www.crosscurrent.cc

Issued by R3

About this certificate

This digital certificate with serial number 04:a2:34:b4:95:9d:fc:41:7f:a4:92:81:2d:5c:79:1e:70:70 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crosscurrent.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:34:b4:95:9d:fc:41:7f:a4:92:81:2d:5c:79:1e:70:70
Serial Number (int): 403644944672044291426194432070502812905584
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:46:d8:9c:16:d5:28:60:af:ac:83:d1:4c:2b:77:ea:8f:a7:9d:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:c0:c2:68:ed:92:07:6d:c2:ae:7d:4e:ca:72:46:2f:66:d8:42:70
Fingerprint (sha256): d5:b2:04:a3:12:ce:be:f7:95:53:a4:d6:25:b5:d7:6b:6d:42:78:39:6a:91:ba:a1:93:79:b0:db:d7:ea:a2:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.crosscurrent.cc

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crosscurrent.cc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barberena.com
comidaportuguesa.com
commonality.ca
crosscurrent.cc
jlrancharena.com
jointpaintacoma.com
majorjoy.org
mortgage.cl
scrava.com
stemcellsouthdakota.com
timelessgroup.ca
tindaya.com
wider.store
www.barberena.com
www.comidaportuguesa.com
www.commonality.ca
www.crosscurrent.cc
www.jlrancharena.com
www.jointpaintacoma.com
www.majorjoy.org
www.mortgage.cl
www.scrava.com
www.stemcellsouthdakota.com
www.timelessgroup.ca
www.tindaya.com
www.wider.store
www.xn--7dbda2aw1b.com
www.xn--eeb4adb.com
xn--7dbda2aw1b.com
xn--eeb4adb.com

Other certificates including the domain name crosscurrent.cc

(limited to 100 certificates)
passive.live
www.crosscurrent.cc

Certificate

The complete raw certificate details for www.crosscurrent.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKobZMp/Ax4xRgeKRLl6
cyfKzLlQa6W/mBP6CgaCODd9tLbmHDCpBzSmPM4z8YDFosyV+WHxGQNg424M27cH
y9Iu7m2QExOVdQRQw4R4Rjra5Cj3K7fJdl5z3tV1sQewtufaYnYwrnhVCYHzn/ps
A1LY1ZXUdLBqEpgTRuxk3q7NcnpCKa2A78kfyGY3PdIO+SjffYr+98MXuWTvz1YA
5B7vqvNyfIsefvPO4peJU+nl+JBSuBIDsJV4y8OTHKNy56lheKHtIr7oIft5PjL7
q+Q06BPpY8m1F3kq0CZhbRV41vN1AUtYE8siupnf5WNdNWRueFO6kDPSNXv7U8bX
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403644944672044291426194432070502812905584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 00:16:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:16:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crosscurrent.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25331543884572987607199338971973341669653200113700324293658132011089523623493383033708546633344491275414393281081861993316861139134409971320735158821012446736346954878039964972879990501491654749424208361521940595227002313851625101865859257126612066431045940461078346716618735218177055988554858272222571866055475366008382102533221905825337410499178810414105524797969394876457669346397329305901517860248483294045308738847490138941979803662823277854984454781510767824510359536458994154854326702821930505719465160673447659746650542581328941139168253944673051258673392350217860825228194065539298613674804789061247570466577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a646d89c16d52860afac83d14c2b77ea8fa79da2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comidaportuguesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonality.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosscurrent.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlrancharena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpaintacoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majorjoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgage.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsouthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timelessgroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tindaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wider.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barberena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comidaportuguesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commonality.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crosscurrent.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlrancharena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpaintacoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.majorjoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortgage.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsouthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timelessgroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tindaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wider.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--7dbda2aw1b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--eeb4adb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--7dbda2aw1b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--eeb4adb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894cd2046a0000040300473045022023029cad0c74a73eef07a6c27fb04ba226e3338f82016cee93e10367c1f362af022100af13a2abbe73035fc542944a389a63995bdb7a4609219c003f3fa88e01070ce70075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894cd20484000004030046304402201d4e865c5120fccdb510930155ddf3cf4369d7c9870df77e8bd46500542784ad0220757200a99f2d99a04c5f2b675af9556dcc3c0a6dd3856a6f3bdd25320abd4804
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b81fac5fccb701122269a58673a29810b7fa914ab7af319457342d1bc3a43c701416ad382a69052ceb7dc74dd9d69e0fe84bc573efb39f98db5b01f2db751d051fb45ae50f61249f04831074993f30b0e48d838e36e190c8100b6acab4aee3c36de18929bfd7706d13396df025b3435c9c70b9bd4c198aefa3ed7c5ee1e354017fccf2f2cf2ff11f11a7972f363dd86d0733151492df2664656da844f83ad52097d7609bbe6649a6cef4ae896704e77d6ab52b0d77ec2b900a406997afa6ae21c9f562c42ce16d85a8f2440762cf400f1ecda25143c3c5f3a96b0e232e32dc0d1baef022516f843965f27759a7e6bb686b98aac56c09ed140e6758037e69715