shiftcrm.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:ac:ad:40:bf:00:a7:ab:d0:b8:ac:96:5a:a1:13:f6:52:b3 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shiftcrm.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:ad:40:bf:00:a7:ab:d0:b8:ac:96:5a:a1:13:f6:52:b3
Serial Number (int): 320095717529944018336635950834564260582067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:8f:4b:b9:2a:f8:ce:47:07:5a:43:7e:a0:e4:d5:57:22:0f:23:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:b5:be:4e:41:de:54:e2:de:8a:15:a3:3b:a3:ec:b7:f7:a3:07:36
Fingerprint (sha256): fa:65:a4:07:5c:f0:b5:ea:e9:78:93:f2:03:98:fe:3f:25:e8:2d:d2:47:7a:9d:89:94:a6:b4:0a:df:c5:37:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shiftcrm.ca

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shiftcrm.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliancedefensefund.org
blissneedles.com.alliancealert.sex
correctmy.com
eroticlit.com.doublebassexcerpts.org
euromillionssyndicate.co.uk
exoticforvip.com
griffinstoller.com
internationalbiblesociety.bible
npm.co.in
ostomatetravel.com
shiftcrm.ca
trueracks.com.bradcongress.com
unitedstatesweekly.org
wencam.com
workcompaccidentinjurylawyers.com

Other certificates including the domain name shiftcrm.ca

(limited to 100 certificates)
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
sanantoniochurchdirectory.com.shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca
shiftcrm.ca

Certificate

The complete raw certificate details for shiftcrm.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAKqXifhujJYlkxM+S/0
L1Vc7QiD+rCuhm7pKSfJSF86NU14elRiOM9rMxXKfXyUDwztmpkJ/ISdvsQUJp5+
6/yKKKl3UaNUayOWvWk8KxUhRMWqtAH+abIDHmgqcpJ35tNR+FU8rVgaGLRj7cde
9bQ2P+GQ6gkZ/HqGvvgaK2cNFArI0w/5Yzpd2ES5N1JLJJpx2OTQyPFRowDbOWGH
yAucbd1+9Tro7yJ1/7EfZRsB7kP1KfCSGKHPW422oZk86i9ifch4HB300j5lYnEG
6u4UleUEGhe8cSdmeNTSFAY7bajRaUmhdjhdbaiVddTwVxh8d9YBX9yKE/upwRMg
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320095717529944018336635950834564260582067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 19:15:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 19:14:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shiftcrm.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19694489981350903436282554554110461467970625418003375940240449124215192401843778703578525560487040843614008652452796915941906885795136488128198040683867798530476325886417230212668633525276359555872682632233166961705970663780520136554634910660011357164796780247274062591366347754354758975700456354227775066733373366674167534908829340846203925421558820480479229091498318354573934980139021575391364517728166780360594647653057342475152294995815659106440984598280580720563316390498419119085986412267896842401253577631295125104218909397779734880505396347336258365885728076078220522466774690974208310228107997309305638559981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b28f4bb92af8ce47075a437ea0e4d557220f23be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancedefensefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blissneedles.com.alliancealert.sex'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correctmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticlit.com.doublebassexcerpts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euromillionssyndicate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exoticforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griffinstoller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalbiblesociety.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomatetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiftcrm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueracks.com.bradcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatesweekly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wencam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workcompaccidentinjurylawyers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a19bc892d0000040300473045022028d1e2d20443c9d3825f9b9d8acb4db02f9f84384a28eb70180521cc7f23c896022100b0342c18ee9469eac471b01e52c6d96bde3e84c95578a73ea90de27ec5c0e33f0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a19bc893f000004030048304602210097d893c62376548e647adfa88be35ab9069ca3beca4c9634f488161419cd3b14022100ec9937c7a2c86f15a84e185154c003725a173ad1a5005e8983d90cf9c8b19301
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00078bed2568281190119a50fc4d3af02cffb03add769154c76554ad060f66d4df14d6c5acb078765bebf72564aeaa9e5597abb100e4543eb714b0e4a22c6d5b0b45c48433111b22436a10ba2541a4a46ffae18675fcb4526b518d9929856d41c71f8ab45a3a8dad63967d53fb181bac39c316d683f282f253d5e0bd80fe115511c0fa8e600bdefe78fc4026d1e39159f05f142a43b17306b123bd44a32c8bda2b6c6dd779e9814d32143ef596ad730acf8e17426395cf5f96f2f073a89d11e2edf648e818a49f661accbd0088e736baeca9d7f48af4a1e9836a0ee821ffefbe3a53e2d125b03d2b7b257d322aae8f0c271535f4c3d1540c981f3be270f83df894