DV SSL/TLS Certificate for www.jrroofinginc.ca

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.jrroofinginc.ca DV SSL/TLS Certificate

This certificate with serial number 05:e3:c8:17:53:f8:3f:e9:71:03:c4:f0:4a:3b:f4:31:d5:fa for www.jrroofinginc.ca was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.jrroofinginc.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:e3:c8:17:53:f8:3f:e9:71:03:c4:f0:4a:3b:f4:31:d5:fa
Serial Number (int): 513071493674947355090579610592432702477818
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 22:0f:5b:ff:26:57:a1:a8:a3:c3:17:ef:8b:d8:aa:93:a7:c0:86:40
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 35:ad:da:e4:a9:59:7f:d9:89:fd:66:3d:bb:e9:28:59:32:8f:37:37
Fingerprint (SHA-256): d8:e8:d6:6f:26:82:d4:a1:1b:20:a9:5f:84:d5:c8:68:67:b6:f7:11:fc:98:a3:44:4f:41:4d:d0:cd:df:7a:5f

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/123.crl

Check the revocation status for certificate www.jrroofinginc.ca
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.jrroofinginc.ca

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.jrroofinginc.ca

X.509 Certificate

The complete raw X.509 certificate details for www.jrroofinginc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GdM0KU8suXEKnf2rdfB
T0YwVnpdxuwO3XELTassoXww7PgC3CJ+LsoE6lw4EOevZIRFpeMz7291LhxeKYyZ
71vZMqTtQELiC6O74GRkLzSlzghuDIDmi+QvAgUvWsmkvkEA0bcgWAL24Bg+4auP
GOAW/+Rln3pOwYn7AJh/vnDJbnXpu7NS2qpIMNEsSVD5SZv+0sB5lK5zVdqifKGH
3Va8ETs4AEMg4ti84NnZYVP4EUQOBjAjVAqksXyavxj3b3Jr0DgR76v1JA4+x911
GatNTM6O2hzYJY8X2e86qlFH1f64nQYDCLFuNp2XW5HqwADr58TkKWWRsUdACf13
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 513071493674947355090579610592432702477818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 06:14:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-18 06:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jrroofinginc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28833272689723404539010369047370091408334771246458962050204237676114256244380199226226901113547520468490518609622626449847646466618102602065096561794070092310761349559239924655372112019179422052987037729001371895084415037961897071251823589727571973289965762595142269811680414434388583548603514174756190657276995159654056265369724709662355487636365467606207452286304491805084061537031187853322747333865284609855432488832452162449035385414229417445975256349650958996799949059951882386896954779916966722731557506534064651678423596431797842994870652052155281557781660489069596017252483578785391168942495476042062993651667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							220f5bff2657a1a8a3c317ef8bd8aa93a7c08640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrroofinginc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/123.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001978c2ed77400000403004830460221009ec7049c825a47c5294cad548cb54ccd7c3f7548382327bb77d7ee742d7b5e73022100a5592a7ce9982aac0b66c11b4acefede59883b76c2c014ec2a1a3e22f8b993a4007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001978c2ed79d0000040300473045022021600e2b9d2b576a13f0813d790d011532f9d676c2c47c544bf039d0a9eab903022100f00c3fbd8f3f7729f7ff08deab4398d42707a6dbf7ff0c7a40d541d277abb192
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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