eics.ab.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:83:4a:35:2b:9d:98:65:cb:94:20:14:52:42:ce:80:64:81 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eics.ab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:4a:35:2b:9d:98:65:cb:94:20:14:52:42:ce:80:64:81
Serial Number (int): 306012486809974864030167746388239459574913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:c7:d4:58:b9:dc:14:e2:76:13:08:84:f6:25:a7:fd:2f:ea:85:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:48:af:d0:31:6c:b2:15:1d:d1:51:8d:a4:af:eb:e8:79:f5:2a:dd
Fingerprint (sha256): 1c:24:74:9d:07:7f:d8:05:69:b3:b0:7c:a7:19:40:86:91:43:52:6c:cb:cd:8c:1d:93:4f:c2:e4:65:47:0b:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate eics.ab.ca

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eics.ab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abj.eics.ab.ca
chesterton.eics.ab.ca
eics.ab.ca
epk.eics.ab.ca
hr.eics.ab.ca
hs.eics.ab.ca
jv.eics.ab.ca
mcs.eics.ab.ca
ola.eics.ab.ca
olmp.eics.ab.ca
olph.eics.ab.ca
sab.eics.ab.ca
silc.eics.ab.ca
stj.eics.ab.ca
stjp.eics.ab.ca
stl.eics.ab.ca
stmn.eics.ab.ca
stmy.eics.ab.ca
stn.eics.ab.ca
stp.eics.ab.ca
stt.eics.ab.ca
summerschool.eics.ab.ca
www.eics.ab.ca

Other certificates including the domain name eics.ab.ca

(limited to 100 certificates)
eatoolkit.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
cls.eics.ab.ca
sls.literacy.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
support.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
staff.eics.ab.ca
eics.ab.ca
eics.ab.ca
*.eics.ab.ca
mipi.eics.ab.ca
support.eics.ab.ca
services.pickalbatros.com
staff.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
cls.eics.ab.ca
support.eics.ab.ca
services.pickalbatros.com
my.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
eics.ab.ca
eics.ab.ca
staff.eics.ab.ca
support.eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
mipi.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
support.eics.ab.ca
my.eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
my.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
mipi.eics.ab.ca
staff.eics.ab.ca
cls.eics.ab.ca
*.eics.ab.ca
staff.eics.ab.ca
support.ebizsoft.co.uk
eatoolkit.eics.ab.ca
cls.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
my.eics.ab.ca
support.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
my.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
mipi.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
staff.eics.ab.ca
cls.eics.ab.ca
eics.ab.ca
sta.eics.ab.ca
eics.ab.ca
mipi.eics.ab.ca
support.eics.ab.ca
services.pickalbatros.com
my.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
staff.eics.ab.ca
staff.eics.ab.ca
eatoolkit.eics.ab.ca
sas.eics.ab.ca
cls.eics.ab.ca

Certificate

The complete raw certificate details for eics.ab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCAxXtf7zDxFioqVGv7n
RPHsiYG7L8MQnnypULbuQUgJ7nixe1n73LW9VPzX447ncbpj5+lSCVViCV5WOVzT
5KDKhUT5CgZn7tI6jIh/vtU458ap0MpesvCwvcyObw0M+KeU5DoPFg/9Y86m7BLn
V7mzPma5qSrwraFVBzQ33VqDism0phVzj1DBCqX3KMOyijPI0905dK+dPVx6nZYU
vX0DAhlBi5wPE2ZlPP5F3mPxwhR/bYSQKnnidcrPUtM1rPiHkWdFnx2fM3WSVbfT
N9B6yMubHyNG+FMarmMj9Pqz7//3V5UNY4outewr9JCTqOIgUKgaLWaI8cgCu2Js
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306012486809974864030167746388239459574913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 09:14:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 09:14:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eics.ab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25263535880912986460704651334288477263490449073524941486051069599099449148135281993877481299622016674577515556629764160331585820452687351136661479115825224278445784408690321706410948387446292934710189894113417379345671945442833358106311372433298081143267559372193771903907026126532971620993477421537025495551232895752394669352903827434922821178859320984682193334928437987590358835160357898743151988482721822862246637033270692960771906283758576788722029207799313474514125976495147333771645286493504260142432873965256000954726563553470853007259664621192306525044133559727336236620903218351694043114329539039813536214221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcc7d458b9dc14e276130884f625a7fd2fea859e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (387 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abj.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesterton.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epk.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jv.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcs.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ola.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmp.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olph.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sab.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silc.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stj.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjp.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stl.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmn.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmy.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stn.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stp.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stt.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerschool.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eics.ab.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2d0174d9000004030048304602210098793105e4cae73dd3b142f56982316f4b9560b0f7feb6de6dc07fc1b8c34371022100ebd5a8ea61f93bec8163935631f982e1b42186c9e8cf9f6eef01586926fd08aa0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2d0174d900000403004830460221008bd9b529d7fae1bdf092f224adde60e8e0ab0a65c7531b9f5780985bceb5a894022100f45fa7b498854d2cc3c7d06b04fde1b00ee00e78fcf180b2377944a036790193
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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