navigation.network

Issued by R3

About this certificate

This digital certificate with serial number 04:67:a5:9e:44:a3:de:c8:1f:de:73:cf:95:ae:89:bf:74:e8 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=navigation.network

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:67:a5:9e:44:a3:de:c8:1f:de:73:cf:95:ae:89:bf:74:e8
Serial Number (int): 383718371914292799090997439152755572700392
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:67:ae:fb:e2:83:fe:6a:35:e4:06:6b:35:04:20:71:80:92:39:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:d1:fa:8c:9d:65:ae:c0:1f:27:c4:63:f8:51:49:a9:bb:41:ec:f8
Fingerprint (sha256): aa:45:dd:a2:d0:ec:7d:63:6e:08:0a:a9:e3:08:2e:37:57:53:0f:9c:d0:56:32:ce:97:95:0f:8d:81:30:da:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate navigation.network

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for navigation.network

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

articlearena.com
bonuskoder.org
doggybus.ca
earlymanbrand.com
equalifemagazine.org
goinginstyle.ca
naturalreflexionsllc.com
navigation.network
professorpita.com
scrape.ca
spamfreemail.ca
www.articlearena.com
www.bonuskoder.org
www.doggybus.ca
www.earlymanbrand.com
www.equalifemagazine.org
www.goinginstyle.ca
www.naturalreflexionsllc.com
www.navigation.network
www.professorpita.com
www.scrape.ca
www.spamfreemail.ca
www.xn--6dbgmq2c.com
www.xn--9dbaev4cza.com
www.xn--eeb3acd.com
www.xn--pebid.com
xn--6dbgmq2c.com
xn--9dbaev4cza.com
xn--eeb3acd.com
xn--pebid.com

Other certificates including the domain name navigation.network

(limited to 100 certificates)
navigation.network

Certificate

The complete raw certificate details for navigation.network in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a1GQ37dJGkWPeMhy3GC
I08kmvjdstc9UCu/aN3bwC7Rs9WuFzc7CBVMO2ntRDEjtoKEc1gTLzNaUzneLsPB
tZQ6+AArjX24aDHi7p8rbb1RW56KsitCl5QVTsdB0uZLIWw5u23maqXfdkWVfKEs
Wv7GKktwrF1XJXoDOy/0CrvohxnD6xlqqLTXmGv0Nsw26dKAH3RmNehRbcD8rwa4
pebmiVnxoZjUR2rrWwdWqmBtQQDVru9AALVGAVf+VgHD16vARiW/oTl83vL/wTQV
TKdqje+yMIOpthEeXrHaGlOLZdlFdDSbvgfmXf1zeSqGGQcbrmsCHt8782f/dxnZ
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383718371914292799090997439152755572700392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 19:48:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-11 19:48:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'navigation.network'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26469250562353677415400266885205719076789317338683536976550503522209185249887134400779589475121768796475395754120894717138686860439466131400680871130138181689259487624248518061838869566963892267326573568893414011983009255589402030944407274582026091970891983988310420016229019965386079224950261843365366311029618770377466393794531862325733783539033548484328169418858222693043305167433250004867260450985489886041267955278268741570624014981524391851953012557982654515153687561311103540280536376567205566069141720557353661135141353151098703140416879215518191615916927294459392799079005633319428615329774259239994842012033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e67aefbe283fe6a35e4066b35042071809239c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articlearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonuskoder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doggybus.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlymanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goinginstyle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalreflexionsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigation.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professorpita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrape.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spamfreemail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.articlearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonuskoder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doggybus.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymanbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifemagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goinginstyle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalreflexionsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navigation.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professorpita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrape.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spamfreemail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--6dbgmq2c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbaev4cza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--eeb3acd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6dbgmq2c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbaev4cza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--eeb3acd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pebid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f73b6853c000004030047304502201946b8b30e526377273e1d2a3125191b6d6f94ca9de236f86ed4ad691b560cb1022100b84f8ef4f3ccaf360a653b1be9bc4c1e78654da5cf641003271e762ce9f258cc00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f73b6851800000403004630440220059b279dbaa3527e33eaf3295a8f0d06dfac1eca3646ad075e45deb589b4544f02203bbaeb4174f1152ed6b96d017a415781752b345757fc15040243b5db62f86fa0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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