DV SSL/TLS Certificate for naturalemporium.sexyveganshoppe.ca

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the naturalemporium.sexyveganshoppe.ca DV SSL/TLS Certificate

This certificate with serial number 06:68:33:88:1e:f8:1b:b4:ea:7e:12:c2:66:1f:0e:aa:50:74 for naturalemporium.sexyveganshoppe.ca was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for naturalemporium.sexyveganshoppe.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:68:33:88:1e:f8:1b:b4:ea:7e:12:c2:66:1f:0e:aa:50:74
Serial Number (int): 558131579158626318748369704387304516898932
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 4e:96:20:a8:b5:5c:d9:b7:ec:83:13:cc:18:0b:85:30:73:5b:e3:56
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e7:58:ae:a8:5b:1a:78:1c:8b:30:32:36:4d:94:d0:6a:d6:47:1b:34
Fingerprint (SHA-256): b0:a9:a3:e1:42:2c:26:9f:9c:fa:30:a2:8d:75:bc:88:2b:de:4f:10:de:51:b4:7f:64:d8:aa:ac:58:ce:92:b9

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/117.crl

Check the revocation status for certificate naturalemporium.sexyveganshoppe.ca
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for naturalemporium.sexyveganshoppe.ca

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for naturalemporium.sexyveganshoppe.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu00znb0CbVJETFwXM/7f
rrUU5skcGyAVecBezfp38lOhBNU9QM/8gDQfh6QIaKG5v8oSd2Y0QyXm8R90sv57
r0j+KTSOdQZVN0MaSWk60AuKu9ytVFDIR5bsjNUNWDQZ9vzKmsY1txHKOLJunKVI
8xm+AKailVCHKb4eBfeZUu1gCxRW3GLiP3J/0nt9fsn2FzjvaSFqIv14hH67+Fwm
y62WzsV2tn1uF0XUzgfVHgHndIGMdqPGaqwagLZFadNSexZ1N/JVYcUCJRaU7TCn
7XglMRsRcDbZNlwes3DjvaOaiX+LXm+MfrNmdHjyft8tZ110L+r9pKablHF8EDSS
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 558131579158626318748369704387304516898932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 08:09:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-01 08:09:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturalemporium.sexyveganshoppe.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23644632569130074166323739707664362739829034691523920836199784489979825210679195817305935709791440823240768200082431863880789836811565375926233807634204539534627004550384768099451089205968707118234908443149503373963751829248326604816799290598764278148879949533571316648510030369338735691167702679721218531694741082330655274153547855520846183369279620793453122436041885514604983899719267621312148152703869609619617785401338170534484491344665303759643586774581410645044686835650381632083722015193678484782260865851459558542079740399289527653355233130175101077871096613439042889283657884392321653047987004807293498069619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e9620a8b55cd9b7ec8313cc180b8530735be356
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalemporium.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalemporium.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalemporium.sexyveganshoppe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalemporium.sexyveganshoppe.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/117.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197cf8b278b0000040300483046022100af347558ca9c4d3d9190d52d72c1e0e9a276fb38dd16f2d56e3f78cc43e8bfea022100bd04aadff688b2dfecfd7349b606a4ae53de4a58e1928b07759f4c81cf927760007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197cf8b282800000403004730450221009e3de84eba6863160c7a34c429a090df566562b0a47d4173565e10b5aebf53b6022043058e39a3c25e0a4d393f38d156c53c3ed7badc8b6ba2246292c21fd514449c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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