fakecuram.dev.ps-sp.esdc-edsc.canada.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:4d:e6:b7:80:1a:c0:70:c7:e1:46:c1:79:96:32:d6:f8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fakecuram.dev.ps-sp.esdc-edsc.canada.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:4d:e6:b7:80:1a:c0:70:c7:e1:46:c1:79:96:32:d6:f8
Serial Number (int): 380198952356471606747844016460694721582840
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:23:2a:c3:70:19:5a:65:a8:31:1b:47:92:a1:ba:44:02:34:ac:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:eb:e6:0f:1b:10:f4:65:39:6b:b2:95:13:0c:dd:56:20:ed:3d:1d
Fingerprint (sha256): 06:d8:0e:99:69:c0:e7:d7:3f:75:3a:dd:75:9e:4c:26:88:e2:92:3d:f2:23:80:eb:40:a3:2b:66:58:f8:e3:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fakecuram.dev.ps-sp.esdc-edsc.canada.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fakecuram.dev.ps-sp.esdc-edsc.canada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fakecuram.dev.ps-sp.esdc-edsc.canada.ca

Other certificates including the domain name canada.ca

(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
api.explorer-marche-travail.service.canada.ca
rp2-oidc.id.alpha.canada.ca

Certificate

The complete raw certificate details for fakecuram.dev.ps-sp.esdc-edsc.canada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380198952356471606747844016460694721582840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 13:07:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 13:07:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fakecuram.dev.ps-sp.esdc-edsc.canada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761676255545665524346614885538483621748186709251791174385753618213462779738905008703395983706451943552317280887990237021533388642770866291136517148582129779291433484666522706195491209793219255768922815002787514886575888387139481225840378180194518861032467079620492753163235300896476911136245115187402096302211029718048198743796569996954899776804046775183367396741063250148704248464056247985323057447485954516409657014935510891392032537688391792356856066968594908361917628502793451699904501801919715880073670250135928858112966950511429758097921823956079449039974117053805954854712265963185779889542053235186743359353524669425923805113055685237734612679230950800818967224659803271882160088963303446707038598748450645416104760408413871598212903900792287366005737065788249151865618283681891567187995130372847547404647511536398575687133039245079055097627310652043197104482878498296875841764619109531338666340475401949108490445628198994560487350964548363257732408054443240305117842993680064928906774749879646406085795218377888757884784657936073268605797330584299149092163827787467058473617421082874422134989096672414850949983473145475813929461333080346177290825434704211798540599948069201046316201608294332303788071839270394529986792767691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98232ac370195a65a8311b4792a1ba440234acec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakecuram.dev.ps-sp.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001872365a98a0000040300483046022100e7a58bce2b7b351238f519f975416e340971f395561682b9f5ef1a7027083baa022100ed629fc1a4b68f7db797d6630542d33df5a404dafd44e7df08d0fb370ca221be007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001872365a986000004030046304402202b3c070650af8a9fb48e352c62cd3dd59159c6616f3ad653a36b28cbf4b8f8ee02204bb44a361a356348e12652ab621ed2d108abdc88ccca98ea282acb9d99e484fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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