canameri.com.pay2.org
Issued by R3
About this certificate
This digital certificate with serial number 03:c7:fa:34:4f:ff:c5:59:31:47:72:7e:0f:1b:93:9b:e7:8b was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=canameri.com.pay2.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c7:fa:34:4f:ff:c5:59:31:47:72:7e:0f:1b:93:9b:e7:8bSerial Number (int): 329385627433504983452011927534145453680523
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 05:25:60:0f:25:09:ea:2d:7a:ef:1f:d8:37:00:23:d3:ef:96:15:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 39:d5:b2:b9:f9:6a:61:f4:ca:88:8c:9b:d1:47:80:58:95:26:06:b2
Fingerprint (sha256): ef:68:19:7f:af:da:4a:e4:cd:04:2b:50:f2:e6:5a:bf:66:ea:54:a2:ee:dc:62:37:e3:b8:93:1e:81:5c:9a:7e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate canameri.com.pay2.org
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canameri.com.pay2.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
australiankakaduplum.com
campsanantonio.com
canameri.com.pay2.org
digitaleyestress.com.facethetics.com
foot4vip.com
halfmarathonsclub.com.pureadventures.net
martinomfg.org
modernbritishspares.biz
rivercruiseguy.com
romanian-translations.com
terran.news
trojans.university
campsanantonio.com
canameri.com.pay2.org
digitaleyestress.com.facethetics.com
foot4vip.com
halfmarathonsclub.com.pureadventures.net
martinomfg.org
modernbritishspares.biz
rivercruiseguy.com
romanian-translations.com
terran.news
trojans.university
Other certificates including the domain name pay2.org
(limited to 100 certificates)
leaselock.ca
kiesza.ca
arbitrageurs.asia
pay2.org
allanblock.ca
kiesza.ca
kiesza.ca
leaselock.ca
pay2.org
pay2.org
hydratight.ca
americansignlanguage.bible
kiesza.ca
biblecourse.ca
leaselock.ca
geothermal.world
allanblock.ca
pay2.org
auto101.org
pay2.org
allanblock.ca
kiesza.ca
pay2.org
newsstation.ca
shadi.online
kiesza.ca
fontinalis.vc
pay2.org
canameri.com.pay2.org
leaselock.ca
kiesza.ca
arbitrageurs.asia
pay2.org
allanblock.ca
kiesza.ca
kiesza.ca
leaselock.ca
pay2.org
pay2.org
hydratight.ca
americansignlanguage.bible
kiesza.ca
biblecourse.ca
leaselock.ca
geothermal.world
allanblock.ca
pay2.org
auto101.org
pay2.org
allanblock.ca
kiesza.ca
pay2.org
newsstation.ca
shadi.online
kiesza.ca
fontinalis.vc
pay2.org
canameri.com.pay2.org
leaselock.ca
Certificate
The complete raw certificate details for canameri.com.pay2.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISA8f6NE//xVkxR3J+DxuTm+eLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDYwNzQ2NTdaFw0yNDAzMDUwNzQ2NTZaMCAxHjAcBgNVBAMT FWNhbmFtZXJpLmNvbS5wYXkyLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANAj6lkz3Rt95CygY/lWAqRYh7LAJtqiqVHpW2DtpDBrrMCeKmGMhKux 9NpOKq+MV4XToU1Y08fz8qzTRiKvgdjuxiEdn41oJr2zdKdEHf6I4YbxGoAF71Dv POZtjrVM4v2M0s6k5KLT389IbG6GVJgIxQHEvPnK4lp7Jpwe219TwnudysIUj14e TqExu9hT+vxdjvDT8aqOp3L11PVNGFTDQ6VFShgYu45+5SsFlLGz2TJRHb4EFLmC 7fwg1XmXoX26rZov2Ig9GcwxwkJftEL4JvSajBysxIgbq2VL4xCzwek+iTnXNs2D S1IJwnIPGHoq79o4gQr1QE7u+FAaGVMCAwEAAaOCAyMwggMfMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUBSVgDyUJ6i167x/YNwAj0++WFckwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggEpBgNVHREEggEgMIIBHIIYYXVzdHJhbGlhbmtha2FkdXBsdW0u Y29tghJjYW1wc2FuYW50b25pby5jb22CFWNhbmFtZXJpLmNvbS5wYXkyLm9yZ4Ik ZGlnaXRhbGV5ZXN0cmVzcy5jb20uZmFjZXRoZXRpY3MuY29tggxmb290NHZpcC5j b22CKGhhbGZtYXJhdGhvbnNjbHViLmNvbS5wdXJlYWR2ZW50dXJlcy5uZXSCDm1h cnRpbm9tZmcub3Jnghdtb2Rlcm5icml0aXNoc3BhcmVzLmJpeoIScml2ZXJjcnVp c2VndXkuY29tghlyb21hbmlhbi10cmFuc2xhdGlvbnMuY29tggt0ZXJyYW4ubmV3 