mineralindependence.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:13:21:88:04:de:00:d5:38:22:d3:68:53:b0:9c:e7:df:0e was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mineralindependence.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:13:21:88:04:de:00:d5:38:22:d3:68:53:b0:9c:e7:df:0e
Serial Number (int): 267846793541730781965107010243825431469838
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:7b:cf:ee:33:2f:34:26:55:6b:cc:bb:e2:5e:a5:c9:d0:b9:10:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:56:5b:42:1f:c1:10:ac:f4:dd:84:7b:f2:75:9c:da:c8:18:07:ca
Fingerprint (sha256): f8:3e:f6:4d:71:cc:85:c0:19:48:36:df:2b:53:98:07:b9:a4:67:ae:c1:59:fa:0c:70:65:f3:7d:d0:6f:f5:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mineralindependence.ca

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mineralindependence.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aicab.io
buyjean.in
buymusicscores.com
casinoecuador.com
lifepo4sale.com
mineralindependence.ca
moviebill.com

Other certificates including the domain name mineralindependence.ca

(limited to 100 certificates)
mineralindependence.ca
mineralindependence.ca
www.yunqui.com.llcmeans.com.mineralindependence.ca
mineralindependence.ca
mineralindependence.ca
dctorf.com.mineralindependence.ca
mineralindependence.ca
mineralindependence.ca

Certificate

The complete raw certificate details for mineralindependence.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAxMhiATeANU4ItNoU7Cc598OMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDkxOTM5NDNaFw0yNDA4MDcxOTM5NDJaMCExHzAdBgNVBAMT
Fm1pbmVyYWxpbmRlcGVuZGVuY2UuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCU07AYqFeCKyJI/hG0ptCXVe5YUYWJ7wbhNrkimk2GcIBZLGTaNuxh
PQdcega9KXqttiMNrfW9nH7uhRhnxj+e7s0uDrYKaK6Fuh/+AU0ktC8w+1865zcG
9v+XP4GouUeiQvsRJASa9FKY8tzETPpFL5NpDl3Uas0jiz6IUXx2fbxWxrw51qgA
HOporKejlMFmz4Dn5kT6FRdEdC5PYqdzysjkE0GyONjZsng3dEMdnJz5smvbD8Cq
AbQ5zkSEODrDd3qTvPW5/VdSHMAYGp3kgiSpJgJSjGyAZOyvzDZqbm6w5bk1/CJx
hayXCesLBebgcRbthGKI2HC0cXTpgzEfAgMBAAGjggJ0MIICcDAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFBp7z+4zLzQmVWvMu+JepcnQuRAjMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMH4GA1UdEQR3MHWCCGFpY2FiLmlvggpidXlqZWFuLmlughJidXlt
dXNpY3Njb3Jlcy5jb22CEWNhc2lub2VjdWFkb3IuY29tgg9saWZlcG80c2FsZS5j
b22CFm1pbmVyYWxpbmRlcGVuZGVuY2UuY2GCDW1vdmllYmlsbC5jb20wEwYDVR0g
BAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQA/F0tP1yJH
WJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY9fFVBbAAAEAwBGMEQCIBmv1BkW
v3HThRMIE9Nqdszwj4Q9e8km4cu9TjVNqvtVAiBWu/0CQa/zM1AzPTCU4ohrzlUg
/LR4lKE5ECimifCLMQB2ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTK
AAABj18VUGUAAAQDAEcwRQIhAPR62bcmiOEVmlOicTK+k0iH8VGi0it+qYqgwvGu
IEOjAiAdpGTiXiWDrkTAA6QsHMNmA840AebWO2kbeZySyXHp0zANBgkqhkiG9w0B
AQsFAAOCAQEAKwVULMfL/NS2+N1aaF8Ccyh3uXhp+3p6RPmDoQVB7Ah5kcFNyUQz
IUscrBzLB0UwJ/UjEWhYWLQNGj/Tt7UcCZABw+u90E61WG3g2r7CQS+L6yewWH4w
uFAaFC0yy6r/WOipyc8RYE45//aMq7IU6NMZma7hgjlMJNxmeFCvU/odwFUYq1NJ
8GqBL3gEPcjXBW1eVj/RvOiahAJq0Qs0AxM8scUxnai1XStq/o5piHbcoi5mgbZm
6X+Qm3/1tYvnVyMQPW2dpfBme0S/64QuFX89w2hrMtFXviK78yRE0sCtylxsMsbV
qeB/Y2Y8mUTE4PaHFxQu1I2qQG8BcnlqFQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNOwGKhXgisiSP4RtKbQ
l1XuWFGFie8G4Ta5IppNhnCAWSxk2jbsYT0HXHoGvSl6rbYjDa31vZx+7oUYZ8Y/
nu7NLg62Cmiuhbof/gFNJLQvMPtfOuc3Bvb/lz+BqLlHokL7ESQEmvRSmPLcxEz6
RS+TaQ5d1GrNI4s+iFF8dn28Vsa8OdaoABzqaKyno5TBZs+A5+ZE+hUXRHQuT2Kn
c8rI5BNBsjjY2bJ4N3RDHZyc+bJr2w/AqgG0Oc5EhDg6w3d6k7z1uf1XUhzAGBqd
5IIkqSYCUoxsgGTsr8w2am5usOW5NfwicYWslwnrCwXm4HEW7YRiiNhwtHF06YMx
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267846793541730781965107010243825431469838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 19:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 19:39:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mineralindependence.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18787656317316598021060149313692646881010543907413380194006417666098448395796159687388342810369346900639201211967080391664751625802939796292859186164113386058172086321410800202920783020658097240475059273931232929970197792551042092264676049174281586662096225304345715429438006615457339752160016525505201098953949637331759237718609676794223713718233516248194471941274435504470958182535554856823657154414184581002298184413810072127611873723784079129221347426852011994181435236060052272894965993352978826024162792050076153098345216756440408398589651186273576993448406753121292608405035056069904228395729798279341285781791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a7bcfee332f3426556bccbbe25ea5c9d0b91023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicab.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyjean.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buymusicscores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoecuador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifepo4sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralindependence.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviebill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5f15505b0000040300463044022019afd41916bf71d385130813d36a76ccf08f843d7bc926e1cbbd4e354daafb55022056bbfd0241aff33350333d3094e2886bce5520fcb47894a1391028a689f08b310076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f5f1550650000040300473045022100f47ad9b72688e1159a53a27132be934887f151a2d22b7ea98aa0c2f1ae2043a302201da464e25e2583ae44c003a42c1cc36603ce3401e6d63b691b799c92c971e9d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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