landing.fmair.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:d8:86:c7:b8:f2:f4:a0:27:8a:13:4f:95:f3:7a:7b:bd was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=landing.fmair.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:d8:86:c7:b8:f2:f4:a0:27:8a:13:4f:95:f3:7a:7b:bd
Serial Number (int): 267749753465578901913553700473288754101181
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:a6:75:38:69:dc:cd:1c:c1:d6:dd:49:c2:53:b7:86:69:cd:19:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:65:be:c7:3f:f5:e1:88:7d:e4:6f:f0:18:5e:aa:ed:f3:87:f6:bd
Fingerprint (sha256): 3c:ed:9b:dd:e1:f6:37:47:22:d0:2f:4c:fb:d2:d9:91:cc:9a:28:02:bd:7f:60:28:66:b8:1d:da:1c:30:8d:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate landing.fmair.ca

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for landing.fmair.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

landing.fmair.ca
myendo.fmairsite.com
poog.club
raphaeltm.com
startupkit.fmair.ca
wevolve.fmair.ca

Other certificates including the domain name fmair.ca

(limited to 100 certificates)
endotest.fmairsite.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
landing.fmair.ca
sni41867.cloudflaressl.com
sni.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
landing.fmair.ca
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.ephemerecreative.ca
landing.fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
i.justneedto.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
*.fmair.ca
fmair.ca

Certificate

The complete raw certificate details for landing.fmair.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nubejyU56kns3+3ynG5
X3/2iZTrvQ3OKujD5mc/kDaGQpFjOdB6KEliRjdOJOnwqBsQXsjIEhW4vwLBWEco
BEFZAe3CClbJIbxqmhgDQjCQBdhE/d0VYwxRVdYaJcwlPr5x77xzgFRLIwecoHAL
MXgw9Gxe/TiZut6e5iwVVeIbII+uIgT3e7aPkUQS/qtY8ruZvx0p2RwzZSjI2fZw
zI3+YQAlNa7pDbFZSzTcg+ONzrdgYUe3cqH+z0CPvS60J7wsr+pzMCiVr1FFYsIP
+/chiDRTnwG0Tjx+yku7zlly6dOrP0SXMiSbXmjIuO5xzFl/8RczsENwG1Xbwumf
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267749753465578901913553700473288754101181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 14:35:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 14:35:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'landing.fmair.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28590809970442930304167432357832027296593655117221923140105059228086745256099232502462712211888181097300134544032861354724915931328271560049099770733235076473670175637786705945190396276475703783874102169663744304003827226357450594036854595162696997332182277637977043847753734887975297606086446486661613096676210857702531666724452819522285850128100481876482661664184388834794736489444920149206708188503975123983724097205254032702816268008077331367892346029521677502939102196055208575767820320294861408339709356690390057523741784654425187261254309017607233694457420525638994523256678356121256439615816869753782681575417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fa6753869dccd1cc1d6dd49c253b78669cd1927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.fmair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myendo.fmairsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poog.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphaeltm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupkit.fmair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wevolve.fmair.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001642822b83c0000040300473045022100ba5e0f0efae1310e5f7060733b8e69d2f392fdfc174ac45c62e64475defed40f02202b83f65cfe35845acaf4b017c1135b65ffa8e10d2a88d6023dee5a3c729581e7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001642822b84a00000403004730450220140d799d225436417036401c27d76ca4518261aacc212c2536d4d9d60fad58c70221009e9612a7ee31145ef7d1a75ebbdf750a12ee052d96f2a3727779859fb7337b5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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