www.winwa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:20:a0:4a:55:7b:a3:53:1d:91:71:17:97:f7:d5:d7:3f:59 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.winwa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:20:a0:4a:55:7b:a3:53:1d:91:71:17:97:f7:d5:d7:3f:59
Serial Number (int): 359551241911604562370954667697315400597337
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:5c:40:c2:31:c4:b2:2a:02:f0:f4:6c:f7:43:18:42:b8:5f:9b:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 77:67:ed:0a:90:f0:a3:72:03:d4:d4:cd:cc:a9:28:53:dd:5d:ed:8a
Fingerprint (sha256): a4:9c:e1:78:df:51:19:c3:07:e6:dd:ca:02:b1:e5:ef:40:1f:d7:50:c9:9e:c9:05:8c:3b:6f:93:fc:a0:c4:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.winwa.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.winwa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alldeltanotheta.com
annihilation.ca
deescalation.ca
drayva.com
ecigs.online
gutters.email
instantvalue.ca
mebelteka.com
platelet-rich-plasma.com
prpgeorgia.com
televisorialplasma.com
turi.store
winwa.com
www.alldeltanotheta.com
www.annihilation.ca
www.deescalation.ca
www.drayva.com
www.ecigs.online
www.gutters.email
www.instantvalue.ca
www.mebelteka.com
www.platelet-rich-plasma.com
www.prpgeorgia.com
www.televisorialplasma.com
www.turi.store
www.winwa.com
www.xn--9dbe1bxa.com
www.xn--erdeifrdzs-j7a8t14b.com
xn--9dbe1bxa.com
xn--erdeifrdzs-j7a8t14b.com

Other certificates including the domain name winwa.com

(limited to 100 certificates)
www.winwa.com
itelba.com

Certificate

The complete raw certificate details for www.winwa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/YSpZE6hPibiItr7CVg
x4xr0jV+bpkoJBplvzzw6XrsTF0NTc/m+2fRuo2L6jg8WhPGpSLT+RHCLAFakSkp
Tw6awq/+d0Z28ID1LAlaYWsh2/Lq4Ja/QdP4XGAlO76w2N1IwERlPGO8quDG4rgw
i6dmuP5mm3dM6ccmYTHi/LhbAvRDYqHqylxSRY3pxHPaSIY7Q/8GNfmdGShAL+vD
UStsw4QK8wtW/FhOgDrwLEuB/5UXUEVAlaTrjLuI1PCNLquDeAjJHC3eP8Y7GhRC
a8xQ+19pdhN1xoIBhZcnVIu4ocoqF1xOKh+FFGJFaMuo/x4enqMPK9aN30yAF7Pg
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359551241911604562370954667697315400597337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 20:44:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 20:44:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.winwa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19183327089231999928853147904265660002427205218457588770130149007848452049244624906637464250919321257944765021748871198640690197600385137407579631486894184850517399290062117618765432327790205462063368249289898702572151646058560287950941790293513191073538977255892604771641204379346413211591590904887801772918878545804212544713158527449570119502322693990535363395738222562449991618092017920280542573261927326474238223917443194259360156233392874390450731221094496306333438426421481089795803984983405115155168300060867441770694972306144385327156095688023251060526272860942944854941996286679991291053082142227178561200301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d5c40c231c4b22a02f0f46cf7431842b85f9bba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alldeltanotheta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annihilation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deescalation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drayva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecigs.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutters.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantvalue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mebelteka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platelet-rich-plasma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televisorialplasma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alldeltanotheta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annihilation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deescalation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drayva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecigs.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gutters.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instantvalue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mebelteka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platelet-rich-plasma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpgeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.televisorialplasma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turi.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbe1bxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--erdeifrdzs-j7a8t14b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbe1bxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--erdeifrdzs-j7a8t14b.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894c0ff286000004030047304502210086ffe029625ae40be34e303e7856963e14433fa3300ec704bc92af868495d5d902207eb9b4555560f859c93aa33caea65c733542d844175b5f5d67498d3dd43bba3c007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894c0ff2790000040300463044022032917a8cea24639a212b231417f975e4655dd168eb54c699ab385eb4dee1ca5b02204d4258b89e57ad7aad85f6fa158119edc80b9f16f36d9c90b5fd92e3fcdb6344
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071bba9167ccc9aae21843417abe92beafd6d764d35601a898f85bd5ab59854b25709442b2904bee5fbbf95470c7fe241f533555d4832ac2839d198cb17d95c9c29a5daaa15a106abc05c8d32b08a345997482f41f3c9a7fd6c8a3734527dfeefe96ae4d2d5d95e105c8485ca9430a9cdfed26d194d552a713b320261de0382ab4f24430e5fda06376d98024f55905376720f8421964dc5072914daf0c6a8a5078c2682cc488a02c6b6930d44429c017e25d1b124ef5e4c6d9430cc40e3e87566c31ee725b906c0b68fa1489bec0809dd347dd8b3103aa5dfd5c2ec0819de09195bad1788cff61843833e79b2776335c94f9cca1a0486f3911bd818f2d5d238a4