faithproductions.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2d:f8:bd:de:e5:d5:0c:d6:74:84:fd:52:22:ac:be:ed:ba was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=faithproductions.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2d:f8:bd:de:e5:d5:0c:d6:74:84:fd:52:22:ac:be:ed:baSerial Number (int): 276980198714688010068000474109728507489722
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:d3:fd:14:1b:cf:62:04:7d:ff:95:79:cc:9e:b1:a7:37:aa:e2:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7c:48:51:c7:d3:2d:e9:6e:1d:f8:9a:de:7f:d1:d4:97:ac:3c:7f:31
Fingerprint (sha256): 3d:1e:ab:2d:2d:3c:09:e9:e4:4a:0b:ab:0c:04:a8:35:61:db:2d:05:28:1c:55:80:b5:56:c4:e6:42:f9:42:87
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate faithproductions.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for faithproductions.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
Other certificates including the domain name faithproductions.ca
(limited to 100 certificates)
www.faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
faithproductions.ca
faithproductions.ca
www.faithproductions.ca
Certificate
The complete raw certificate details for faithproductions.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISAy34vd7l1QzWdIT9UiKsvu26MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTQwMTA2MDFaFw0y MDAzMTMwMTA2MDFaMB4xHDAaBgNVBAMTE2ZhaXRocHJvZHVjdGlvbnMuY2EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPejZCfcilS7cIE6QLPNm4pC4 Zns/lMIXq2WZvNotYZOZWuDpponaqwQB7WElnbTjq/zvQqsN8lKsV+J8C++EjWYG i4HPrET6KRfoIdNwPHdgwPc+yrKXj6xATvrDbMQkGePJfSdGp98tXj8k5nCfMFS3 FZNtbim0P/NCMlZ6hOpqzQG1IVG52t+68E89mNTtv1eSmO0+72jQxYrZmUMAwqUZ zd52QAJTxa41M3z4YA3wKSbFP5sL/k8uct9yzuRLmigaL5wm+wDf8qbyak8X7oLN +f62BMCUDhw1zWjiFRjbl1gLK8bXl7VzmTBtCMXCqeRqltdRB+v3IMCdOB5xAgMB AAGjggKAMIICfDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGXT/RQbz2IEff+Vecye sac3quIhMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wNwYDVR0RBDAwLoITZmFpdGhwcm9kdWN0aW9ucy5jYYIXd3d3LmZh aXRocHJvZHVjdGlvbnMuY2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ 4dA0prCoqo6ycwAAAW8CJ9F1AAAEAwBHMEUCIQC4ceK1CTAP9CD3dNs9Tvwn/BPG 7ZegeyXcb5Gen+oEzAIgYUldUS4/okzy+yFw+ToDQ92iZE9Evzo0ApOR1ewrKDsA dQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW8CJ9FpAAAEAwBG MEQCIBCYI7pSh2jLjUEHDeNV7B+YIewvqW5kRO1y8mCQ97MsAiBj2MNw5h4zZa1K S8HmML3F1Gyn20fPdFx2JJhQs9oEMDANBgkqhkiG9w0BAQsFAAOCAQEANpNjHGBQ 0m0p/g9Wql+GsUTP9b4ycLnVB61nx2vflJQw5sHowp04pQO7lMU1uhQxLvfeJauF wNpT0ZBGIINoZ+VlWK+9i5vrr0T+u23xuF5oCWqlE6J+2k5B07jOIaomk3bw3+5y 1HFqoUr9l4Y6An/1stwegQGYrPq800HQbZ/TSrSvRVYJv2YJAyk/LgMptl5W89rA 9xGNLfnTNutbFrjwcxB5Nl/iflNdN1w7SUh0hZi7pUVuyeuY6YRV7MZVXtB4MleE Dwn4aHbdltEOytDzLrfWr99lwCHM1bRvj/48M/LDi7SfbECvGzxBV7m/hFN1U2e3 /WiPhvfkAQQ7UA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz3o2Qn3IpUu3CBOkCzz ZuKQuGZ7P5TCF6tlmbzaLWGTmVrg6aaJ2qsEAe1hJZ2046v870KrDfJSrFfifAvv hI1mBouBz6xE+ikX6CHTcDx3YMD3Psqyl4+sQE76w2zEJBnjyX0nRqffLV4/JOZw nzBUtxWTbW4ptD/zQjJWeoTqas0BtSFRudrfuvBPPZjU7b9XkpjtPu9o0MWK2ZlD AMKlGc3edkACU8WuNTN8+GAN8CkmxT+bC/5PLnLfcs7kS5ooGi+cJvsA3/Km8mpP F+6Czfn+tgTAlA4cNc1o4hUY25dYCyvG15e1c5kwbQjFwqnkapbXUQfr9yDAnTge cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276980198714688010068000474109728507489722 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 01:06:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 01:06:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faithproductions.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22627185331645837754933829739363125897745308204850902915719858231553097304241648663932336369117308144747725560868782808600440399640564330405041606817939367676855207476938982606092252135948744007379008505511759580773062555937976282113298044256133961393366077852385597085693355981321197107688184248380235416147040858762667992492302669511484324415663556974887400138652723535590121482229735518402334559447198828520644314272923995819375702428026329230170872317967204660062267753554979024421352738015300137425300465574884529702231772229708907047661106960615418646407490525344885292002789815620809556588627493722736251379313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65d3fd141bcf62047dff9579cc9eb1a737aae221 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithproductions.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithproductions.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f0227d1750000040300473045022100b871e2b509300ff420f774db3d4efc27fc13c6ed97a07b25dc6f919e9fea04cc022061495d512e3fa24cf2fb2170f93a0343dda2644f44bf3a34029391d5ec2b283b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0227d16900000403004630440220109823ba528768cb8d41070de355ec1f9821ec2fa96e6444ed72f26090f7b32c022063d8c370e61e3365ad4a4bc1e630bdc5d46ca7db47cf745c76249850b3da0430 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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