snow.idrc.ocadu.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:34:0c:58:7d:57:2f:e4:d3:79:e0:0c:21:4d:f0:08:f6 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=snow.idrc.ocadu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:34:0c:58:7d:57:2f:e4:d3:79:e0:0c:21:4d:f0:08:f6
Serial Number (int): 329802797504515037670931156476017677175030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:95:c2:b4:67:93:be:9f:21:c9:61:c9:19:c3:34:1a:f6:15:33:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:2e:a5:9f:6c:85:d0:ba:f0:82:1f:a6:d7:1c:41:ed:10:7c:90:7d
Fingerprint (sha256): 42:64:73:bc:ef:91:ec:9a:dd:50:63:f1:88:a2:ce:96:72:4e:6c:79:1f:31:02:9b:27:00:11:11:54:c5:b4:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate snow.idrc.ocadu.ca

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for snow.idrc.ocadu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atutor.snow.idrc.ocad.ca
atutor.snow.idrc.ocadu.ca
snow-dev.idrc.ocad.ca
snow-dev.idrc.ocadu.ca
snow-dev2.idrc.ocad.ca
snow-dev2.idrc.ocadu.ca
snow-old.idrc.ocadu.ca
snow.idrc.ocad.ca
snow.idrc.ocadu.ca
snowvids.idrc.ocad.ca
snowvids.idrc.ocadu.ca
www.snow.idrc.ocad.ca
www.snow.idrc.ocadu.ca

Other certificates including the domain name ocadu.ca

(limited to 100 certificates)
webco-its.ocadu.ca
idrc.ocadu.ca
designjam.ocadu.ca
5745189578604544-fe1.pantheonsite.io
ocad.ca
www2.ocadu.ca
wlan-login.its.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
eportfolio.ocadu.ca
slab.ocadu.ca
www2.ocadu.ca
idrc.ocadu.ca
adfs.ocadu.ca
apply.ocadu.ca
courses.idrc.ocadu.ca
www1.ocadu.ca
snow.idrc.ocadu.ca
www2.ocadu.ca
adod.idrc.ocad.ca
www1.ocadu.ca
eportfolio.ocadu.ca
idrc.ocadu.ca
continuingstudies.ocadu.ca
5745189578604544-fe1.pantheonsite.io
achecker.ca
admissions.ocadu.ca
*.ocadu.ca
apply.ocadu.ca
opendoors.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
www2.ocadu.ca
continuingstudies-staff.ocadu.ca
snow.idrc.ocadu.ca
wireless-login.ocadu.ca
ocad.ca
snow.idrc.ocadu.ca
idrc.ocadu.ca
eportfolio.ocadu.ca
clown.idrc.ocadu.ca
achecker.ca
idrc.ocadu.ca
www2.ocadu.ca
infodrive.ocadu.ca
webco-its.ocadu.ca
webco-its.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
csa-its.ocadu.ca
snow.idrc.ocadu.ca
cnice.idrc.ocad.ca
snow.idrc.ocadu.ca
adfs.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
infodrive.ocadu.ca
webco-its.ocadu.ca
achecker.ca
*.ocadu.ca
clown.idrc.ocadu.ca
5768714657988608-fe2.pantheonsite.io
snow.idrc.ocadu.ca
ocad.ca
*.ocadu.ca
*.ocadu.ca
ocad.ca
5745189578604544-fe1.pantheonsite.io
openresearch.ocadu.ca
*.ocadu.ca
snow.idrc.ocadu.ca
webco-its.ocadu.ca
legacy.idrc.ocadu.ca
hybrid.ocadu.ca
5745189578604544-fe1.pantheonsite.io
slab.ocadu.ca
infodrive.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
*.ocadu.ca
slab.ocadu.ca
wlan-login.its.ocadu.ca
adfs.ocadu.ca
adod.idrc.ocad.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
*.ocadu.ca
adfs.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
idrc.ocadu.ca
vpn.ocadu.ca
5745189578604544-fe1.pantheonsite.io
continuingstudies-staff.ocadu.ca
www2.ocadu.ca
5768714657988608-fe2.pantheonsite.io
www2.ocadu.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
clown.idrc.ocadu.ca

Certificate

The complete raw certificate details for snow.idrc.ocadu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+8v0H95D5z1KuzlXhN
NNJVwBgcucRUNauCyKOhCXbvj046FKTdD/8/kz/LYw1qbZpBdCJER1o7an+EYMQK
6iwtAStSMgOCYWrZmJwK8lUo7wgghwe2Dcjt5SnbnGMvYaYyo634CT9GaVlEf+C4
n18oVuXLInq3BgaTjjjC72hOheMIPrnxKUFWQTPHRWHQzhC+nsShCZ628WnNAwLh
riFRk8H1GNlPEcsN+pFpJmywsCtQcqwG+dmlx9aqzi9Z1GX6iGK+GUoJ7mt2viuS
3x900PptQjdVFYzDoj1dNBVmK8FY2zGSRBOR/rDg39DIeqBFwTr4qNbbMo+5iIkc
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329802797504515037670931156476017677175030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 23:07:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 23:07:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'snow.idrc.ocadu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25294870812102635219126430750786548860259433485419551816554469580490092041317407694483272760244453403865931337067657381647287246400028025593879610584860854698652769479742498711133120005557914731449058679181985722081497862595848393295042978252684752335542256152207101074661481460695434330066135590280568560426905344617686569135043727378388374965410427611861916325458447585011636385355303193825900125201028209347994919019647590395878758606256450514404721282217999960712663507758875602376756910787243337473359406198073202263433379932976643152670883390561609853542063693177973300328873782445286822125630322454472981814421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa95c2b46793be9f21c961c919c3341af6153343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atutor.snow.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atutor.snow.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow-dev.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow-dev.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow-dev2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow-dev2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow-old.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowvids.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowvids.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snow.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snow.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170891e832600000403004630440220268e278db40f99c411243ff8330ed6eac0e960ce35af83fee388aaf261b75f0002206d8e940fc90adec7e8783c8079b225ce70b81ad5946877fac442ee94ca57b9f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170891e84860000040300473045022100d1abf090019ff861d03d03f1894df15eef8ecd0ac42d24cb1d0f6de10559fd8a02206a267c3b896376cb9e71131d41a55873a0504a770203f7e4b1087dfe64f46c8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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