www.tma149.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:ec:71:20:c0:19:ab:85:a2:b4:09:47:2a:e1:fd:87:fb:cb was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tma149.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ec:71:20:c0:19:ab:85:a2:b4:09:47:2a:e1:fd:87:fb:cbSerial Number (int): 428906155133662064028109489836235220843467
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: dd:78:44:de:5a:15:aa:1c:be:40:5e:c9:6b:56:7a:45:ee:78:09:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 30:ea:64:e5:5a:a7:f4:ce:65:47:4e:73:1b:10:9f:45:ce:83:3e:2f
Fingerprint (sha256): 2f:b8:d1:18:87:95:a6:98:02:78:65:34:4e:44:3c:eb:62:8a:16:0d:09:fc:42:ba:12:e2:9f:b1:33:14:47:60
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.tma149.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tma149.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tma149.ca
www.tma149.ca
www.tma149.ca
Other certificates including the domain name tma149.ca
(limited to 100 certificates)
www.tma149.ca
*.tma149.ca
tma149.ca
tma149.ca
torontomusicians.org
www.tma149.ca
*.tma149.ca
tma149.ca
www.tma149.ca
tma149.ca
*.tma149.ca
tma149.ca
*.tma149.ca
tma149.ca
tma149.ca
tma149.ca
mymusic150.tma149.ca
tma149.ca
mymusic150.tma149.ca
www.tma149.ca
www.tma149.ca
*.tma149.ca
mymusic150.tma149.ca
*.tma149.ca
mymusic150.tma149.ca
tma149.ca
www.tma149.ca
tma149.ca
tma149.ca
tma149.ca
*.tma149.ca
sni.cloudflaressl.com
tma149.ca
*.tma149.ca
tma149.ca
*.tma149.ca
mymusic150.tma149.ca
www.tma149.ca
www.tma149.ca
www.tma149.ca
tma149.ca
*.tma149.ca
tma149.ca
tma149.ca
torontomusicians.org
www.tma149.ca
*.tma149.ca
tma149.ca
www.tma149.ca
tma149.ca
*.tma149.ca
tma149.ca
*.tma149.ca
tma149.ca
tma149.ca
tma149.ca
mymusic150.tma149.ca
tma149.ca
mymusic150.tma149.ca
www.tma149.ca
www.tma149.ca
*.tma149.ca
mymusic150.tma149.ca
*.tma149.ca
mymusic150.tma149.ca
tma149.ca
www.tma149.ca
tma149.ca
tma149.ca
tma149.ca
*.tma149.ca
sni.cloudflaressl.com
tma149.ca
*.tma149.ca
tma149.ca
*.tma149.ca
mymusic150.tma149.ca
www.tma149.ca
www.tma149.ca
www.tma149.ca
tma149.ca
Certificate
The complete raw certificate details for www.tma149.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISBOxxIMAZq4WitAlHKuH9h/vLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MTcyMjI5NDBaFw0yMzA3MTYyMjI5MzlaMBgxFjAUBgNVBAMT DXd3dy50bWExNDkuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN DRky84Bgo3DucISoVbsH/EaSZgINq1Uf3M1V/usdVS75QTFrKohXWu3FhGcSR9Wk +TtPdCrhKusNqgTB9Y/Ro+YweTawlNlyqCVGvcgurIUKn7b6fNrwO9dWdnTfFvYm os7UZnFLy8hrlp+nycwcKmutML5xorVgdSlvgM6GMJovzjZTlYKTvxmpKt0mdxKW mgChbh9abiDYQAvZBIBcaBmuCmvhh21fRW/AnhMRA0qlmN+aZqUs/ht8Y2OEfVFv xfAW4yjz+vGKweDIon6BxFEwZngtQLEoBSOm9NGgBXMlNsjbFhLp9HqNhsy6UHlp KjjGmJ+tNqoy8ux4u9atAgMBAAGjggJSMIICTjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFN14RN5aFaocvkBeyWtWekXueAlrMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MCMGA1UdEQQcMBqCCXRtYTE0OS5jYYINd3d3LnRtYTE0OS5jYTBMBgNVHSAERTBD MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHoy jFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABh5GNei8AAAQDAEYwRAIg DntYrtmWlnFIm1ls5+CO3dIQP89VjJHwD6fuyk6w2LwCIHHNE2Sbj6YQ/3C3bexy jKlgbBqLxA6lQZFM7ZoR7VKBAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG NOvcgooAAAGHkY16TgAABAMARzBFAiBdSOHtuczjUfQhlTr4bQd1JBKpPtdqkrU3 RHuzEn06/QIhANu2NWB4iwVRroBHPPQinz12obxGLd9S/pmXdfN3ADBxMA0GCSqG SIb3DQEBCwUAA4IBAQAUu7X1R3/+YrJcPrS/A01bgnARFpLGW1O6i+5o9eB4xrDd R477LJf/k3+h+cFqx0Im3QAEMm6uhSvHIaLopLbNi39Awj9UJcLwJ2FX19qZkMK/ DzVpE8ZSakbMkelf+iNg/6N8YMbOVNDr0SjVmSe8QB5h9nFyaoEe+Qxc1sFa2PwR EquemgZZGq6P9X9CStWu14+LRjqMH0u/bNBnh9rmQ8rrFffMX1rj80YccxdZe3Qw vMhBqX77z06LxeHcWv+vGqsPJKjJBMooBPobKKUX6frqveJqZ2HdkUFALytusLyA gmzHjnthtxJF0Q7Pal7pw1IO5Fazdb/3nk+FgnIL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ0ZMvOAYKNw7nCEqFW7 B/xGkmYCDatVH9zNVf7rHVUu+UExayqIV1rtxYRnEkfVpPk7T3Qq4SrrDaoEwfWP 0aPmMHk2sJTZcqglRr3ILqyFCp+2+nza8DvXVnZ03xb2JqLO1GZxS8vIa5afp8nM HCprrTC+caK1YHUpb4DOhjCaL842U5WCk78ZqSrdJncSlpoAoW4fWm4g2EAL2QSA XGgZrgpr4YdtX0VvwJ4TEQNKpZjfmmalLP4bfGNjhH1Rb8XwFuMo8/rxisHgyKJ+ gcRRMGZ4LUCxKAUjpvTRoAVzJTbI2xYS6fR6jYbMulB5aSo4xpifrTaqMvLseLvW rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 428906155133662064028109489836235220843467 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 22:29:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 22:29:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tma149.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25885311596434249416070425939268530684566378752140536133607818217502301434305646924604530636390807641095000957787790319488277289448113918153853448281167431356528407738003136094877686694485918067594008282323992110990175159089684416284761739237453123942704447890598349160876064918895586987373568802332248092562353139124924887110991971420078199332724254554014806347612576125025629530909086884178264425933585483376385934209230438526006693567119266049485259307532578920728262776080487282067541113620397205585477877332159705970201366851681267804800668373948681071343380570195559064948753437004396089706067506542364895991469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd7844de5a15aa1cbe405ec96b567a45ee78096b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tma149.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tma149.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187918d7a2f000004030046304402200e7b58aed9969671489b596ce7e08eddd2103fcf558c91f00fa7eeca4eb0d8bc022071cd13649b8fa610ff70b76dec728ca9606c1a8bc40ea541914ced9a11ed5281007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187918d7a4e000004030047304502205d48e1edb9cce351f421953af86d07752412a93ed76a92b537447bb3127d3afd022100dbb63560788b0551ae80473cf4229f3d76a1bc462ddf52fe999775f377003071 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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