khmerwedding.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:17:6c:81:54:d3:03:1c:36:47:36:24:29:d7:91:e7:e5 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=khmerwedding.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:17:6c:81:54:d3:03:1c:36:47:36:24:29:d7:91:e7:e5
Serial Number (int): 328063337346899763224494759149574066137061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:91:d4:bd:b4:07:97:30:92:b0:50:e6:9f:8b:23:d5:f8:dd:a2:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:79:9f:80:32:cb:4c:5a:00:a4:68:e4:2e:be:af:cb:f8:d1:19:7b
Fingerprint (sha256): a7:8b:38:7c:84:78:be:40:be:78:f1:5e:73:6c:3f:39:8f:c9:ab:6e:be:b4:87:4b:e5:02:3e:e7:3f:52:ed:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate khmerwedding.ca

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for khmerwedding.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.khmerwedding.ca
khmerwedding.ca
khmerwedding.ghosananda.org
mail.khmerwedding.ca
webdisk.khmerwedding.ca
webmail.khmerwedding.ca
www.khmerwedding.ca
www.khmerwedding.ghosananda.org

Other certificates including the domain name khmerwedding.ca

(limited to 100 certificates)
cambodiavipassanacenter.com
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
khmerwedding.vimuttimagga.info
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
khmerwedding.ca
cambodianview.com
www.cambodianview.ghosananda.org
khmerwedding.ca
khmerwedding.ca
ghosananda.org
khmerbuddhistassociation.org
keeninvestment.info
cambodianinterpreter.org

Certificate

The complete raw certificate details for khmerwedding.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgISA8QXbIFU0wMcNkc2JCnXkeflMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDYwNTI4NTBaFw0x
OTA0MDYwNTI4NTBaMBoxGDAWBgNVBAMTD2tobWVyd2VkZGluZy5jYTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBANVO57C0sd9HfcnwOveWsFb5s/G/waiI
Q0H4iyUyQpk3P/C/Tn1L4A0hgfOOKLTLNq0/vjPAScqhvC+0XuRF6UgXRlBZ+vDF
4X+4bFdJfNA7WY+/8aNN3u7kqkiqPPS2sN7XNwlREPccJqIyWV6l7FfcqgkC8TtI
nYroHvwKeGr4NUfrw/wOZnsUqPBEx6Do8iW9prk59saDfsNIVzdNPdw9Fmm7EN77
YpcBvEJXxnf1E96Pxxz9W/ckVXvfwoOXAnoPP5xOsUCmvWqFXtFIzFPdivrmsPIk
eq5RXQMFb8lCkjXPQ+EFZvVNhuKShmRT2jfEcIZ2y78UP3t9lVDMBNsCAwEAAaOC
AxswggMXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUupHUvbQHlzCSsFDmn4sj1fjd
ohcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCBzwYDVR0RBIHHMIHEghZjcGFuZWwua2htZXJ3ZWRkaW5nLmNhgg9raG1l
cndlZGRpbmcuY2GCG2tobWVyd2VkZGluZy5naG9zYW5hbmRhLm9yZ4IUbWFpbC5r
aG1lcndlZGRpbmcuY2GCF3dlYmRpc2sua2htZXJ3ZWRkaW5nLmNhghd3ZWJtYWls
LmtobWVyd2VkZGluZy5jYYITd3d3LmtobWVyd2VkZGluZy5jYYIfd3d3LmtobWVy
d2VkZGluZy5naG9zYW5hbmRhLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AOJpS64m6OlACeiGG7Y7g9Q+
5/50iPukjyiTAZ3d8dv+AAABaCHZh/gAAAQDAEgwRgIhAM677uka6V3l/sI8B7r6
8yY4z8ktSJmkpgwuF/Sa5ASkAiEA1t7Q57pojeLXgA+668q167SuOH8HWpxtRe0F
dvX3hkkAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWgh2YhD
AAAEAwBHMEUCICk9znPq/iSUHR4n10sUg44pFasr4JfF3RYKPyjyJ/vYAiEAqEDK
UZghDH+SJVDnt/cSsMnSyqV7IZxm+qKW/g7mN0YwDQYJKoZIhvcNAQELBQADggEB
ADGkZps3av1Pkpfm9Du5W9X5/myFcttKxkSFkdSA9O8A2kX+R9KplG7pG62vX/72
36B/I+PLRUjqelJ+GEujr/joj9yXpbAR9742FRrPQxeeV9gwi6KKy8Esp4MMk4Y9
ZnWLpcW4BAtEfBI84bbhEYS3+3UwRMQi1YUR1GbnaEsu/MtVUqyIWBjZ2/tEWrw2
ug21WprKBgsDcAjgVzm0QWtFZnZ8guoxoGuzaSahwdHATrmp9pvJJ5+ud/+kNZ0t
+mZcMm7s/q4R5XalOnuuMiMYZzfEymSDbZCRcWoRz1EhRNvr+8HsdkUvAgnASv1U
+LlzRYBeHPnDPJkCbTQgfhw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U7nsLSx30d9yfA695aw
Vvmz8b/BqIhDQfiLJTJCmTc/8L9OfUvgDSGB844otMs2rT++M8BJyqG8L7Re5EXp
SBdGUFn68MXhf7hsV0l80DtZj7/xo03e7uSqSKo89Law3tc3CVEQ9xwmojJZXqXs
V9yqCQLxO0idiuge/Ap4avg1R+vD/A5mexSo8ETHoOjyJb2muTn2xoN+w0hXN009
3D0WabsQ3vtilwG8QlfGd/UT3o/HHP1b9yRVe9/Cg5cCeg8/nE6xQKa9aoVe0UjM
U92K+uaw8iR6rlFdAwVvyUKSNc9D4QVm9U2G4pKGZFPaN8RwhnbLvxQ/e32VUMwE
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328063337346899763224494759149574066137061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 05:28:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 05:28:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khmerwedding.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26927668483205458496280194458460211996873099745776079346974639132721095524855841837457568702017116868686222667526724573821888393573452431214363545868245361371447915674299860222692805625208780000170649944565629887352413102335087189412230460750520761147365730376050770333670382303151415970593097645059891518035125728389174489020367210115478803174264558481362422366357090732769118926100717398490846570345231808191290664882599205253425483964872796007082890995176481034139290438413777130598207092266739293394962338496545690701782680236722513076674721554457402567817124768365820178699035782144581686116857283461249239876827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba91d4bdb407973092b050e69f8b23d5f8dda217
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerwedding.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerwedding.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerwedding.ghosananda.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016821d987f80000040300483046022100cebbeee91ae95de5fec23c07bafaf32638cfc92d4899a4a60c2e17f49ae404a4022100d6ded0e7ba688de2d7800fbaebcab5ebb4ae387f075a9c6d45ed0576f5f7864900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016821d9884300000403004730450220293dce73eafe24941d1e27d74b14838e2915ab2be097c5dd160a3f28f227fbd8022100a840ca5198210c7f922550e7b7f712b0c9d2caa57b219c66faa296fe0ee63746
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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