DV SSL/TLS Certificate for com.tradeport.on.ca

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the com.tradeport.on.ca DV SSL/TLS Certificate

This certificate with serial number 06:a4:4d:81:bd:f6:ee:5d:da:e7:1a:bb:89:78:24:7c:63:99 for com.tradeport.on.ca was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for com.tradeport.on.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:a4:4d:81:bd:f6:ee:5d:da:e7:1a:bb:89:78:24:7c:63:99
Serial Number (int): 578583047980504891367566965103610361045913
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 66:16:35:a7:47:2f:51:97:a9:5f:45:60:30:5b:3e:86:05:4c:55:b3
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 35:b9:2b:59:2a:a3:94:dc:51:11:a6:50:09:10:58:9a:06:c1:a8:90
Fingerprint (SHA-256): ff:c2:be:25:c1:97:5c:5b:4a:e8:67:9d:c8:cf:6f:9d:6f:9d:3c:57:22:f3:99:87:6a:91:ce:d5:89:3a:b0:b6

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org
CRL Distribution Point: http://r11.c.lencr.org/26.crl

Check the revocation status for certificate com.tradeport.on.ca
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for com.tradeport.on.ca

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for com.tradeport.on.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TTpNUziId0CNrQu8SCb
2sGMuwRGYrFKyK9CfDGsy9OvjmrICJIO1sFL7ca+dZeGSV66Wf4Hb0+0EqyCngLH
ub84jbLVknMAEy8T0BQR8S9xhgRHPkZ+9fX/ziqKasT/583JfkhkPoEh1yo42PKV
xEn3RmwOPB73ozliaSbc43jwD7Ttl3FJyk+K1BKLLkttGCp8WX1xYENP8jwLOSbt
sDbOF/CrTEbOa1GGxLX3Y/0d90adZBw0mWyfYjD7khSy402KiudosRXZ3d6Tg/Jg
Sd2l26z8XKnOBgzWrQFD0uX/9xrOmM7i819VUbWJ8Tvry8Bd7bRDGeYq45oQtGgR
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 578583047980504891367566965103610361045913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 07:56:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-04 07:56:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'com.tradeport.on.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27924756769022017121726496287085489318713971315356640248213547512785093618198565086655089491209457666070482001522638206112319483745504687020422386369598886580867074552118005269398524425000327144450125806965189877357410313376519223176622106947940959618515793060406045556349945188856106466624243667486190554343227356985315688962157701913502147828823434681124754343511941200718982814011569846652303823710035820665224020275418624988422291528111303002779157553872180715165256037416274624139490611398982888357587990052759294556191946687678251616521975540374654768503390639462871993218737764896903977833256941050072660447543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							661635a7472f5197a95f4560305b3e86054c55b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.tradeport.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.com.tradeport.on.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/26.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196a4ceab000000040300473045022100cadfcc627ad47da2eddeddbf235eb4e6a68bbc99a4f720fd97fa604d8e91bbb702204f942a7f5fe1866c086ff72d144d14bf31b03e20679f8eacf1e3614cac658585007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196a4ceab530000040300473045022100993b9128b9a43be2517d7c823e2df9dd8b8d0c17708e0ec2ca51c23c64805248022015ad0f270b1d5d5d13f445e055f09c03a2862cc2633718c3e5ddd801cb6aa2fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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