canoa.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:b2:b6:fe:f1:f9:b5:4b:91:0f:f3:8c:72:22:fd:9e:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canoa.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:b2:b6:fe:f1:f9:b5:4b:91:0f:f3:8c:72:22:fd:9e:28
Serial Number (int): 301047165110290877498962694912046956125736
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:48:31:6b:89:f1:8f:ba:39:1e:30:a7:a0:53:4d:66:6d:68:63:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:35:6a:28:92:52:91:a9:11:68:8c:af:62:4e:8c:82:5d:8d:6d:4b
Fingerprint (sha256): a7:3e:41:cf:0c:09:29:55:fe:68:fe:8b:f6:9d:fe:da:1b:79:a7:46:66:2a:55:b0:ae:21:89:b2:b2:97:97:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canoa.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canoa.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canoa.co

Other certificates including the domain name canoa.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for canoa.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301047165110290877498962694912046956125736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 01:54:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 01:54:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canoa.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 992581039203817292769431784533728166501396045967498537182923092926128872671326226860416673456463421417658864814531290976356779876518944679623382402472628732339095886042631969872045202837892526098159045653452419946052239439526522775580980178473666744260768677003787941909980443712322466579426653612446279131660087500576588425901637281686832574213701031297903394404846574140576271654987005623648253654366778881988760038279416965087903808387058344553044204489929251313604483722362858510937417059324615403705673500967543663013713738034534517990482930963837082199807984060923470765522240619254387954259296711784409378329663575643497447214352550430999715723320365036883301459148323735745009598473833035441688530535695660604931599427073836240756196721020384782164227034619703710150348881081487560646741334419097860568985541183973863413533266596285804437085832916088395312490071647379420509164319754264681793695120170386811145639803720734401962166456013682324956222759320474717689123065639906102775961519015768065731484840990721526382217594941898841128278965372508150173425443113237144894515203204569721471645315473557266852117094621962502986514751465577475585718529463408856117685352181580989594144095063258003849523804909737848804083797977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d348316b89f18fba391e30a7a0534d666d686372
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoa.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aece9806e000004030048304602210087d48919ba186db640e2117ceabb30c5a4105cdd572e5828eafda2bf8b6c9063022100fb766523097ad584b34acceb21d97e795c6cbd09d4d8bfeb989e636662f11a5f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aece98060000004030046304402203aa58387398fca2f2011486591bcff7f9ca8edef29beedf6bce8eacbb10546900220657381bb1dcab331aba7416c263ba24016ea9ebc068373030135c15aa58c8e9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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