mineralindependence.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:c8:cc:e6:94:6c:13:7f:3e:37:8f:77:c8:15:fa:df:b3:05 was issued on by Let's Encrypt.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mineralindependence.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:cc:e6:94:6c:13:7f:3e:37:8f:77:c8:15:fa:df:b3:05
Serial Number (int): 329665690929245315415538657280349844779781
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:30:7e:ec:a1:45:49:6c:50:bb:1c:aa:cb:47:d1:19:68:67:5f:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 14:68:2c:10:46:72:ae:95:ab:16:23:dc:b8:95:2f:9a:93:ba:20:79
Fingerprint (sha256): 95:90:2e:9a:2f:f2:77:e6:75:fc:bf:e9:19:42:22:67:b8:a6:67:df:01:03:2b:04:16:a3:95:60:00:f6:9a:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mineralindependence.ca

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mineralindependence.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfschoolalliance.sex
cortlandcompany.net
customermessagecenter.com
deterencedispenced.net
dustysantamaria.com
fastertype.com
food4vip.com
guntry.net
hbwreply.realbrilliance.net
igadaba.net
infowarsphone.com
jagdambe.in
loveshaadi.in
mineralindependence.ca
mysteryofhistory.org
oakvillehomebuyer.com
okinawablog.com
petmentor.com
porchrockers.com
priplod.shop
probannerexchange.net
raeshope.net
sacondominium.net
saescuela.com
sanantoniochurchdirectory.com
softwareopportunity.com
thehoardinginstitute.org
transferfactor4life.com
webho.st
westofmarketliving.com
www.highscale.co.nz
yeshivocation.org
zeigel.com

Other certificates including the domain name mineralindependence.ca

(limited to 100 certificates)
mineralindependence.ca
mineralindependence.ca
www.yunqui.com.llcmeans.com.mineralindependence.ca
mineralindependence.ca
mineralindependence.ca
dctorf.com.mineralindependence.ca
mineralindependence.ca
mineralindependence.ca

Certificate

The complete raw certificate details for mineralindependence.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ExguEsmiEYxGJMz4o7z
GGmlNMVeSt7NaJEWMWR+n/hb6iglyNbBJ4IxmCgCK6w9nloP3GKN1ICPFrNnhT96
acplBlw3SNyw5+0xNs/Hmo8SnnG/8ICXvRjIkdJrRfrR+KcWmCmneFEAHhLkMPUC
otMnatetuw5UxQtfdHMrzVhblQKpSes8NQs7DdfqKPPVl4Nq3N89xRN2qGlUMLst
R8lrPMvhrZ96rHmYJapeUfF7w8kta9VvQug5AUWazFUp3HDY4ARYLv+8sJGP5t6E
Z2Z8u/XYZADUdUeYB2FEtZ8TGwF4vf4v1lTiBtDMpZGkEnfECO1V07CxcRImPREA
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329665690929245315415538657280349844779781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 14:00:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 14:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mineralindependence.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28315043615272440832609004972803267055796596178438245383699851080894145187823447102543669584763485796584005908406392020317457427114811964703408345853017187520513305444682084132573964152643500205311709064088895897348299641181888054893800776113103384687952134188261815716873594512448924385679952576497420728502440345870230752728786735288454630991742136036956126892935674049498365860802600252718976511312624550908877663599699735201062685166597615843914277016228544774621089675790394361398394592593631717274543164915839566069214909539616515230952611745871233122369140671444706868794758557026812661536807980262833022632183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db307eeca145496c50bb1caacb47d11968675fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfschoolalliance.sex'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortlandcompany.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customermessagecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deterencedispenced.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustysantamaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastertype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guntry.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbwreply.realbrilliance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igadaba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infowarsphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagdambe.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveshaadi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralindependence.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysteryofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakvillehomebuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okinawablog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petmentor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porchrockers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priplod.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probannerexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raeshope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacondominium.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saescuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniochurchdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwareopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehoardinginstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transferfactor4life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webho.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westofmarketliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highscale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeshivocation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeigel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7620241b00000403004830460221008806c0a419e40dfc4e03d826e383e224802f481e6937ac87fbca44f9966cef7e022100e8b48c5bae10b06d43f587e8b620238b97db683556be2d1ca4ebecb529b23afa007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e76202bc0000004030048304602210091efb74be110e52296fe2a9cc1861fac5a354f5d6c6f9393b2fc5d93f7ad3187022100bfd80983a54182965fba2468c095759a6cc73471463620514d4242961b177ec5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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