www.lamereveille.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:89:33:2f:98:1f:78:5e:68:83:30:de:46:6b:e5:57:0d:76 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.lamereveille.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:89:33:2f:98:1f:78:5e:68:83:30:de:46:6b:e5:57:0d:76Serial Number (int): 395135865746366523054142417431943045385590
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 09:21:e3:e2:c2:dc:e6:90:17:17:10:3f:6f:1d:58:41:25:08:3a:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 60:dc:5a:5f:7d:57:24:8a:cd:24:a2:20:14:be:05:dd:4d:92:a9:99
Fingerprint (sha256): 3f:93:52:1b:c7:b9:2f:f1:6b:ec:e3:5c:43:fd:4e:82:06:9c:d1:4f:8d:b7:13:5d:24:e9:0c:c3:e8:74:ba:99
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.lamereveille.ca
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lamereveille.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lamereveille.aegir3.koumbit.net
lamereveille.ca
www-lamereveille-ca.aegir3.koumbit.net
www.lamereveille.ca
lamereveille.ca
www-lamereveille-ca.aegir3.koumbit.net
www.lamereveille.ca
Other certificates including the domain name lamereveille.ca
(limited to 100 certificates)
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
www.lamereveille.ca
Certificate
The complete raw certificate details for www.lamereveille.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISBIkzL5gfeF5ogzDeRmvlVw12MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MjgxNjM2NTZaFw0x NzEyMjcxNjM2NTZaMB4xHDAaBgNVBAMTE3d3dy5sYW1lcmV2ZWlsbGUuY2EwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCxlSD8qSQ0e39qWxsAuELNzoyb vZ7sVFO95gE/MjNd74qC0PWNHThwy7hX/BmNlVNB3mZT3hNVnOV09HCmNNo9QK/u h8jbzxllQTIKkf4/YAf7c7rrARAI/HKuCmF1uHOZrtwLkiF3k2stVIbgMklA85vm h301FEryOpbJKUc97c/E1VozkztefafJnuebUOeaYrFbF8yDeWDD1qaaXBvHcCGe JgxEFaIhIGuqORv8B99WzR3LTcPENs8mYoe3lX/QvSWI5ie0I/+8nkzq/6gtJu/Q iyJb0clmgpHdSUKwKeP1p6bcFqdZN233CmOgE7SLQ3JKMWGKpgPlYYZfhqZFN0VU e8tvFtMxEvJOLy3FAyPEsgR66WKOGgD94IJNkMvbBKzslBqpWiIsy53oC4it0IJz /B/M7+AscpP/97tOK03tNKSgqL08sJhkluoNEXWpQTWO/15yj4Aa5pdFfs42BSmu +kIzwJDGnP7D04JgmySljZt8nivHZJyDynOxnvXaJCNgxrYGWlK+7LuuoT5WFRZn 3t5j4iz0bMOrcKZ7aZuZBf74RIgya4vL8GkFkJs1JEn+AsFZk0gG1etDzjxFIyzn +yEMtxev3oBo9O+W0HwcAyj5GEan/b88qLI5Je6Yhkqq0qiK9mkWEBge82d0i1on 2leYd4aW547vb+bvqQIDAQABo4ICbTCCAmkwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQJIePiwtzmkBcXED9vHVhBJQg6iTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMHgGA1UdEQRxMG+CH2xhbWVyZXZlaWxs ZS5hZWdpcjMua291bWJpdC5uZXSCD2xhbWVyZXZlaWxsZS5jYYImd3d3LWxhbWVy ZXZlaWxsZS1jYS5hZWdpcjMua291bWJpdC5uZXSCE3d3dy5sYW1lcmV2ZWlsbGUu Y2Ewgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEASznAg/TycZA/ 8CIZxTAr/9ncAnw6R0aJcKWednZ8QqgcgWWNwncMvLsiHs8OOn3wauH3VP5Yfhbx DLImMFXtx61seDfvy3ZfDh+kZU9luaCBNwxyPUrs6v/RXm1NfCudhJ50AAw+5fDk boWd5mT1RjDgXm/rOaf6xZ8L+rX0PZBuSNGspTSxJX5BeCF7PNdYE0LFMqC/e3pt qtsOHH5oBxKXIWyytjZY6o1cz24F02Ru/yyFGQaRX745KY84sTFEIj6FG3fkuZg8 LkPMRg2c7dYdrQ0BJ+1t9YOt7UToVI1HriFMDvzHHe75Lt1yA7LCy1J7Fg1Hz7r6 l24UU/6mWQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsZUg/KkkNHt/alsbALhC zc6Mm72e7FRTveYBPzIzXe+KgtD1jR04cMu4V/wZjZVTQd5mU94TVZzldPRwpjTa PUCv7ofI288ZZUEyCpH+P2AH+3O66wEQCPxyrgphdbhzma7cC5Ihd5NrLVSG4DJJ QPOb5od9NRRK8jqWySlHPe3PxNVaM5M7Xn2nyZ7nm1DnmmKxWxfMg3lgw9ammlwb x3AhniYMRBWiISBrqjkb/AffVs0dy03DxDbPJmKHt5V/0L0liOYntCP/vJ5M6v+o LSbv0IsiW9HJZoKR3UlCsCnj9aem3BanWTdt9wpjoBO0i0NySjFhiqYD5WGGX4am RTdFVHvLbxbTMRLyTi8txQMjxLIEeulijhoA/eCCTZDL2wSs7JQaqVoiLMud6AuI rdCCc/wfzO/gLHKT//e7TitN7TSkoKi9PLCYZJbqDRF1qUE1jv9eco+AGuaXRX7O NgUprvpCM8CQxpz+w9OCYJskpY2bfJ4rx2Scg8pzsZ712iQjYMa2BlpSvuy7rqE+ VhUWZ97eY+Is9GzDq3Cme2mbmQX++ESIMmuLy/BpBZCbNSRJ/gLBWZNIBtXrQ848 RSMs5/shDLcXr96AaPTvltB8HAMo+RhGp/2/PKiyOSXumIZKqtKoivZpFhAYHvNn dItaJ9pXmHeGlueO72/m76kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395135865746366523054142417431943045385590 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-28 16:36:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-27 16:36:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lamereveille.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724473533828159460538185849565372985326798686280257262089222266333114148657995450722487238475519199880732914802176241312546661280161365474423159525102998682219462007049799347324199558809933797954016326874600816553433680705573102896177785460274953662141314971332027852612004532671453300893016477157666134475057324654899151272473395704109176585767979720226967181608406567174066937511645292013206925666020639431169025532095879184788004954914747905758374187001442782914657497131818783104433877801534883936260443052936514121392738383917200634935655317448226924285483372473406479353637183761398916550377332010836762698731327154847333401152446231537814441194327320524602800791453706607785561386070850964071433544280070354632649249432504666984767567578919616641154283548401277369681515823560014766229620044351241236250257419857988380760942993022332056202240014931337776884530833364468857524202901333956116381404741975020320254758726459863164121177436162343954255880573707854665941625084143192000020378872085405080125538090964385273368037248861676765848715416025722339398483160112517214835179118422766629649367728931157973018920694958860223126365330541596659962055299314857543706995243477985843848724302178562844301578798693640394390156799913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0921e3e2c2dce6901717103f6f1d584125083a89 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamereveille.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamereveille.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-lamereveille-ca.aegir3.koumbit.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lamereveille.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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