mamaweed.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:a1:a4:39:de:b9:56:dd:27:62:4c:e4:59:25:a9:57:ac was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mamaweed.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:a1:a4:39:de:b9:56:dd:27:62:4c:e4:59:25:a9:57:ac
Serial Number (int): 303066164977384762874790824379411772037036
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:04:b8:a0:49:a5:79:87:c8:55:0e:62:a1:ae:77:b4:0e:0a:e1:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:ca:58:45:fe:d8:76:fd:39:a4:59:90:4b:76:5d:90:24:30:06:3a
Fingerprint (sha256): db:ac:35:d1:a0:d7:99:6b:56:c8:1b:5c:ae:7e:71:5f:06:3f:69:9b:3c:77:19:2e:9e:e9:23:87:46:b0:73:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mamaweed.ca

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mamaweed.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

churchrock.com
civex.com
decarbonizemyhome.com
greeley.net
healthyhomeairexperts.com
hoardershotels.com
intellectualpropertysales.com
istorebuilder.com
live4vip.com
magnaloco.com
mamaweed.ca
minneapolischillers.com
naturestirzepatide.com
patchables.com
pehnawa.in
rektverse.io
rusplod.shop
saltybeaches.com
schengen.in
thriftfound.com

Other certificates including the domain name mamaweed.ca

(limited to 100 certificates)
ventosa.xyz.mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
radioactivetrader.com.mamaweed.ca
hoppycoppy.com.mamaweed.ca
tuscaloosaproperties.com.hotfordaddy.com.mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
mamaweed.ca
domainstocash.com.lasvegaschillerparts.com.mamaweed.ca
mamaweed.ca
mamaweed.ca

Certificate

The complete raw certificate details for mamaweed.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cQzXcArUbCcZx7IuXpS
zK4WLR0JlIR3Tcl2nOjL4mWO7IYg/iSPNe8BxD6JD9/G0TIFAYUI1CiyvjA+ONS/
+n3YGSaRLGRLcQuL9iv6c39I9xZ/HSbxaMSVhd4m3DzVdEWkegIq0NcTLNSWckvC
HfbscHFT1f7lQsi09uWRWxU7vFd7H4hT0qZyVF0ZUN8Xd7Y4siTchlE+6bP+4ZKB
2XgLoTpNnY+3j4LmrkLcw1Xihmj+DuRzsYWFDR7dxTb754cjrwunP4mCG3q7qZN4
taM2MkNJ9wnfjaZSMofHEVhedE3oOpYGtXv0f0u7YkdOioTZVIzho7QL6uu2fotU
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303066164977384762874790824379411772037036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 18:02:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 18:02:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mamaweed.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28500368763446322734910536110003007800725238371123723302749336809799503041745001682747180418864540147979387828354972047752241791928685186344491749500328670548689406571103693587908114067933444205122433022011369166462746347444524156203987194658217864642821366062859817958902072814408490314622851953041908387412149721776442907554484267841816174607207134447349817438076523846610871588158380176883956147989884999347378837801572472552292238600701499517265420171895421740173990621943016618579694429816240451912663244501786674645449806675502260304897775544274073899145995595595497912390589421123405006394086526011963679134751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7704b8a049a57987c8550e62a1ae77b40e0ae1a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decarbonizemyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeairexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoardershotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellectualpropertysales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istorebuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnaloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamaweed.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolischillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturestirzepatide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patchables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pehnawa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rektverse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusplod.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltybeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schengen.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thriftfound.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cff0e38050000040300473045022100b5b5a9141fc056424f69bc7fb9c8001661f24aa07120ba427e504a8e1ed5f99b02204acdce3464bd7b64bc9c655e3aace92f720710191cd65dc4619656f9d1acc63400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cff0e385200000403004630440220648947ed72712fc7c35db10bcb459752a7bdd63d30938cdf7ba17d0ebd88cb14022014e15fa5e8223adf03da1f66f500af08b010a80b31df5b36b365c9f83864f837
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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