ticketsdirect.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:33:89:c1:7a:6a:df:48:7a:90:14:e7:f0:4b:fe:8f:53:dc was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ticketsdirect.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:89:c1:7a:6a:df:48:7a:90:14:e7:f0:4b:fe:8f:53:dc
Serial Number (int): 365986653271646338570099363145827748893660
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:45:9e:f2:c2:89:b8:f1:b0:cf:28:68:8d:9e:e0:3f:83:d5:68:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:d9:7e:8f:97:f1:56:17:d8:c9:03:34:1d:f5:88:0f:e5:b1:47:f2
Fingerprint (sha256): db:11:2f:b4:5e:bb:ad:b1:2a:16:c9:7d:8b:0b:15:4c:50:af:aa:7a:f0:3d:9f:78:b9:5f:29:78:c1:70:c8:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ticketsdirect.ca

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketsdirect.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bizbanners.com
ferguscounty.com
guilfordrealestate.com
healthyhometechnicians.com
houstontexasinsulationcompany.com
texasnewhomesdirectory.com.columbusohiopestcontrol.com.pointqualify.com
thesynod.org.run50statesclub.com
ticketsdirect.ca

Other certificates including the domain name ticketsdirect.ca

(limited to 100 certificates)
ticketsdirect.ca
ticketsdirect.ca
ericbrighteyes.com.ticketsdirect.ca
ticketsdirect.ca
ticketsdirect.ca
timwiens.ca
ticketsdirect.ca
shaadic.com.ticketsdirect.ca

Certificate

The complete raw certificate details for ticketsdirect.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNmYPJQrEXPA+goo2hLC
wl0wdrHkCsVsaSC1m37TQhc4Ljx5TnUVAqaEFyonNmud5uA5K9yv4SxICCfdBdjy
Svwnjy4h+hdDaOc+3cIGuFxSpc7JuAs8p4uWI2U4uRvijQbIR4avjHFUJJ06QCf9
pUwtR7edt9f8bW8ToqG1vbIQQ1GYrAcja7LPkuq0t3BDbULMEaL5XGrvpd1dKKdz
Ch2FaT7HZ+IvTAZnhGrsKuxm55LjNcD/abdXsSioh5z27d18Ig84oPPjS9CV94PJ
C7+871aL3nHctmfpRckENTqJo6ttX8Sx6278nMzqqJNc3jOW09x2fPeV89pr4TiJ
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365986653271646338570099363145827748893660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 22:40:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 22:40:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ticketsdirect.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20810381947483238385834562624874614104595564474362427260746272325544744545663927362696648602548002779463811162650936371509924969124437871170164846819343376273440183668620944227077727447199906565468244984069588461243562234635706055248125768541869071994766073821719917190547245121128061245378716482840084459016387000312546600490057782817974187244251501025464173263935554022053961850685978905404817723235017873925114899459972655494001835647196590868008518551630353796200278857485903419886882886483570670027276963210308522761537957769867109468433339497625110964382096003937100407007120825649711704011080788729227298507257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8459ef2c289b8f1b0cf28688d9ee03f83d56815
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizbanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferguscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guilfordrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhometechnicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontexasinsulationcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnewhomesdirectory.com.columbusohiopestcontrol.com.pointqualify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesynod.org.run50statesclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsdirect.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca35a2e83000004030046304402205a318250b556209b4cb7a5fa332cb6ffb15d1675ec5a373d960126ac29b5ef4c02202a04459684e58f52d7be683cb5ea2cc2e5713584879111b5165dde90fff0a58d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ca35a2e8e0000040300473045022100d1e2d5e6ec748dceb23d40a1177c747045b00bbefa64facb7b5e1976c2c3b910022013a967a8b678bef2d5b513b17d7c4318e63d110b791eb5126eb1ac168397451b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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