friends.calgarycommunities.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:03:ff:30:cd:5b:ab:4d:8d:ce:e2:fd:83:c0:91:50:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=friends.calgarycommunities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:03:ff:30:cd:5b:ab:4d:8d:ce:e2:fd:83:c0:91:50:8e
Serial Number (int): 347093326968869318380457470188950360510606
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:93:53:a6:69:42:77:71:a4:45:07:f7:21:cb:f7:02:dd:62:ab:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:d9:34:40:22:80:85:be:12:04:8f:c8:40:49:11:dd:db:ab:2a:33
Fingerprint (sha256): 10:23:42:3c:07:e6:96:c1:d4:1b:c4:f4:55:91:6f:f5:ae:43:75:fe:7d:3d:3e:13:d5:16:19:14:17:45:b5:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate friends.calgarycommunities.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for friends.calgarycommunities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

friends.calgarycommunities.com

Other certificates including the domain name calgarycommunities.com

(limited to 100 certificates)
members.calgarycommunities.com
activateyyc.calgarycommunities.com
members.calgarycommunities.com
members.calgarycommunities.com
members.calgarycommunities.com
friends.calgarycommunities.com
calgarycommunities.com
calgarycommunities.com
calgarycommunities.com
friends.calgarycommunities.com
planning.calgarycommunities.com
www.calgarycommunities.com
activateyyc.calgarycommunities.com
planning.calgarycommunities.com
activateyyc.calgarycommunities.com
calgarycommunities.com
activateyyc.calgarycommunities.com
calgarycommunities.com
members.calgarycommunities.com
planning.calgarycommunities.com
www.calgarycommunities.com
*.calgarycommunities.com
vps.sfginc.ca
www.calgarycommunities.com
members.calgarycommunities.com
members.calgarycommunities.com
activateyyc.calgarycommunities.com
members.calgarycommunities.com
smithfamilygroup.com
activateyyc.calgarycommunities.com
www.calgarycommunities.com
vps.sfginc.ca
calgarycommunities.com
*.calgarycommunities.com
calgarycommunities.com
members.calgarycommunities.com
friends.calgarycommunities.com
planning.calgarycommunities.com
vps.sfginc.ca
friends.calgarycommunities.com
calgarycommunities.com
calgarycommunities.com
www.calgarycommunities.com

Certificate

The complete raw certificate details for friends.calgarycommunities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsyguy0J54W5i64DCAbm
wr0+zILuCYKX3cX7T0VOpKnM5C6F1Oy823F1438uj6YjwmwdWfrBqzQxY2JRzmkF
/r5L5o4IVEdDcDI/pnxD8Jsd0/6nVATpiWro0SY83dbLlAubmeXLSAoVd2ihBDgN
VQmdJ3/BGlBO4koRHVnSRIfl6Uy10DJrtflWS3vihn/RB5xnuX4o0XgpEA+TXTk3
KBNVU7hlDCoItTCJaS0L1VBTehTQZROECLrhB4Eiu4wBssK9pS26zTITqA+jptXl
zFe6KvfgiwZWJ3XzuKSvkpKxNcj8/TipshDxqLCELZdWEKFdXX0oJsAO2ee6WuWd
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347093326968869318380457470188950360510606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 22:10:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 22:10:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'friends.calgarycommunities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24591136920056521630691666709149578565898779700186107426359516529227192006781709495378087844286705076705481960442791305156269056391946933188862951164051196225794059534361574741796775328078271803562302035799062444077952008528761472445288899472419522644597724540024714837903046798753588573187230893956214118547211907174107908367112169067488258667734353898242979216475841471720223058338358351008853847360886826593608675064503429238944237643997271807010643103177334421375705625503335810053318341564272234819282291164656764808469892791983005996630601439697444885582835790016271480393664905565934547495623373060575127248241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b79353a669427771a44507f721cbf702dd62ab94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friends.calgarycommunities.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cfe8b41340000040300473045022070fc7e75bd4d68c3e4699088f16090e9c5a78dca74fb40ba29a42d9dca76cd6f022100df25fcee41931bcf956d5589c21fa9ebf4e0e9b96f40e1436267f1220f9731d0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cfe8b41540000040300483046022100f7c1b311195f89a2a7880f523ccd325a6ed9dd09d8c9f5fd2352dfbcb475cf620221008212085887f516988e68ece8d871876e4b453299c122d43cb423be635c00a973
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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