faithproductions.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:85:85:4b:f5:f5:40:df:e5:f4:0b:bd:3f:85:c0:77:10:1e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=faithproductions.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:85:85:4b:f5:f5:40:df:e5:f4:0b:bd:3f:85:c0:77:10:1eSerial Number (int): 306771594330090669931333000179746906509342
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 44:5f:91:e4:98:70:6a:47:e0:ef:c3:14:b4:5e:33:06:5a:e4:75:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b8:a3:99:f6:30:6f:14:fc:9d:d1:7f:4b:9e:fd:c5:9c:5e:22:53:bb
Fingerprint (sha256): 3a:90:5e:2f:f6:93:3d:cf:11:5c:4f:10:2b:e3:de:66:b5:4c:ab:84:33:14:2f:c6:2c:04:81:ab:84:bb:07:66
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate faithproductions.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for faithproductions.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
Other certificates including the domain name faithproductions.ca
(limited to 100 certificates)
www.faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
Certificate
The complete raw certificate details for faithproductions.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISA4WFS/X1QN/l9Au9P4XAdxAeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTYyMjI1MzlaFw0x OTA5MTQyMjI1MzlaMB4xHDAaBgNVBAMTE2ZhaXRocHJvZHVjdGlvbnMuY2EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDho6swlRjzgmFJrEbw7jIBe6 Jbx1Up/4hpren4tMVy3p/AcdhFlGwsiaLK9HjS+dvewy9HnUPEZnI4qXWwH6QXdx Vxbrih3neP+STdn2CvpnRpS0a9bqG1vdA6t5kezpeVCKgM+FekpudaLUXa69MRtQ TegAjMF6ZQwSp2I9KBT0+wHBrZBLSvMtATIKIa0Py0TKUkLpgKM+m05wv0Dyrm3h mYQ8SQQWp6WKENbvc6yDHimZ+VkfWDUJyt3TamnxQfrAw3lgnAf2pHWbBYC30y3u M1MWhLEdf1kI4fX/w7ySropPrRmt+5yilVYhVdwGN4Ku7ZKhO4T6l5m4YYotAgMB AAGjggKAMIICfDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFERfkeSYcGpH4O/DFLRe MwZa5HWvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wNwYDVR0RBDAwLoITZmFpdGhwcm9kdWN0aW9ucy5jYYIXd3d3LmZh aXRocHJvZHVjdGlvbnMuY2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7 pI8okwGd3fHb/gAAAWtinE+lAAAEAwBGMEQCIAqc6CyNtZAnyySNMXQJG7H+UN2c +3KTCF09yOM60kwKAiABIIuJso4YKITnXXTrL46nIxvIRLwBEZEpbpsac8B5dAB2 AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABa2KcT8YAAAQDAEcw RQIhAKTRh/3vM0GEz58XD5OI/1gCLBRcprK7uDGjdm5Tj+YLAiBJWqvnOHATY4VD muFYQlR3WYoxHNuCgO21lFRkYBCOJTANBgkqhkiG9w0BAQsFAAOCAQEAEU50wzja Z5M3b0k/emfNsBzDmCp/rrs6WZ6T4cfHUd6plHyh1xHBCGXmgQM8hMzKyYnKZQlg SwRF1gW8yFSpe51gOb3RmyY7eVhrodLmz85zPWj35ko5zaXb+uXHsziDM6vrCH05 ZC8zXTYI28/s0S3WzkiSUKE9R2Uylh0MM3TxqWuwbAkfnhdvivGIJ8d2UPSaH78V bTXf4pUwWZykYJ2VzAMcqtBxCnnlED374FiyB19DSNo9pqvSsITKdLG81S8eFNr7 s66LDjU5q6ZnGq+mRm+b9mx8N6Zs40ScTZrzo2IN3oINrhW1Rp69mHF4c7Z8EGDE vAu6R2NVAGyzdg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4aOrMJUY84JhSaxG8O 4yAXuiW8dVKf+Iaa3p+LTFct6fwHHYRZRsLImiyvR40vnb3sMvR51DxGZyOKl1sB +kF3cVcW64od53j/kk3Z9gr6Z0aUtGvW6htb3QOreZHs6XlQioDPhXpKbnWi1F2u vTEbUE3oAIzBemUMEqdiPSgU9PsBwa2QS0rzLQEyCiGtD8tEylJC6YCjPptOcL9A 8q5t4ZmEPEkEFqelihDW73Osgx4pmflZH1g1Ccrd02pp8UH6wMN5YJwH9qR1mwWA t9Mt7jNTFoSxHX9ZCOH1/8O8kq6KT60ZrfucopVWIVXcBjeCru2SoTuE+peZuGGK LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306771594330090669931333000179746906509342 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 22:25:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-14 22:25:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faithproductions.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21467466025544986135032475683819035881077961277470802473206500675432624036210378137129263768566594035925494904347799509285219360927511667248073167066196048519839383593767352535638550696266326892990887706872775991016006211739216389485525130050796711370024858308848423168844642706881484462622782138387435612118606823977612699150163593181842233646666060302145387905839642936518101906607441765652460895122524247157220978910843214918028106627274823988646925398151571820679727665106474616755872803982749881283152990990669394187748951846295412748660595496351891139175161436448574647396377470646073009332918379924150217181741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 445f91e498706a47e0efc314b45e33065ae475af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithproductions.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithproductions.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b629c4fa5000004030046304402200a9ce82c8db59027cb248d3174091bb1fe50dd9cfb7293085d3dc8e33ad24c0a022001208b89b28e182884e75d74eb2f8ea7231bc844bc011191296e9b1a73c0797400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b629c4fc60000040300473045022100a4d187fdef334184cf9f170f9388ff58022c145ca6b2bbb831a3766e538fe60b0220495aabe73870136385439ae158425477598a311cdb8280edb594546460108e25 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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