api.letstalkscience.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:66:33:a9:4f:a9:c9:8c:4b:94:ee:54:31:24:8f:f9:3b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.letstalkscience.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:66:33:a9:4f:a9:c9:8c:4b:94:ee:54:31:24:8f:f9:3b
Serial Number (int): 334293133813110212295313387062322472679739
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:9d:bc:fd:1c:2d:41:22:43:0d:fc:b4:20:3c:96:a1:7e:44:62:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cb:54:6a:34:5f:1d:73:7d:8e:6a:44:82:ce:96:1f:a6:55:3d:76:69
Fingerprint (sha256): 03:32:7b:1b:18:b8:64:b5:b7:be:9b:69:d2:8f:a4:9c:76:15:c9:ab:8f:9c:58:68:41:7f:69:e1:85:4c:ce:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.letstalkscience.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.letstalkscience.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.letstalkscience.ca
api.parlonssciences.ca

Other certificates including the domain name letstalkscience.ca

(limited to 100 certificates)
api.letstalkscience.ca
letstalkscience.ca
portal.simforcanada.com
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
remote.letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
volunteer.letstalkscience.ca
pre.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
app.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
remote.letstalkscience.ca
support.borealdesign.com
staging.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
brightspace.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
helpdesk.workcentral.ng
remote.letstalkscience.ca
dct.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
support.corp.io
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
*.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
app.letstalkscience.ca
volunteer.letstalkscience.ca
app.letstalkscience.ca
app.letstalkscience.ca
staging.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
support.atlasti.com
auth.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
help.trkall.com
support.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org

Certificate

The complete raw certificate details for api.letstalkscience.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334293133813110212295313387062322472679739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 17:40:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 17:40:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.letstalkscience.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887069006067649560321050308529213645663762109827832038817166804618428549590994166710231170615765307295583662794544061625018537807200317425553300919665757671991977083021920652084555826560353212974619174409310918352756811116475133977888388780101812046832139271566300721763465097565202889322004624837171606435747235455129230924839655727077475253793296380126587790777169034767544317149195497551036597609320705609995003355531088080508519342331451167563725142539970407136516724318227857073524582113263665922654405878372322184189373566109680483605284388254182373325075513574153317086481439395980734246045683564897516569480070150641045676543445464420524175339213007113738239993174178268127383992157005424973246198906672106975817593847554761716345640333337921880499766934591578239457299992788305583776002955806853989983817013683732280429814431021913457518367301519858900768945356887280289085205192452446087221710630289996140428799330827695776781178817879819085517848558903014380947925015845198893293877048915691711045647672854579119190330383555497950107146357405185493964069575417114931128497845055850775307460895083756974389250902209129040526809893765145323951265745953506015224087181875341534711038093867903388346246783560169298185283366169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d59dbcfd1c2d4122430dfcb4203c96a17e446290
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.parlonssciences.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f9b0eb020000004030047304502202e1927f78342f01f7638533eae572ab4e801c55d31d8f9c8cf73bc2a93f72caf022100c251740c7e7950a029dc84ea6001c05d7bb071bad404b1eda89be3540825574a00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9b0eb02100000403004630440220309703f164760c4b30e784051923bc760d061248be6e74f2c41adb2bf68e87ba0220438553f5d9acc50b6e06033c604bbab4b670950cae1b232852fb6606bad3a1cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00196f320fefc9e6f562d20af7ace0f6b141aea7918afed4e446b0ec6005d2dac020f06a97f504d747ca18e961a16c07331c715cea964de35bdde60e6872a2d01b015353aa81b2cce1cc30e5f39add311536d53e2010200c7951c2f3b4b9e25611ece36eb3e56a195fe56d1c18b4a40f6fee0d1870bb265b94875ec883cbfd4e2121d2cb3d9f86f0a5b1cfd64c507c8fa024875c3f0330f5b729b0b08ae6705feb242a5a5867a3a2f42c323dbda9e25b4d6e90ee1a98ee562ff2888f5cd4fc2038a037ba06f722836ad7ef9132007b4b22f6bd580ee62450c88680f767644d70f3bfd71dae5ab6fb61bc7fcfce386c15e7f5979dffb7cdf8d5c4b8f2f110645df6