portal.statik.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:b1:9c:9b:96:12:14:7c:84:6a:ca:d8:5f:2d:e8:65:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.statik.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:b1:9c:9b:96:12:14:7c:84:6a:ca:d8:5f:2d:e8:65:42
Serial Number (int): 325205746918723402589994626853493990253890
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:a3:37:fa:30:ce:17:2a:66:d0:71:63:0d:bd:ef:1b:3b:de:00:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:a8:66:f2:da:6d:28:ac:b6:16:5e:f9:7f:c4:a9:2f:b6:26:3d:9b
Fingerprint (sha256): 0b:e1:56:c7:ed:b6:cd:68:fd:ff:26:90:2a:c4:44:78:63:ae:37:14:c0:64:84:be:e3:41:09:f2:07:09:31:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate portal.statik.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.statik.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.statik.ca

Other certificates including the domain name statik.ca

(limited to 100 certificates)
statik.ca
statik.ca
statik.ca
webmail.statik.ca
*.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
portal.statik.ca
webmail.statik.ca
log.statik.ca
statik.ca
vtm1.statik.ca
statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
mon.statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
pma.statik.ca
webmail.statik.ca
mon.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
mon.statik.ca
vtm1.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
pve1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
gitlab.statik.ca
*.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
mon.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
webmail.statik.ca
mon.statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
client.statik.ca
statik.ca
statik.ca
webmail.statik.ca
log.statik.ca
drive.statik.ca
webmail.statik.ca
datapro.statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
mon.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
drive.statik.ca
statik.ca
statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
statik.ca
ssl4565.cloudflare.com
vtm1.statik.ca
statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
mon.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca

Certificate

The complete raw certificate details for portal.statik.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325205746918723402589994626853493990253890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-20 19:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-18 19:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.statik.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798699538351428550008046544086067996952542050140763703919709141267270422732059332052417006653349750082662088679040442772212117185651342190040058974756577111410286770467243857218207248521230451377564951038558823221229715833922712043242670269990178474636469690745325688502525158445361471265214600361766533051921026534470699777300678372181504258856834314653099332214586786677663986620091785563970605934010573394363531835633096528736760563988893570599862819673753603724402120724835479741904938022344464319681497372007197624658199257685257557853739867270921326675962933564703443699756238588269961152650628299031914546325237084141281800288728118188454251448907369675836955647509755624856359960654568464666899859925632263269552220148639381152572180045195359037510401074335631236899197408957713723465187423409792067956354419629055792801139866681318332204397121785071267906053085447361172165797728944596463419026481349806015678390253318729778320416417018159490636624497117901213855058191260400276122511114012823494029030173605272312763240941330036689264406983847610606338812906003068765160135483249929768784406607992153547913793248232759834245521897993199363634858989665575072530545050833755478680731367324328329992037516991951988037114221489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ca337fa30ce172a66d071630dbdef1b3bde00cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.statik.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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