canamatic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:34:28:63:b6:01:39:09:40:30:d1:ff:f0:13:cf:98:0b:c0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=canamatic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:34:28:63:b6:01:39:09:40:30:d1:ff:f0:13:cf:98:0b:c0Serial Number (int): 366197513655645606125584959791139783183296
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f6:87:a7:a6:86:18:22:8b:35:d5:b4:1b:32:78:d0:be:e1:7e:2e:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d8:a9:46:1f:d3:e0:7c:72:b8:b9:03:cb:48:8d:08:90:dd:56:2e:03
Fingerprint (sha256): f2:f1:dc:a0:7b:fc:8b:79:fb:a3:e5:93:8e:bb:4f:03:1a:f8:47:0b:2b:7b:73:d6:3a:5b:db:48:a8:22:29:ac
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate canamatic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canamatic.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canamatic.com
Other certificates including the domain name canamatic.com
(limited to 100 certificates)
virtuoso.legal
genericviagraonlinetopusa.com
www.canamatic.com
bacoli.org
www.canamatic.com
kikai.bible
occulogic.com
singers.world
www.sans-frontieres.com
comeya.com
www.organiclivestockfeed.com
www.caribbean.fishing
canamatic.com
www.fantastichaircare.com
canamatic.com
canamatic.com
canamatic.com
www.dynayard.com
summit.bible
www.canamatic.com
canamatic.com
www.canamatic.com
genericviagraonlinetopusa.com
www.canamatic.com
bacoli.org
www.canamatic.com
kikai.bible
occulogic.com
singers.world
www.sans-frontieres.com
comeya.com
www.organiclivestockfeed.com
www.caribbean.fishing
canamatic.com
www.fantastichaircare.com
canamatic.com
canamatic.com
canamatic.com
www.dynayard.com
summit.bible
www.canamatic.com
canamatic.com
www.canamatic.com
Certificate
The complete raw certificate details for canamatic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISBDQoY7YBOQlAMNH/8BPPmAvAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTgwMDQyMDVaFw0y MDAzMTcwMDQyMDVaMBgxFjAUBgNVBAMTDWNhbmFtYXRpYy5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDKaewRB9jgXljhy4fK+KfY8a6fWQygQDmN jaSAMzHCndFGQRgHZmJn+QQoYBq+AAMNRvyu8FzHD5v1pxJwC2drPEIElG2HeQMv rXWcJZ/jFv3rkuYmQCGK4W8ZuR7iJWOwGJW+dj/H+xClXBOok2zUE0fFXEiD2Iqs XEgCS9+M4srq57guAr+JuHPSjmBLpTZetghV6vPZyb7fsvjP80n+a9zyLRkrzXkn Svbv5moq3KCEUHk63dUNTm32qHqRHkKfwWacaggzLl8u0t2jJDghiYOFp62ylSTH sAgYYsKsS+Hm8mYP8/9uWf18jRuiLoEla7+nsMehDZU86YqlsLmZCm886qOyuILw LxBV4mR6I69hn+XeRu+NpGByQ2sRUnMOWyxQ9NHiNkCSpXq/4U3/gnfE8rYv58hA YZjZYeATgk0E8L+6OCChPIRsprwNR2KOOS/ZtiPAZetIU9vjOizmkt177B6h1PZu l0haoSzCXTh0wRibOahS1S70NTrJ9mhf3e2rMumgsjgdROIsqnhQQ4dg4Wo3fMlD NCoBYhAE2E3lkK6tjfFKeHHv9zhdJhRk21KBoZexiEPWc2pJya2h6RfCU4lHNrBk RV7aw6dP6bvNjE329ujfey2bqGlweR9c9T1/xNECQV54SQocqp+4uo9taebQMlcO ObJQ2eWcywIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT2h6em hhgiizXVtBsyeNC+4X4ugzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWNhbmFtYXRpYy5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW8Wq1YRAAAE AwBGMEQCIB4jk9mdt1wPgRtG/O/qowTrOmaUW2dkthH0l2zuMTpRAiBSsyiYgvzw 0uuSgJThlLiS7qxKx2YihSW/vYXZAyi6YwB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABbxarVjcAAAQDAEcwRQIgVP7zcUlBFI7kWVKfMcgVCCj5 Y71BF7/ig39oKUtH0ecCIQC0WCn8P7l7Zbp5gTyWc4dEVzsqiIUxBcrNzJ4u/72g VDANBgkqhkiG9w0BAQsFAAOCAQEABTnb2akZXieP+f5prqTl1Z9maHMEb1sBAhJ1 