arbitrageur.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:8f:2a:ec:13:fd:db:16:e6:22:b4:54:a9:f3:70:80:c3:27 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=arbitrageur.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8f:2a:ec:13:fd:db:16:e6:22:b4:54:a9:f3:70:80:c3:27Serial Number (int): 397166575560095080033534456080808361902887
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7b:95:0e:6e:8b:56:38:9b:03:60:04:dc:06:5a:d6:76:6e:5f:dc:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 95:8c:dc:d0:69:94:a4:e5:35:4a:a2:d4:61:62:c6:f6:91:ef:1e:62
Fingerprint (sha256): d1:05:a7:43:e1:21:71:7c:6f:3b:29:e0:76:e2:83:c5:30:6c:2a:0e:1a:95:77:28:96:14:f7:4e:ff:52:42:1b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate arbitrageur.ca
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arbitrageur.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
666.istlm.com.cielcakery.com
akwardstyles.com
alzheimersmusicfest.com
arbitrageur.ca
atlanta4vip.com.chanelhermes.com
deserthomemls.com
farahhotel.com
fitmarketer.com
linares.io
margincredit.com
mdmeetings.statenationals.us
rezeptfrei-diskret-kaufen.nl
sanantoniohometour.com.bitcoinfraction.com
sportsarbitrageur.com
sujoktherapy.in
ut.cosfacts.org
akwardstyles.com
alzheimersmusicfest.com
arbitrageur.ca
atlanta4vip.com.chanelhermes.com
deserthomemls.com
farahhotel.com
fitmarketer.com
linares.io
margincredit.com
mdmeetings.statenationals.us
rezeptfrei-diskret-kaufen.nl
sanantoniohometour.com.bitcoinfraction.com
sportsarbitrageur.com
sujoktherapy.in
ut.cosfacts.org
Other certificates including the domain name arbitrageur.ca
(limited to 100 certificates)
Certificate
The complete raw certificate details for arbitrageur.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISBI8q7BP92xbmIrRUqfNwgMMnMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTUxNDU4MjFaFw0yMzEyMTQxNDU4MjBaMBkxFzAVBgNVBAMT DmFyYml0cmFnZXVyLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 1ilQxemBB3z6wqlu7xMYEIfypkohmNDhU2gs8x96L4F2iVjiavjenp2eZAf45mJs uB9Az8Br4WnhK1bGR0unyRIDNHPomT5npkyw8jJnUOrIh1SowOrlN5CiWD/VfzD5 j3C8GrVfowk7c8xQ0NJ8vBF2nZ1W3GHtUoXS4dHxMbWdR97T1k8fR6MSeeLRP/u+ sC5psLSeKVrSBs+rnXJQGJoZ11RRVM1bLCsvdNVToUEJEe6n59sz3pVcf8n4JnUQ gTjyfzbqxH892kvNk29UimbeRjNHZccFtVIAYs1K2Kyl2BCAxlH0xYYXiDo8DzDc bc2SEE0uabHYxKMyPLMD5QIDAQABo4IDdDCCA3AwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBR7lQ5ui1Y4mwNgBNwGWtZ2bl/cBDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAXsGA1UdEQSCAXIwggFughw2NjYuaXN0bG0uY29tLmNpZWxjYWtlcnkuY29t ghBha3dhcmRzdHlsZXMuY29tghdhbHpoZWltZXJzbXVzaWNmZXN0LmNvbYIOYXJi aXRyYWdldXIuY2GCIGF0bGFudGE0dmlwLmNvbS5jaGFuZWxoZXJtZXMuY29tghFk ZXNlcnRob21lbWxzLmNvbYIOZmFyYWhob3RlbC5jb22CD2ZpdG1hcmtldGVyLmNv bYIKbGluYXJlcy5pb4IQbWFyZ2luY3JlZGl0LmNvbYIcbWRtZWV0aW5ncy5zdGF0 ZW5hdGlvbmFscy51c4IccmV6ZXB0ZnJlaS1kaXNrcmV0LWthdWZlbi5ubIIqc2Fu YW50b25pb2hvbWV0b3VyLmNvbS5iaXRjb2luZnJhY3Rpb24uY29tghVzcG9ydHNh cmJpdHJhZ2V1ci5jb22CD3N1am9rdGhlcmFweS5pboIPdXQuY29zZmFjdHMub3Jn MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUA tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGKmZCMzAAABAMARjBE AiB/ysEfssSJy4JprqNx9TCClzDp0M5ju88XVUtz4tGISAIgNa6/WN15qd1buW3M aupzvSvXrgrVdWS22/gXJEahg+sAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir wTpXo1LrUgAAAYqZkIzgAAAEAwBIMEYCIQCmba4DH55YSss0wsfmRHkuPFhpTcAK hJwbwcqkKMyT7AIhANLE51JvrLX6CLWFm4z8yRtWWAhst/7RCxDGQfMGVqUYMA0G