www.novawave.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:6a:51:6f:7c:fd:e8:43:f4:0e:73:af:00:5c:4f:90:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.novawave.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:6a:51:6f:7c:fd:e8:43:f4:0e:73:af:00:5c:4f:90:c3
Serial Number (int): 289721615254567713467177252533733671538883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:56:80:7d:0b:4d:8d:da:23:52:64:b1:ca:4b:33:6c:ad:3a:a6:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:bf:1c:62:15:b9:de:b9:aa:c0:b3:8f:4b:4c:17:c0:08:11:0a:f3
Fingerprint (sha256): 24:ec:a3:a5:04:a7:2b:5b:20:a1:87:c1:36:4f:3e:01:9c:fa:80:a9:fe:f8:50:81:a6:7b:16:93:ba:21:00:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.novawave.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.novawave.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.novawave.ca

Other certificates including the domain name novawave.ca

(limited to 100 certificates)
novawave.ca
novawave.ca
novawave.ca
novawave.ca
www.novabench.com
novawave.ca
novawave.ca
sni206163.cloudflaressl.com
novawave.ca
www.novawave.ca
sni206163.cloudflaressl.com
novawave.ca
www.novawave.ca
sni.cloudflaressl.com
novawave.ca
sni.cloudflaressl.com
novawave.ca
www.novabench.com
sni206163.cloudflaressl.com
sni206163.cloudflaressl.com
novawave.ca
novawave.ca
sni.cloudflaressl.com
novawave.ca
www.novawave.ca
sni206163.cloudflaressl.com
novawave.ca
sni206163.cloudflaressl.com
www.novabench.com
sni206163.cloudflaressl.com
novawave.ca
www.novawave.ca
www.novabench.com
novawave.ca
novawave.ca
novawave.ca
www.novabench.com
novawave.ca
sni206163.cloudflaressl.com
sni206163.cloudflaressl.com
novawave.ca
www.novawave.ca
novawave.ca
www.novabench.com
novawave.ca
www.novawave.ca
www.novawave.ca
www.novabench.com
sni206163.cloudflaressl.com
www.novawave.ca
www.novawave.ca
www.novawave.ca
sni206163.cloudflaressl.com
www.novawave.ca
novawave.ca
sni206163.cloudflaressl.com
www.novawave.ca
sni206163.cloudflaressl.com
www.novawave.ca

Certificate

The complete raw certificate details for www.novawave.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISA1NqUW98/ehD9A5zrwBcT5DDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMzAwNDA5NTBaFw0y
MDAyMjgwNDA5NTBaMBoxGDAWBgNVBAMTD3d3dy5ub3Zhd2F2ZS5jYTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMFP9aiazKR9m2A3NFz4eNEYXdz0nJ1u
L5Pyfkfn8C+kT9HRl+qXQrUt5bxh53vtH3h5L3AaO1Jq/ua5Mg/KQXnwdUpWNAdJ
Fuz0oLhFe7QkERatRSAwHvv+2kdHqYIRfXKe7pmRz+p262ypOdr1zgIG3do9ktpF
f8TmZqwLkSzlhMzWcVyPiyoTxztdSj7LLfHUVIcKOBn5rNUr4ngrKN0ni361y7lb
PO/1ME0RTgnu28Q8BDS20NENxJkmwOBb/tE64XpLgLRPuLLy4AD0koio212o34m+
R1kL+rC6hdPvM/6fKTsMaAimRygmLBYxjSeIEoWkLyGVJ8enVwpNuicCAwEAAaOC
AmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUAlaAfQtNjdojUmSxykszbK06
pvkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzAaBgNVHREEEzARgg93d3cubm92YXdhdmUuY2EwTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCyHgXMi6LN
iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW66txLmAAAEAwBGMEQCICQjpvNs
ngoOUCl8vT30DAmoDGVJPlIgEwsiceA2FZgIAiAX1rcX5etYo//Y0qLH7NYainzc
XeY53lq2C/+iRs7FywB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT
AAABbrq3FJgAAAQDAEcwRQIgSRoXdbaEYHVARlv9sUtPqsSMNDPxhrtzkiNpBDj2
tSICIQCwRJZLhtrfO300g6KHd1zN7baMKYQf86CNXSGpuppIfTANBgkqhkiG9w0B
AQsFAAOCAQEAe1LU9AqDgJd7w1M8HAhghXLMQuQl/pT42+Mo0PxEXsGWF1tx8YR1
KndS/6yHQXmlX17dePJifuYurK+dzXVnVAcHZIBaz8CFy2BwbvEXR3HYRhhYeTYy
d/oTRJx4K5zKLAE/3LQEKgtAqDs+XrNLqMwPfTt8EY6ZrLLi8wwgsbeIiffXjveY
cQ10W29xUqmJd4ou5Ankwx3fehIgCU+vYeSaILt6qcNQ7b2efbHO9l+9y7rxdaM2
HbZ5F/lPeqDQcx9e4y+JvhNgPDkQW+REe9X1FA5dx06DUOkSGoV4eqSum8RR6pMc
nDF7AcbE4iLF3ES89RRnATTdAoQG/kLrbg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU/1qJrMpH2bYDc0XPh4
0Rhd3PScnW4vk/J+R+fwL6RP0dGX6pdCtS3lvGHne+0feHkvcBo7Umr+5rkyD8pB
efB1SlY0B0kW7PSguEV7tCQRFq1FIDAe+/7aR0epghF9cp7umZHP6nbrbKk52vXO
Agbd2j2S2kV/xOZmrAuRLOWEzNZxXI+LKhPHO11KPsst8dRUhwo4Gfms1SvieCso
3SeLfrXLuVs87/UwTRFOCe7bxDwENLbQ0Q3EmSbA4Fv+0TrhekuAtE+4svLgAPSS
iKjbXajfib5HWQv6sLqF0+8z/p8pOwxoCKZHKCYsFjGNJ4gShaQvIZUnx6dXCk26
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289721615254567713467177252533733671538883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 04:09:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 04:09:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.novawave.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24403422408718162101980202694901635936550607450507811174130468251756623575068021939355569477117206806325104666821132107288442510840026991316212673394560099495901625850147449067289141787409929050175275320738603795748573255637929006583900531824633705639261854218892744386477408202464812028525171253227062888589738949581547845514722099172599424096883551012590429309873914940234921982742204835454906972653015003572564935682550672861008765430738811006536347944940975945180240662937766228811758884173191790036319617994605583595130258438998899996872469449078235936347762749476179650292678441179460469501220155601274618624551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0256807d0b4d8dda235264b1ca4b336cad3aa6f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novawave.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebab712e6000004030046304402202423a6f36c9e0a0e50297cbd3df40c09a80c65493e5220130b2271e036159808022017d6b717e5eb58a3ffd8d2a2c7ecd61a8a7cdc5de639de5ab60bffa246cec5cb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ebab7149800000403004730450220491a1775b684607540465bfdb14b4faac48c3433f186bb739223690438f6b522022100b044964b86dadf3b7d3483a287775ccdedb68c29841ff3a08d5d21a9ba9a487d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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