781bed6e6ec2eeb8b3e9b2d1884dc31311be5f126cca3c1f046357697d7f80f12e79e05bcdfc518fa1be6b9ac210a20194f9483f21659ba44b52e1392cbcd8fa3ee28e2a0191258402e89691a9371b141d55c56224a8bb8ce7f500dd7e851d18078fc6e7acb5a8273c88a7d0b30ace684ac94dc834397c4d35384a6cd041106401e59f4b25990113faefe1c3922e5e872a220c4c669d8584080c58dcb236b1c885539d9bda559d4ba5976d61e009a9e6dfebb393acd5b99d1442cf55c7a275592d998cc33287a98ab351b57