ace.scisat.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:a8:2a:d8:b5:94:0c:1a:c8:04:6b:d2:71:c1:d9:6d:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ace.scisat.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:a8:2a:d8:b5:94:0c:1a:c8:04:6b:d2:71:c1:d9:6d:09
Serial Number (int): 346290699933740931890537460696777664064777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:01:7f:ad:1b:b9:3e:ff:95:ca:33:5f:4f:33:5b:b5:5e:77:c1:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:84:4e:33:bf:ae:ef:34:39:25:d4:8c:40:1e:3d:36:b9:b2:be:83
Fingerprint (sha256): 27:51:49:b9:7e:52:01:28:06:63:e5:27:20:82:a7:e9:f9:bf:4a:9d:37:97:53:00:61:52:a1:10:59:ec:35:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ace.scisat.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ace.scisat.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ace.scisat.ca

Other certificates including the domain name scisat.ca

(limited to 100 certificates)
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
ace.scisat.ca
databace.scisat.ca
databace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
databace.scisat.ca
databace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
ace.scisat.ca
databace.scisat.ca
databace.scisat.ca
*.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
ace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
databace.scisat.ca
ace.scisat.ca
vpn.scisat.ca

Certificate

The complete raw certificate details for ace.scisat.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISA/moKti1lAwayARr0nHB2W0JMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDYxMDQ5MjJaFw0y
MDAyMDQxMDQ5MjJaMBgxFjAUBgNVBAMTDWFjZS5zY2lzYXQuY2EwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbR9MNtpluElUJO1ZwII/23qpTquFGQWX1
uRnSeWMsddSjrEAuBV8nRPyFafGjyAAZJrZlDsUgc2iKDHwozKXEKebMJenJwnC6
xc3kwB+hGeYwAvtYlEBq1fEGWzxG0bqQ1dnlUbAkYrIXVb0Kl+zlgukucoBtEsJF
V8s58ki5d5N+wl+pTRY7UOPCOg1ID9RTBwMyNFYt2HFMIZai7GAaL1zACtSXCN+x
6r/u31G3j3azBiRvKx6QTrlsjNH7XPsUSxauDF7/Ai4X5CwOUXeLdbQzyW8lGCm9
zbebr4WfyT5vpMZ2/B+uc3KBryOtNItlluu/kyy7c5ZPpxJe094LAgMBAAGjggJg
MIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLsBf60buT7/lcozX08zW7Ved8Ek
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wGAYDVR0RBBEwD4INYWNlLnNjaXNhdC5jYTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AF6nc/nfVsDntTZI
fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbkCMPbQAAAQDAEYwRAIgJJTXUcOD+KJd
ctDlpF34TPECH6jcGyYdOekDCNNfqCkCIE1y5wu+leRee96+w0AedMx4m1LcWBwc
UwrTDAbIfjzoAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFu
QIw92gAABAMARjBEAiBphr/hubiWcQ6NCDIY9j1SgphdTAzUZXa6c8LoVBpchwIg
FKoi4nTbsJ2064AInn2eIDn7BljVOUIjdlkjp2FQy2swDQYJKoZIhvcNAQELBQAD
ggEBAAI2RcLjOiXwwqM8uQ7gxTgMJnApB4cs1+ZHzAkqUwg4fszvB3tfGZHm9uxb
Dj1hoE7PaSSpHTLo4pd3UpR8iOXb3uu662k0DK677VisS19zziFoTfWFAByRQJzG
g8Uyoqv2FNEb/IrBDKcoaYGAWmFtzwb/P2WciOOWnMZUYyF9tctrmc9kQ03aGhIz
//qgU6PWCFF0MzN3R4gCtFVdMUXx+dZ0A6WaO6HN1BbUCql2cfDqx5w5zZNo9At3
7MhBVoEBxwAnUP2ZVdt4hJB0O6HrhWZW5cHQW2bNGmlEUDO8V49rZvoYBmrc2YZD
pPPRxAbaxFBAB69r5NmVj50Myx0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20fTDbaZbhJVCTtWcCCP
9t6qU6rhRkFl9bkZ0nljLHXUo6xALgVfJ0T8hWnxo8gAGSa2ZQ7FIHNoigx8KMyl
xCnmzCXpycJwusXN5MAfoRnmMAL7WJRAatXxBls8RtG6kNXZ5VGwJGKyF1W9Cpfs
5YLpLnKAbRLCRVfLOfJIuXeTfsJfqU0WO1DjwjoNSA/UUwcDMjRWLdhxTCGWouxg
Gi9cwArUlwjfseq/7t9Rt492swYkbysekE65bIzR+1z7FEsWrgxe/wIuF+QsDlF3
i3W0M8lvJRgpvc23m6+Fn8k+b6TGdvwfrnNyga8jrTSLZZbrv5Msu3OWT6cSXtPe
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346290699933740931890537460696777664064777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 10:49:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 10:49:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ace.scisat.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27681606733057570975791367628091016192734755782803574845936966571425503574772768548082986225163459881818651499226118155568082944218782800190756658409572102758053912281760515583259045932207966087810497580559487792249086120388465856031785594144512563424496055395844634318026352469047518345880047779173702310635884779374439909680885214023108633796857564715775653083617533138463583977847882137279595600107436488802922140737349144793430423445415406503469036727731639446752292084918581426450006698876049493594935255934394354257913114196053410338600507832879863160809858045475576096326870378204814690014180770778515447733771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb017fad1bb93eff95ca335f4f335bb55e77c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.scisat.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e408c3db4000004030046304402202494d751c383f8a25d72d0e5a45df84cf1021fa8dc1b261d39e90308d35fa82902204d72e70bbe95e45e7bdebec3401e74cc789b52dc581c1c530ad30c06c87e3ce800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e408c3dda000004030046304402206986bfe1b9b896710e8d083218f63d5282985d4c0cd46576ba73c2e8541a5c87022014aa22e274dbb09db4eb80089e7d9e2039fb0658d5394223765923a76150cb6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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