ucc.on.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:2d:fb:26:28:46:59:8c:1d:cd:6b:1b:f5:7a:5d:41:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ucc.on.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:2d:fb:26:28:46:59:8c:1d:cd:6b:1b:f5:7a:5d:41:93
Serial Number (int): 308356943730614524999933381411247163785619
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:9c:95:74:71:b7:45:76:da:e2:21:3f:fe:d8:17:2c:b7:99:a0:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:ba:00:94:c2:ee:0c:0f:85:86:09:0c:09:b0:d8:96:6d:a5:24:ae
Fingerprint (sha256): 0b:14:ea:74:f5:95:7b:87:3f:f3:65:e4:d4:3a:31:22:76:a4:a0:f7:59:93:e4:51:89:7e:e6:86:b5:89:cb:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ucc.on.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucc.on.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucc.on.ca
www.ucc.on.ca

Other certificates including the domain name ucc.on.ca

(limited to 100 certificates)
headsup.ucc.on.ca
mountaindew.ucc.on.ca
ucc.on.ca
*.ucc.on.ca
ucc.on.ca
ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
parents.ucc.on.ca
ucc.on.ca
ucc.on.ca
bluenet.ucc.on.ca
archive.ucc.on.ca
www1.ucc.on.ca
applications.ucc.on.ca
headsup.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
towards2029.ucc.on.ca
ucc.on.ca
headsup.ucc.on.ca
pc.ucc.on.ca
pc.ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
applications.ucc.on.ca
*.ucc.on.ca
pc.ucc.on.ca
pc.ucc.on.ca
www.ucc.on.ca
*.ucc.on.ca
webmail.ucc.on.ca
giving.ucc.on.ca
brightspace.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
*.ucc.on.ca
parents.ucc.on.ca
events.ucc.on.ca
pc.ucc.on.ca
ucc.on.ca
events.ucc.on.ca
ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
parents.ucc.on.ca
ucc.on.ca
ucc.on.ca
worldaffairs.ucc.on.ca
pc.ucc.on.ca
bluenet.ucc.on.ca
bluenet.ucc.on.ca
bluenet.ucc.on.ca
towards2029.ucc.on.ca
ucc.on.ca
*.ucc.on.ca
giving.ucc.on.ca
*.ucc.on.ca
pc.ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
towards2029.ucc.on.ca
archive.ucc.on.ca
ucc.on.ca
mountaindew.ucc.on.ca
archive.ucc.on.ca
*.ucc.on.ca

Certificate

The complete raw certificate details for ucc.on.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdfCdV/gcVMegRAfY8IG
zKlRYxsHeBuuj9yjJ756snAV/Q3KVNXbb27LKAWxuKl/ePX0IRxIv6iNEAyG0bBO
0sc+Vry3mj7O/CBLWB9Rxu9z54syWvirLOdAgsKXrJywcDoMvWNRq4uTt0vPhuul
CBtTefpNupwZC3/8ReAEXm/l7Tmgtl6afIk2cwha6wM6pJY+0z6vT0YTer8T5qSf
aFapMDTcYVn8qohVvc7GfUwg1+oEDV4wNK5MGf4sNtkJcMTeO1JbdXdyoziSUKTa
PXWioTkeFP2gFGiBy15dJvEk6/Pz6EpFsHkFns1Z3BtZ+/4OiALutsjwlJlmoQVq
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308356943730614524999933381411247163785619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-23 03:39:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 03:39:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucc.on.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19420855685686295697832244096365677111494586242653599258630694179459879683791138110079763275950599189988849438091334879953703581471254976365057465148632645715771418255974634419909799478644089974655433257285753447047954706218990758275438930167601197180823569836757850580872084707553488831569846580025508486100847754523691533277443546226469034285155265411669629801972355942321658726691520614174832656248353901130198277508597956240312489450400665819913860531956085014151598075252498884185432326756673512057448583890705065111302870029775378078934456470375688059421799847097900593335021111623484341115585517426960580831861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							369c957471b74576dae2213ffed8172cb799a0da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucc.on.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184a2c912c8000004030047304502204ce121c808e2f897236da479482137bb7b9c004ded816e9c2c6740d4a4475967022100bf2a709a3c5f33bd33fbfba76c3a349680017c17dbbbdcddaacde7ba37d6541e007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184a2c912ce00000403004630440220473dca69ca33fb23fa3178b7675877d4884e0d0dcd9ad5ed75a82a690d485b80022005953a9baef429939f843e21effaaefc4b3eeaf90552c270f1fe7a8e5e929cf1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00687eca8d82a924f41fffd855f4cc5045200f6b0d759aadd3355a15a1fdd3210ba842fc51a89be291593ad45d53ea83ee7d14f108db32b691547cf7a2557eee7580592ea56e87978fefa1e27c7f6334d463efd59ecf7dcb34453c54dd4be9faa9564e5272bfae08390b91bf0bbf681beb1da438118dc2e038d571bc84ffcc0534bc4f4f2f685ee2f64eac4ead1642ec534509aafca62e794cf6d9eadb6bb1737d707c038701e07c9506b611368d8361567f92ae9f268372b45dc99bde86f0236565ad7aa09cba9b833003067f8009cea0b18cb92012a27754131754ed98a4d0ef42807069e1b6d199bb0c3df67f275a55619a9ffe4339f589492c783b14740484