tZm8hhGOhjdrlJVGJhJXi8E/HmIlf6K797X7oGGIGj92ykupyL/lnWDEapTaN9KU s/pn5AIYDN5O4nNwdtvLyZQYIHRjVJsLRHLxCkNsZEgNQN3LTLvgQiWUg39FUX15 Ms1SAXAvDuBE/1i8X5FQBNySXaY37MHIGCkEF0iO9Uxy/FlhuzBSKDmFufJzqVyT rO+d+8Ft6uTpUC0YFniydYTHjeYm7UPfM1qH25yH9bvtgtHlLsozC+i1Idg44YFw j1G+YK71U2zTQ5H89GQi7UqhKyVi+oAC46drun2dIP1diiqgaw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAymnsEQfY4F5Y4cuHyvin 2PGun1kMoEA5jY2kgDMxwp3RRkEYB2ZiZ/kEKGAavgADDUb8rvBcxw+b9acScAtn azxCBJRth3kDL611nCWf4xb965LmJkAhiuFvGbke4iVjsBiVvnY/x/sQpVwTqJNs 1BNHxVxIg9iKrFxIAkvfjOLK6ue4LgK/ibhz0o5gS6U2XrYIVerz2cm+37L4z/NJ /mvc8i0ZK815J0r27+ZqKtyghFB5Ot3VDU5t9qh6kR5Cn8FmnGoIMy5fLtLdoyQ4 IYmDhaetspUkx7AIGGLCrEvh5vJmD/P/bln9fI0boi6BJWu/p7DHoQ2VPOmKpbC5 mQpvPOqjsriC8C8QVeJkeiOvYZ/l3kbvjaRgckNrEVJzDlssUPTR4jZAkqV6v+FN /4J3xPK2L+fIQGGY2WHgE4JNBPC/ujggoTyEbKa8DUdijjkv2bYjwGXrSFPb4zos 5pLde+weodT2bpdIWqEswl04dMEYmzmoUtUu9DU6yfZoX93tqzLpoLI4HUTiLKp4 UEOHYOFqN3zJQzQqAWIQBNhN5ZCurY3xSnhx7/c4XSYUZNtSgaGXsYhD1nNqScmt oekXwlOJRzawZEVe2sOnT+m7zYxN9vbo33stm6hpcHkfXPU9f8TRAkFeeEkKHKqf uLqPbWnm0DJXDjmyUNnlnMsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 366197513655645606125584959791139783183296 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 00:42:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 00:42:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canamatic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825776088494685821504418843968083882447167842114179878857244670278954389951916224889846219931474972764324255912031950088930005599790733956557246482924339966417677685988425726743119763900858715122637076601588405311094707715094881139805977249086222623323351659127360701950313633424145539665770836984166793659035458696761719606094857989072314748374204828881853967139093132893703245047414342318539715113478869729887028616405144909328938878189701686878263335348423450699236720851628797176702698963038290521739572648420879529755544735061077088714837079338496482727300535935197047537323877316383695605769105654874241539600020021344350241763898347513756479642056564257290403510653562053754168401535027528662952983407649242312039595977924244670298678455865262884825599997125817219601714488771664097663567127239744418420382705790262496372237427082890014322615607970664968378895312583941634831688447912097351434987729742114606698377117818109672981839835048041138576767242970946118109147320788567065813049936117556639788568992215176262547764880205509747868716459463765627226370959806063819014949300981781758845603581011170451005704062906486746057711827926610064429640219176566241642161933760398603677533391966013111065935659358425281644386950347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f687a7a68618228b35d5b41b3278d0bee17e2e83 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamatic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f16ab5611000004030046304402201e2393d99db75c0f811b46fcefeaa304eb3a66945b6764b611f4976cee313a51022052b3289882fcf0d2eb928094e194b892eeac4ac766228525bfbd85d90328ba6300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f16ab56370000040300473045022054fef3714941148ee459529f31c8150828f963bd4117bfe2837f68294b47d1e7022100b45829fc3fb97b65ba79813c96738744573b2a88853105cacdcc9e2effbda054 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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