CSqGSIb3DQEBCwUAA4IBAQAl/B+DwhcZPgygHjqCm1k1V7KkhnP4iJO/p+Rfx5XH EtDWo3J297P9tgbDr3XWoIIkKySpUorL4xPHKevihB9sLKirfHCY3gJ9z8/IgXYJ IjafTt7fbVUpOsVLgxmc7acPwq1x31F0trGxyqg0khOMGTRtrmMlRuxAMUQluzHr hcUbvpoO86GHMX/7WDh+Qbh6rhVuOAdNelRffEhicq2O9wXogL17YLVdW4dqQ59q +1+axtIT73gGGlocSE/YTaLYhrBl+wYFlVKXa3pJ8ZXGF8N73l7rcwVjYhyE7oXS rWBYKVRz/P/ExHa+2KwFT0OdZKLZYGYzDPMT7tpuqGqB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ilQxemBB3z6wqlu7xMY EIfypkohmNDhU2gs8x96L4F2iVjiavjenp2eZAf45mJsuB9Az8Br4WnhK1bGR0un yRIDNHPomT5npkyw8jJnUOrIh1SowOrlN5CiWD/VfzD5j3C8GrVfowk7c8xQ0NJ8 vBF2nZ1W3GHtUoXS4dHxMbWdR97T1k8fR6MSeeLRP/u+sC5psLSeKVrSBs+rnXJQ GJoZ11RRVM1bLCsvdNVToUEJEe6n59sz3pVcf8n4JnUQgTjyfzbqxH892kvNk29U imbeRjNHZccFtVIAYs1K2Kyl2BCAxlH0xYYXiDo8DzDcbc2SEE0uabHYxKMyPLMD 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 397166575560095080033534456080808361902887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 14:58:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 14:58:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arbitrageur.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27035370704927513414179457073892041459682179760425431680767274108146187366493362263143073165374377145566805070575752826955825321813793045478451728006157801703099274634293331902904732190269816428636284928649336458602284408324788416371164232091911630737492364268092421467646395812005350673204027019610491007485585649070670368874897368161721576667639341597770863018746320982923638887000087410757067948800653540748476472556787372296592805072319367642532088026855336028481078125296263348685822846571946529334301294816328008615581590050057367735410286733103163035313513629946196796117553810319579077411425972375583718573029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b950e6e8b56389b036004dc065ad6766e5fdc04 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '666.istlm.com.cielcakery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akwardstyles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alzheimersmusicfest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageur.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta4vip.com.chanelhermes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deserthomemls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farahhotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitmarketer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linares.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margincredit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdmeetings.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezeptfrei-diskret-kaufen.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohometour.com.bitcoinfraction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsarbitrageur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sujoktherapy.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ut.cosfacts.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a99908ccc000004030046304402207fcac11fb2c489cb8269aea371f530829730e9d0ce63bbcf17554b73e2d18848022035aebf58dd79a9dd5bb96dcc6aea73bd2bd7ae0ad57564b6dbf8172446a183eb0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a99908ce00000040300483046022100a66dae031f9e584acb34c2c7e644792e3c58694dc00a849c1bc1caa428cc93ec022100d2c4e7526facb5fa08b5859b8cfcc91b5658086cb7fed10b10c641f30656a518 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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