norwoodwaterworks.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:3d:26:94:e4:56:95:93:53:36:1d:0d:98:9f:da:0f:ee:b6 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=norwoodwaterworks.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:26:94:e4:56:95:93:53:36:1d:0d:98:9f:da:0f:ee:b6
Serial Number (int): 369257651864242425795741905459337625595574
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:ee:54:81:3a:21:37:39:d3:c9:80:fb:8c:35:64:a3:d6:20:5d:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:1a:cd:82:05:10:49:dd:f7:7b:ee:7b:96:a7:84:64:29:3e:b4:ff
Fingerprint (sha256): ac:70:59:64:ec:88:a2:68:bc:a7:79:3f:18:e2:c9:f1:82:ca:ac:84:d6:07:8f:d5:9e:37:35:98:87:14:74:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate norwoodwaterworks.ca

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for norwoodwaterworks.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

americansunifiedforfreedom.org
axischiropracticclinic.org
buypsprt.com.radioactive-holdings.com
cloutgoblin.net
deplorablesshirt.com.stockinvestingvideotutorials.com
dogtrainingauthority.com
fareedrafiq.com
femininewarrior.com
norwoodwaterworks.ca
omgdubai.com
shemaletexas.com
sweetkillingfields.com

Other certificates including the domain name norwoodwaterworks.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for norwoodwaterworks.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmaScW/sSzQ33VF5fm98
sIiw6aBsPCUzfJIYLXMl64FYxZPyoiWY0CVHCZ9D6AlepUT2z5mOM1Dh/LSCnG9W
hdCpmmjlfJPVxNszJo3O35pPuHmP3DTKUI5cF4lNWU+U7UbR7PCfFed0TuiRMHkj
qFxT2Weox5X/su4PdGCDqXK3dqr1W3MKhwVFdrz1+JdLYeUFdoGj0glFlyQ8xndg
/91ION9AHSb1tncJwezHuK9FPn3PI8M8Yxc5dV4JA00P5vvvOwsePlgicqg+RD2H
pvlgdyzqmw3yyy8OUCk835jaFhCetQdUVn0qF3ZTEZAfQKLruiLepzkKNMCk2ZwW
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369257651864242425795741905459337625595574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 16:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 16:07:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norwoodwaterworks.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24035858103307098040281168969800056691995521327467751843462642362157546899812222541710234382933846429530669619661290739796141367687743741516424997585085562286390082765075043049640604442214056824319229923650897123320573551398739403044999398447424813796076838237652003293532539407627635628741121436123809862882864006840118491235275445936180935213028778246804605333522020058826662621452559204335421738224205896339174741100257143586730331828166803968490602513490510356402674165470506383364891541718955647323432360866676434217018793259370512995082896483122927815868706377910098538678995674713990079035719501209309600814667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38ee54813a213739d3c980fb8c3564a3d6205da1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americansunifiedforfreedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axischiropracticclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buypsprt.com.radioactive-holdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloutgoblin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deplorablesshirt.com.stockinvestingvideotutorials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogtrainingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fareedrafiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femininewarrior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwoodwaterworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omgdubai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemaletexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetkillingfields.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa942b4ea000004030047304502204bd6d0661e37b2434235689bc3e0048b25f042d322ba118fbaf57b441792c7ad0221009266470a70d423d9e816366b3609152a1bc3b2de1ae7d7eaa9482fdbb4bb73e4007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa942b4cd000004030047304502210098e0218bad48aa6391ae88fda57515475ab4ef4a01c5b8dedab2b0522ef8cfd40220393b2d560df71aad5cd65125ca820077cca1c1cc4356338f1a0c3cb84e127fb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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