auth.lcuc.dev.interac-id.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:de:57:32:bf:80:79:de:c2:9c:2a:ed:41:6f:fa:13:e7:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.lcuc.dev.interac-id.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:57:32:bf:80:79:de:c2:9c:2a:ed:41:6f:fa:13:e7:3a
Serial Number (int): 336995449586324449337100025436080612566842
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:ce:a1:3d:3d:1c:4c:e3:d5:7c:50:59:98:92:57:d2:8f:08:af:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:a2:fa:46:56:02:19:5d:12:ae:70:5b:43:df:c8:72:c0:d8:09:35
Fingerprint (sha256): 42:16:e4:51:81:86:aa:a0:3e:d0:ad:43:a4:ff:52:67:8f:42:d9:6b:77:41:ce:b9:1c:17:e8:e8:0a:62:bc:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate auth.lcuc.dev.interac-id.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.lcuc.dev.interac-id.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.lcuc.dev.interac-id.ca

Other certificates including the domain name interac-id.ca

(limited to 100 certificates)
dlbp.dph.dev.interac-id.ca
status.carolinahandling.com
*.qa.verify.interac-id.ca
*.stg.verify.interac-id.ca
status.clearcompany.com
trust.airgap.io
*.qa.verify.interac-id.ca
internal.preprod.hub-verify.interac-id.ca
short.mennek.es
*.qa.verify.interac-id.ca
iwm.interac-id.ca
app.verify.interac-id.ca
status.signin.interac-id.ca
on.signin.interac-id.ca
status.sirocco.global
retailstatus.sts.pl
api.dev.interac-id.ca
monitor.oaim.ca
mobile.dev.interac-id.ca
iwm.uat.interac-id.ca
iwm.dev.interac-id.ca
driverone.org
api.dev.interac-id.ca
status.sirocco.global
docs-verify.interac-id.ca
mobile.dev.interac-id.ca
*.dev.verify.interac-id.ca
api.dev.interac-id.ca
status.sirocco.global
services.signin.interac-id.ca
services.signin.interac-id.ca
*.qa.verify.interac-id.ca
status.puter.com
status.carolinahandling.com
iwm.interac-id.ca
hub-verify.interac-id.ca
status.signin.interac-id.ca
*.qa.verify.interac-id.ca
internal.preprod.hub-verify.interac-id.ca
status.clearcompany.com
www.symbri.com
iwm.qa.interac-id.ca
*.qa.verify.interac-id.ca
www.1n1g.com
*.stg.verify.interac-id.ca
fredhopperstatus.crownpeak.com
partner-status.verify.interac-id.ca
status.clearcompany.com
status.meshcaid.com
iwm.dev.interac-id.ca
sms.docs-verify.interac-id.ca
*.stg.verify.interac-id.ca
dv.interac-id.ca
dlbp.lcuc.dev.interac-id.ca
*.ff.verify.interac-id.ca
nt.signin.interac-id.ca
hub-verify.interac-id.ca
docs-verify.interac-id.ca
dv.interac-id.ca
status.sirocco.global
monitor.oaim.ca
api.interac-id.ca
app.verify.interac-id.ca
api.qa.interac-id.ca
iwm.uat.interac-id.ca
api.interac-id.ca
*.qa.verify.interac-id.ca
status.amecor.com
iwm.qa.interac-id.ca
status.sirocco.global
status.sirocco.global
*.qa.verify.interac-id.ca
iwm.qa.interac-id.ca
*.ff.verify.interac-id.ca
status.sirocco.global
*.stg.verify.interac-id.ca
preprod.hub-verify.interac-id.ca
iwm.qa.interac-id.ca
*.stg.verify.interac-id.ca
api.qa.interac-id.ca
auth.lcuc.dev.interac-id.ca
*.qa.verify.interac-id.ca
*.uat.verify.interac-id.ca
on.signin.interac-id.ca
api.interac-id.ca
*.ff.verify.interac-id.ca
status.clearcompany.com
status.meshcaid.com
iwm.dev.interac-id.ca
sim.bnc.dev.interac-id.ca
mobile.dev.interac-id.ca
*.stg.verify.interac-id.ca
mobile.interac-id.ca
iwm.uat.interac-id.ca
api.interac-id.ca
iwm.interac-id.ca
app.uat2.verify.interac-id.ca
team-v2.digiqc.com
monitor.oaim.ca
status.amecor.com

Certificate

The complete raw certificate details for auth.lcuc.dev.interac-id.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336995449586324449337100025436080612566842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 18:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-30 17:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.lcuc.dev.interac-id.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710150430154137104251201684139329639413663354818338420588766017664245635173867058533110346527806222269802144901558684728066788116730599606354964050472137068614420670707222625718380741649534623938943182405209768342472417914150303810360390315510947530367739293265504218410303028909331175619497215885729555326698734855794902229879099974251232067473575525280702511421420711835082260530145607782580137098813948484295952091183619009101960748042158094003070522694758877669532753906786845094317489964211870292467259415118243243076504952347884030553765429341488540563026429324530425103822958425587829957327054100565684049476317288408688456033945619411701270198661022484285026859122639439232470514493388619117019551958849882499818719032645444273285079292219310438680146374159511340168363677223276146916823814824565000437112666817849748870108960451944540317948865655083115703464885062240677857050612306657809035673679851124664397635020356756388272834907176348925110147214386311185236672600454880571927181222370258398936470793319048112325740962139079329939812344812953589924551886748508437435597025754104257990875245796657303348978726135387646712204531050960990927815910710663386777783711623611823611447733871301791805820972020538473324543268537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fcea13d3d1c4ce3d57c5059989257d28f08afdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lcuc.dev.interac-id.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004802b7b1b65314cc071cb3cdc43f8ab6e686ff1ef3adb4a28ab809b5071291de48b7248467d4ffabd77d01880fea0bc5fc0d38c6f6888544dccfcfe6227c4469ddda0b591cae3d403f53fb0724d23d5a31d2054dc47eef18df74a4f7fe13d30cb4f9166e168dd2da23a70dbcc6bb7a623902f7f0041fffb03b22b131d99a8a9bc89acca3ccc8dcc1398cab0efc9c93b413e2621c1851b2cbcd22d41d7e0dec82be504efed351d64958bfae8aa7187a6222b60e20fa9c0afc63e1db32a17e48f5a800b8253bd973af9e5b5362bdc4b2b733323077c987598259017e75ec5f613ba3ec9721174ba5361ac3735029ec982a72b90db29f1cc20846314d95e0638490