canibuild.de

Issued by R3

About this certificate

This digital certificate with serial number 04:ad:60:e8:80:73:79:71:f2:94:9b:1a:fb:1e:f5:c4:56:6b was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canibuild.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ad:60:e8:80:73:79:71:f2:94:9b:1a:fb:1e:f5:c4:56:6b
Serial Number (int): 407446806310127126166382185442578819995243
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:ad:9e:10:46:5b:6a:1c:a9:61:cb:9b:f4:83:0a:de:63:63:f0:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:2c:b5:32:2c:69:da:12:f7:58:04:10:21:b7:56:f4:11:ec:d2:bc
Fingerprint (sha256): f5:f2:09:d4:11:c1:15:6d:b3:87:fa:0f:c6:02:fe:10:4e:6a:e8:7e:1c:b9:a2:2b:b0:89:06:dc:18:81:36:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canibuild.de

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canibuild.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ainoemi.com
authenticatedsportscollectibles.com
berlinlegal.com
bizgrant.com
boehmschocolates.com
canibuild.de
comebackpresident.com
cosperks.com
dates.istlm.com
dof22.com
dundycounty.com
hillcountrywomen.org
homeschoolcenters.org
ihatediving.com
myghana.org
oilcityironworks.store
olympiamex.com
privacyseminar.com
processinggame.com
professionallogodesigns.com
religious-storehouse.com
richardmorris1031.com
saugerties3dprinting.org
smartcity-tv.com
sporthorses.net
standardlegalkits.com
stopthemandatemn.com
www.kinematicmodels.com
www.unsugaryourmind.com
xn--8h8h.tk

Other certificates including the domain name canibuild.de

(limited to 100 certificates)
www.canibuild.tech
12coffee.com.chain.dance
canibuild.de
onlyyoucandoit.ca
locker.tube
canibuild.de
bryancurran.com
canibuild.de
canibuild.de
canibuild.de
www.oaklandsportsdoctor.com
canibuild.de
pensionloansscheme.com
www.bikecomm.com
canibuild.de
arbitrage.gd
canibuild.de

Certificate

The complete raw certificate details for canibuild.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6YyBtGIQIT0VEEKMNTd
fRp+W5NyI0tZczU4Tp/Ppa4zJf26Zn7NnfPgP2/r1kq7Wr0nlUVSKRHvpkrMPO5K
cNmw7j1dvLLB6vyYMCWL1dSFnMpKoYJ+Xbro1v/MA002zXif0HZlUFAXeinJNgC6
jqcJ0WdsZ0USuM5/llI0g5ughWPLHKxn+33qOQ1kARe/mjEfesbTH/jjYQxeLNx9
L+hxypmgsgfKIN/KeZ4RJSMhpdeKzPgOINjVVkNujrsW5Jjuxaxkph1wjmC2tOkO
2WCMGcEhkkIIgM7wUYPZD7EGEVjw5+X8U2ccyGlZN0pUr6xIgS3H+znDpljXb524
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407446806310127126166382185442578819995243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 17:42:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 17:42:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canibuild.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26213283142338855612115116809948415778179421856468259609939656537288724286130824005428208684388199862036437896436341850076301905524320520034256219793161919000446369350248133392698258412858553451154720449770648392520832731799435892341488155337555002953987554306408546544132393607344209182073049464462402645361247301483564569161794427786741731599737322557034640632373584814147965485194668962003751100233612994467471918145394087484336544121927475137431373658540955356498364738673438457629807997761260548976849422620904324266022018199208969122234255728667505078338609189225943373035068121465609646454807674190952954443943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91ad9e10465b6a1ca961cb9bf4830ade6363f03d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainoemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authenticatedsportscollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlinlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizgrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boehmschocolates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comebackpresident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dates.istlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dof22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dundycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcountrywomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolcenters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihatediving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myghana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilcityironworks.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympiamex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacyseminar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processinggame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionallogodesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religious-storehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richardmorris1031.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saugerties3dprinting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcity-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthorses.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standardlegalkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopthemandatemn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinematicmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unsugaryourmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--8h8h.tk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1bb73e1f0000040300483046022100a4c45d1c55ece9e99e78b0aa2b73eb69da4e08f454742b4a93038939b1332ff6022100b20418c96e1f103619112f1eafa70b34eccf66c3cac561a6ffb8085cacdc3e8f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1bb73e35000004030047304502206b42e0dc7216803b46ee45b83db55c6858fd9e8b1bfe2f5d6204cab43185b386022100b3450287953ac14633a6a5a8d43eb3f4fa4e30bc7f95652f7f57a2d21932117b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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