ece.ia.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:59:7e:d9:d9:aa:fa:80:d8:2e:83:7b:5d:d7:51:c7:09:d2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ece.ia.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:7e:d9:d9:aa:fa:80:d8:2e:83:7b:5d:d7:51:c7:09:d2
Serial Number (int): 291790602321960663281380160500150160525778
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:2f:76:fd:fa:9c:ca:c7:cf:55:b7:65:14:5e:92:fe:89:48:e9:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:7b:ec:2f:d2:34:57:d1:27:49:8e:98:94:2e:39:2b:e0:46:b4:f0
Fingerprint (sha256): 10:fb:5e:02:63:f8:64:9b:73:22:60:15:e0:b0:51:ac:90:4e:64:43:44:33:f6:4f:75:c2:eb:b3:63:f4:ae:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ece.ia.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ece.ia.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ece.ia.ca

Other certificates including the domain name ia.ca

(limited to 100 certificates)
partners.ia.ca
sts.accp.ia.ca
auto.ia.ca
trk.mail-corpo.ia.ca
www.security.ia.ca
sva0735.ia.iafg.net
connect.ia.ca
admin.uat-flex.ia.ca
covid-conseiller.ia.ca
test222.ia.ca
content.accp.secureweb.ia.ca
auto.ia.ca
sts.accp.ia.ca
voyagedereve.ia.ca
ia.ca
portail-02.wifi.ia.ca
security.ia.ca
GTMSS.ia.ca
test222.ia.ca
Collectif-bo-integration-2022-accp.ia.ca
linstantia.ia.ca
extension.apps.astor.ai
admin.devtest-flex.ia.ca
www.regimeiaah.ia.ca
app.lab.secure.ia.ca
www.security.ia.ca
portail-accp-01.wifi.ia.ca
testev.ia.ca
promo.ia.ca
app.flex.ia.ca
signing.ia.ca
security.ia.ca
content.devtest-flex.ia.ca
test222.ia.ca
iacampus.ia.ca
test222.ia.ca
test2222.ia.ca
securite.ia.ca
*.portal.api.ia.ca
auto.ia.ca
Collectif-bo-integration-2022-prod.ia.ca
cee.ia.ca
evolife.accp.apis.ia.ca
authentification.asmb.secureweb.ia.ca
test222.ia.ca
fs52.ia.ca
security.ia.ca
test2222.ia.ca
test2222.ia.ca
elleven.minhacentralonline.com.br
ece.ia.ca
auto.ia.ca
securite.ia.ca
auto.ia.ca
mastrategie.ia.ca
webmail.intg.ia.ca
auto.ia.ca
evo.accp.ia.ca
www.regimeiaah.ia.ca
TestWild.ia.ca
app.devtest.ia.ca
adj.accp.ia.ca
login.accp.privatewealth.ia.ca
test222.ia.ca
dialog.ia.ca
innovation.ia.ca
devjira.ia.ca
*.asmb.secureweb.ia.ca
rri.ia.ca
auto.ia.ca
GTMSSACC.ia.ca
remote01.ia.ca
www.security.ia.ca
accp.api.ia.ca
apis.ia.ca
lean.ia.ca
login.service.partners.ia.ca
login.develop.benefits.ia.ca
covid-advisor.ia.ca
evo.dev.ia.ca
auto.ia.ca
dealers.ia.ca
www.securite.ia.ca
qc-remote.ia.ca
auto.ia.ca
*.ia.ca
rest.devtest-flex.ia.ca
expw-e.uc.iafg.net
test2222.ia.ca
auto.ia.ca
intranet.intg.ia.ca
mulesoft.dev.mtls.genericsalesforce.ia.ca
expw-e.uc.iafg.net
fs52.ia.ca
proxy.intg.secureweb.ia.ca
accp.apis.ia.ca
content.accp.secureweb.ia.ca
TestRenewVenafi.ia.ca
content.asmb.secureweb.ia.ca
accp.partners.ia.ca

Certificate

The complete raw certificate details for ece.ia.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH6nS+Bst0VtMDzNsfOS
chtZHTa/7zg6WzQ0KNSNw+muwHzl2RLOSBhBWH2ZMBMSLEfHQGNTBfy/7LkcOYsQ
tOKUW4CWmMJu2Tuk+m1PA6Q8cdv6Tl7TUEhsGBB72SU8iTV0B8wQbW5UA0BK7Lcz
Z+F/U3xVNNrOVwvPGm+DT8opLWmsEUU5HrToO5eACnwAWZ31NMRgBc2ly04ZAUhO
ckbI1s0lU7yMkQ8f6oSFw1l24jOiervPmZ95R2cH3/j39ZRuVIpHtPcdzw1QJEFo
cynvhbj9jZSJdlyItnVg6VH+H6qsDm2hkkJ2g/WrSgvDXtsG472+/V4eMAKocrUa
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291790602321960663281380160500150160525778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 09:20:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 09:20:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ece.ia.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21270490403641255659968621819419564679963968438315045436248595302885856463411269005413713511270396966182038258081219256357132082586816320736852728232130898748968001225952417414640561492422440082718058812397834019045638935714403144391763979050740493597563136793581394866747725473986373760252150737784406904902232396001588924703618779708631756016656456320401652409023382705474766025730949504627440735644348349988098944396489352170267682890676421779278007149798739605841892911213866972725358464536595702258218937034635668026408572606150551584319192294055409924047556265705137176269078660061660683870644349410814591310493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992f76fdfa9ccac7cf55b765145e92fe8948e995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ece.ia.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001895e36fc2b0000040300483046022100d8b640ba3460af3686b9ae740120485a5441ec70c65c48cbb10e3886189a8b4b022100fb840c088749059debc30367fdbb17abf27a3b52a02faa5341412bcab2ac0f4f007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895e36fc1800000403004730450220431468656856e112c5ddcb827ac4c2d8b1ec66c3276c3df305e1a144d6b1a7ae022100df77327c635440eb3445ccd6cb4db53873154c2e5e38542f33d0dba3a9131cf9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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