www.angelsroofing.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:2c:da:c3:86:d8:98:ea:75:19:29:aa:ee:6c:45:96:c1:c8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.angelsroofing.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2c:da:c3:86:d8:98:ea:75:19:29:aa:ee:6c:45:96:c1:c8
Serial Number (int): 363712354807534300086085291697705592472008
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:a4:b0:45:f7:0e:4f:49:50:c9:57:2b:17:13:a0:4f:d8:8b:70:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:d9:76:cc:90:12:0b:1a:a6:38:0c:43:9d:61:b8:0a:56:30:87:30
Fingerprint (sha256): 23:b0:5d:14:fe:55:50:c2:d1:a3:9b:12:03:b1:58:77:57:3c:67:17:0b:91:aa:de:4f:35:19:87:81:14:59:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.angelsroofing.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.angelsroofing.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angelsroofing.ca
www.angelsroofing.ca

Other certificates including the domain name angelsroofing.ca

(limited to 100 certificates)
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.jringenieros.es
2d-cad.bricscad-deutschland.de
www.angelsroofing.ca
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.angelsroofing.ca
3d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.angelsroofing.ca
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.angelsroofing.ca
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
bim-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.angelsroofing.ca
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.angelsroofing.ca
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.northboromedia.com
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
www.leadworks.nl
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de
2d-cad.bricscad-deutschland.de

Certificate

The complete raw certificate details for www.angelsroofing.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApq1PYZ+GjN7yeXK4kzjo
9Qe1OlZ1zbrmC5wdTPhlHrxPqsIooVVzyLqnE2P0SkCs2teQX8OIk5GKDKV3ZF1W
mraMV0wKFLA4tXkHpaEMFX4VD4DbYYTGG+zSoGZBycelg/xFuHUS6+NmSO5uGi5x
U0ExaLCAjn4obuNqEN0X1Jthq2Oq5KmXHVYBkwAk5sMw+rqIG/JLgTFIPwPHDv5m
WGD1heev1DuTYxXAcbuR63CwmqUQGUqJPKvz6snCnW2UTWPH4gc/56eE41yYw7AJ
SSGdZls2inwe4CK3YWH7FVF0zRnIhXwWV/wKQNBlpHk0hhAoKScOHsspYj5KeGuW
XDQLe/bNKHNywDmIoErIBFJDdUeAuzROCgrSQSU0aChXK6bS6nt6E7HL+I0ssTXp
DHfvkHn/rlNuu2ZWQ1XWM3feIb0qq4DR68vnPr+ulBiWL0bpAKDUEEbL8k0kFN2d
Sa2SOkDfogsRqdbYkRGTXzQYuvDCJ5pgmQJ/eaApukbpjM4XgTP4IFMEWDW2goOS
l0oM57l9F2ZzQ9m3WXZrZNAdqbx5uqwVFnRIROh6tN61yU0bmnHPrrhneOvVD0RA
QBsWRNWXw1PV5759X0wjD6ccVvod/cOgikoF0HQRgmPV6EZOGFhUKBsySkqsmA5Q
rl3ARm7MIBHBKnKdLsQoev8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363712354807534300086085291697705592472008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 05:33:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 05:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.angelsroofing.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679982803781621538704096872115378629610891793651386335140064149807177050238341650081574984158477763448331080337191296267584760937791585215659639082649757468402088775862498565320301705353627131543523071719475442231748608322149652379409737515069314802102916618765497158882007501905158956224877622907124195504917746880474849600467863802212229483997042538547394629667241227023873978996906646295889659020855314935607331401814851863505368555224683471053269984014065382371559362450459593143783984517798843913723811628151924838174856422430112066467388269111359523121495445481094253173917869559417749591696624858420514738172326701928521173448751099031742907899409866679427625381151852607400941646645169559693783475882403808470304051548452217589899610884035649452549695938895261040919334856276881781876788912817968637860286744820666846863552971469871250399776905136113342754611686144993666123233605863124069518196743220976175906262185676469335846697243685100046869326229354878263245959699013852949846795642418997900838230436022397947067130686533856614326970789245694157999214054982009665660296591558300840984011425770055905353429458478371379323408310574606438351773092048906510033887694187612698968125364741858284624715261448080217296136076031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2aa4b045f70e4f4950c9572b1713a04fd88b7085
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelsroofing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelsroofing.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce7c6f5b00000040300473045022100f012b39a852a361b110ab6f4c6e0c91dbb0254bdb4626bcd1caf5121960a39a802205f48e82801c04db6b6711ae7d4fd6c1ce8faccd96cee0573ac03c1350077872f007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ce7c6f5b6000004030046304402202207890744893e134f8b3a38dd1d38ed5ff83b0aa566b560dcaa91b9dacaf2f902203ffaf66bb7afa2d3b09c288d6b67e53791dbec78fe67ab4d46c70f452fe3576b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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