c4ISdHJvamFucy51bml2ZXJzaXR5MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGMPk8OQAAABAMASDBGAiEAhBCegPQ65i9sSREyyfRH36bQgjkQjIFS AjJFdxM1kL0CIQDutAza/r66qSAyRzRLX7h9URpDXLHy+ew6+eyU2D7/RwB2AKLi v9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjD5PDskAAAQDAEcwRQIg ZQcQ5lyz2a+QI66Wv80/H2Qf8iF5Zi9WjkdmaxnY4H4CIQCUf60iOxi0wr+9slHw cSLML4EJo+4k41I9hSIZIqj5uzANBgkqhkiG9w0BAQsFAAOCAQEAT9l8c4q9FoJK 0GvVauXeSWs96gO6mIF3H9xv5j+dEWgGDNYBTK/zotpbWa1SJdoGnzXpDLE8yo7r LOeXIeDZCQ7GlaNdcxncIGyZOpJfqUkfF87b9biTiudAYeO5TN9pNruTKxW059zT syu0cX358nrRg+8s8kdGfAiLAb7h4xTGKCS1SEJo85OUUBfhX6iL2rVsrX9ylFOa Wb0aPfymK3feaZShqkRkG+//fqjnAWqOkG0qlZe4OlDwJBl/WE9S+PAZNC/RH0t/ k9p1ZyaDTtRFJ3ZdLuTh0YLHMPAsz388v7AuhGvBbCNWfZvVFspnH9dm9JeEnzQV n/E6RAMYCg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CPqWTPdG33kLKBj+VYC pFiHssAm2qKpUelbYO2kMGuswJ4qYYyEq7H02k4qr4xXhdOhTVjTx/PyrNNGIq+B 2O7GIR2fjWgmvbN0p0Qd/ojhhvEagAXvUO885m2OtUzi/YzSzqTkotPfz0hsboZU mAjFAcS8+criWnsmnB7bX1PCe53KwhSPXh5OoTG72FP6/F2O8NPxqo6ncvXU9U0Y VMNDpUVKGBi7jn7lKwWUsbPZMlEdvgQUuYLt/CDVeZehfbqtmi/YiD0ZzDHCQl+0 Qvgm9JqMHKzEiBurZUvjELPB6T6JOdc2zYNLUgnCcg8Yeirv2jiBCvVATu74UBoZ UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329385627433504983452011927534145453680523 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 07:46:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 07:46:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canameri.com.pay2.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26275277988410404902372209128688908897803303900298423246478608775771224969223128429115582678618730616320188680212768480028990179903032435400645320910386013441390467133540869721361106248307834861277128725567463487235442392612214151537484020000058430372498507979943351666581425181037899126997049021012808886618347659460459647029928552389730596088969261322020239398509292869571069500548383662003222425002693494162107160111295809351825223672896826395484026324729333439499090935129797935438141486783597311114001123975527717741883239326054099224024566242432645318162704359803236691802681516380213312995364013397264744192339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0525600f2509ea2d7aef1fd8370023d3ef9615c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiankakaduplum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campsanantonio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canameri.com.pay2.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaleyestress.com.facethetics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foot4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonsclub.com.pureadventures.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinomfg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernbritishspares.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivercruiseguy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanian-translations.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terran.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trojans.university' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3e4f0e40000004030048304602210084109e80f43ae62f6c491132c9f447dfa6d08239108c815202324577133590bd022100eeb40cdafebebaa9203247344b5fb87d511a435cb1f2f9ec3af9ec94d83eff47007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3e4f0ec900000403004730450220650710e65cb3d9af9023ae96bfcd3f1f641ff22179662f568e47666b19d8e07e022100947fad223b18b4c2bfbdb251f07122cc2f8109a3ee24e3523d85221922a8f9bb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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