iconicinksports.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:91:5c:04:65:3b:40:78:07:22:6e:a1:c3:30:11:3f:73 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iconicinksports.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:91:5c:04:65:3b:40:78:07:22:6e:a1:c3:30:11:3f:73
Serial Number (int): 334010217789290451045478247459204258414451
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:a3:40:26:44:a8:44:85:da:5b:6b:2b:07:8b:60:9e:84:da:b9:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:38:95:1d:df:cd:7e:0b:50:2e:8c:fb:79:fc:d4:ec:2f:bf:0f:cb
Fingerprint (sha256): 05:c5:65:95:eb:87:f3:ea:34:ba:96:71:2b:f1:a0:af:57:b8:78:50:99:3b:32:f2:52:d9:bc:10:c7:6a:ab:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate iconicinksports.ca

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iconicinksports.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.iconicinksports.ca
iconicinksports.ca
iconicinksports.entecconsulting.ca
mail.iconicinksports.ca
webdisk.iconicinksports.ca
webmail.iconicinksports.ca
www.iconicinksports.ca
www.iconicinksports.entecconsulting.ca

Other certificates including the domain name iconicinksports.ca

(limited to 100 certificates)
iconicinksports.ca
entecconsulting.ca
iconicinksports.ca
entecconsulting.ca
entecconsulting.ca
iconicinksports.ca
iconicinksports.ca
webdisk.iconicinksports.ca
entecconsulting.ca
iconicinksports.ca
entecconsulting.ca
entecconsulting.ca
entecconsulting.ca
iconicinksports.ca

Certificate

The complete raw certificate details for iconicinksports.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna5FeugoEZTvRrLTx9ET
rJdPqgXZaGvPfXn+HAwBRIh2KZ7rFxCgXx9AX6O9eWiz6hxR6EhxP2wD0G0ZcK7M
hbQANIzb3q21daWCoUrjAYYOcBqfF6JX5dUYAE+l8tUvGGhXpyi5npkSwt4erNeK
wBMdRqeoDLY8RDlHzuvNdMMoxSgaPUnKRqdGtsWu5P7AmbtdeBS8L9XVo5j4aDHI
YsGUixTx0luogHRhBdHjkPVTmnZAab/4ly6VPzoubBwzV6M8YZwTrVpA6IJK2XSB
pogl4IZ4C6b660lN1SqNk6SlHZ2JXTmRkH//GjVpm+sufIXu3E+gDvZ48205hlqC
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334010217789290451045478247459204258414451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 03:28:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 03:28:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iconicinksports.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19905350313189926334162111459423141430547408841875499912852014842925353763980678184850351974303390640032533914203464726390466648106723856218886738538534729904036001372380076590130870127960205282594867232741338108068103048945687546007606332931121008638877135807597746296612768381841815116942889768465827660056996419798346396611321053793333271145339736186795131296923107930180379616559464095347697067389359188442649074126889579448408044852418765204989951821521162869947364057746033117082253826011168732272837673246480233275684969423733256062900145396290247665826433388700870043098071988244753111439091068128558130561551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6a3402644a84485da5b6b2b078b609e84dab9ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.iconicinksports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iconicinksports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iconicinksports.entecconsulting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iconicinksports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.iconicinksports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.iconicinksports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconicinksports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconicinksports.entecconsulting.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001668a94dc78000004030047304502202be48251b25c89df00cbb35bbaf095defc9b2862dc867d5dd1f4322dc132fea5022100b4858cadd4bbce797256b7e19698399097d9fba658d7009f56d8e847aaf8e883007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668a94de7b000004030047304502202fcf4d1d2e594f40dc98e17c3a869d5040d8cc563e08b6b97158be012cff7d5b022100f98e0206d3639d03c3afa6ddbd7b73c3f159c1f79973f910461d9693acffd079
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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