projects.essentialstudios.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:59:f7:7f:e3:5f:30:46:6f:c0:63:48:85:af:a4:5f:58 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=projects.essentialstudios.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:59:f7:7f:e3:5f:30:46:6f:c0:63:48:85:af:a4:5f:58
Serial Number (int): 358436918750577389633545770642248741183320
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:bf:80:67:00:8f:38:36:89:6b:61:3e:94:8f:1e:db:60:8f:70:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:5c:f0:00:69:5b:40:c8:36:ce:92:3e:93:d5:45:bc:e1:67:15:70
Fingerprint (sha256): 21:d5:75:d4:88:a0:0b:41:00:75:f8:40:c0:f4:27:90:71:18:c4:3c:22:b0:d3:af:c1:ab:53:a8:65:6f:c9:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate projects.essentialstudios.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for projects.essentialstudios.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

projects.essentialstudios.ca

Other certificates including the domain name essentialstudios.ca

(limited to 100 certificates)
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
essentialstudios.ca
helpdesk.fibraforte.it
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
essentialstudios.ca
help.rmgautofinance.org
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
tsmsupport.lenovocloudsoftware.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
support.yoizen.com
help2.jdeckman.com
sni135706.cloudflaressl.com
projects.essentialstudios.ca
meetings.oprisync.com
sni135706.cloudflaressl.com
projects.essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
tsmsupport.lenovocloudsoftware.com
*.essentialstudios.ca
*.essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
essentialstudios.ca
tsmsupport.lenovocloudsoftware.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
help.odce.arizona.edu
sni135706.cloudflaressl.com
essentialstudios.ca
sni135706.cloudflaressl.com
projects.essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
*.essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
tsmsupport.lenovocloudsoftware.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
projects.essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
projects.essentialstudios.ca
essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
projects.essentialstudios.ca
sni135706.cloudflaressl.com
projects.rocketfire.solutions
essentialstudios.ca
internal.colourtech.co.za
quotes.goyeslogistics.com
sni135706.cloudflaressl.com
support.appnomu.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
essentialstudios.ca
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com
projects.wiselywise.com
help.odce.arizona.edu
sni135706.cloudflaressl.com
sni135706.cloudflaressl.com

Certificate

The complete raw certificate details for projects.essentialstudios.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EFEsxKcY/Ny0qPSmFuy
rO5xsOIpvcaXHE23bBf+1s+FBhixYp4yw5S/AOV5TaIu0flwjgtCztsNwnue51Ib
spTVKSokDmK3jxlvQUr2Ls8SzBba65eQQgsf3CQgX/FilWh+jD5xB1WcOtn3ytIp
0PzeLWWmgxtBOvUkGXY6xpSRcfv+bU4LINeR7zyyIww//mANZwXvhCEzXh4mAuvq
73v6hCb2J8FsXARhmbUm+fo/qycKaNO07k7/HD/CwCSvoBFzWEiKRoO4fLOSN4zp
eAI6MrL3PRMoWmWzVwCkT1vbHLobkl1Flcs/Vx6uMCUNLqbu9yHaGQGuP7OMScAZ
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358436918750577389633545770642248741183320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 08:25:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 08:25:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projects.essentialstudios.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30329378218456422806072156861850160688439443224154244314361592413845280982469767484550914185930363138870227461974791596265637623807145090500864068481978039900123955966378191943098005794699531516268430234663889620338185147709693953604680525065239285905740663931163881958421191359786805343418567658106183212234614099010411608523243408476496508792572862189659025435229783112172976484465601320137616710242981750819924094963316067765766845306914421408199357686463681292734508510880542811857517077348158859001913178646934478388896534861269461521915525084295037965108717269120545870425830039614859902900999434087706746952099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efbf8067008f3836896b613e948f1edb608f706d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.essentialstudios.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5eeebab00000040300483046022100b524b400c613e50e23ac8c370cad0e65a9894c8ca08238b6a603a189db75ed2f022100f1f6f794c53aa29aa5649c006a93fa0414d26699dedf69997ef202b47ce01a4700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5eeebac10000040300473045022100f7f61253d1075f70ecd29c4e2f6fbe854990120628a75f9ff80912680941f17002201f1709bfb5a3ccfd711c77ff4daba5b5453adc50ce81b2826727e7c6032205e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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