fact-canada.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c9:6d:28:7b:31:64:ff:6c:fd:5f:13:77:d1:38:f3:05:dc was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fact-canada.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c9:6d:28:7b:31:64:ff:6c:fd:5f:13:77:d1:38:f3:05:dc
Serial Number (int): 416990995520214333469995558570016222938588
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:4f:f8:f8:30:71:0e:ae:16:b0:29:db:5e:35:b6:82:f3:f4:4c:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:35:80:55:c9:5d:57:57:d3:bb:c0:52:9c:c4:1b:71:b9:8f:e8:fa
Fingerprint (sha256): bd:b9:f7:9a:f1:32:1e:bb:6c:57:0a:52:ce:a6:9f:7c:87:73:23:ad:0c:2c:9c:d5:f2:74:1d:f6:2c:3b:46:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fact-canada.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fact-canada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0cannabis.com
aokproperties.com
bidmarketplace.com
doctorsofsanantonio.com
edmondheatandair.com.michaeldeannewton.com
fact-canada.com
fmsold.com
houstontxconstruction.com.rheast.net
investineuro.com
movingcompanysarasota.com
mybargaintoolstore.com.sindhi.in
orlang.com
racewhere.com

Other certificates including the domain name fact-canada.com

(limited to 100 certificates)
www.fact-canada.com
light.thebo.ng
fact-canada.com
theweddingcakecase.org
www.fact-canada.com
impossible.ca
biblecourse.ca
www.fact-canada.com
www.fact-canada.com
xn--7n8h.tk
forexarbitrage.co.uk
www.fact-canada.com
impossible.ca
bhagvatgita.org
bud.world
pandaradio.ca
ebaytes.ca
highscale.org
www.fact-canada.com
autoworkshops.ae
sculpit.coffee
fact-canada.com
impossible.ca
impossible.ca
standforrfra.org
exoniaconsulting.ca
guacaholy.bible
bud.world
fact-canada.com
vertera.ca
middleeast.vc
www.fact-canada.com
q8.co.za
tomskneft.com.diskjockeys.ca
bud.world
psalm135.com
fact-canada.com
www.fact-canada.com
www.bioabout.me
musicoldies.ca
www.fact-canada.com

Certificate

The complete raw certificate details for fact-canada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52W6ARlCCT26SctK3B5w
EzD6JJ9ILc3mgGIIdwYb9r8qNcjTOvnOcDwWOrkD40Zdnae8Iz3c6gBpwYm0sVZ0
pZO2leagNmp1TyxEKE37vdmZX2GLxpfDkmEoNN17TE2hEodE31w+NpInG0fHnVjZ
83NmMgOSj4c0s9w2XFFoaHDy9Cs06E1w/6HqfIEa+OYD9hrZqS2W2uLfyPEg6yYI
d526lWWLiVGxmuC/mX96Lt0bbiX0pQFA0GkJm6cbcP0FVvnzsC7T1KYXQu8qxIdE
0LyRJcNeQWE/Cnld2UyPgPSu9F5ZDSaq6Em752N6Jt4sxfxwjOlNev65YVpWdbHQ
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416990995520214333469995558570016222938588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 01:40:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 01:40:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fact-canada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29211211693004534578534687482948418190038335695610828574129747811211180063105473308062631570604603682819508739835682496578964356892436349615726417832738173147005730690044858939741332757834973061534874720436697974379892709644570173536105854485377224909450851796419707185137823355432211022197830217741127916692952184034855791324293997916681237405796410297742493926605520214519450977077951095345047188394339039660449866677427510896517051332135348545015132792270295607202390592547999491586561453268708126892809912368417009070812669874884334256722923387600315791784201130368510212150751310626020784814402894079648502763739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							594ff8f830710eae16b029db5e35b682f3f44ca3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aokproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorsofsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmondheatandair.com.michaeldeannewton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fact-canada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmsold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontxconstruction.com.rheast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investineuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movingcompanysarasota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybargaintoolstore.com.sindhi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racewhere.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab0757cfb0000040300483046022100dc2776519de72b1294ffa4c1324eba89d0b984d6283ee9aaad8ebfc6126eea1f022100fbe397816832456a3f28f31b9b2f860fa9929c9608491e307533302f65d77ab2007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab0757d050000040300483046022100fac2b317759694f92cab7584f3fd3e93c5d9f17bbbdd5b802a86e5f84cd0f5ed022100b2a9e24e7c5e691088626e0b7184e8beb733b650be3b1851dbda9eeb9a57cdcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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