spiritmovers.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:bd:b5:c7:83:a8:e2:1b:01:fe:ec:e8:d6:a0:cd:06:c1 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spiritmovers.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:bd:b5:c7:83:a8:e2:1b:01:fe:ec:e8:d6:a0:cd:06:c1
Serial Number (int): 329985781489954782242266550718151267256001
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:39:63:5d:d4:52:ed:cf:b2:d5:8c:98:7b:86:cd:1a:2f:c0:8f:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:5e:07:e0:f0:19:d9:1d:c3:42:ea:1c:9c:d3:24:a9:32:4f:e9:68
Fingerprint (sha256): 4f:02:29:40:3d:84:ce:c1:32:f1:50:23:2f:07:12:4a:68:00:69:2f:eb:89:cb:56:18:98:49:50:87:05:cc:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate spiritmovers.ca

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spiritmovers.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.spiritmovers.ca
cpanel.spiritmovers.ca
mail.spiritmovers.ca
spiritmovers.ca
spiritmovers.webspirit.ca
webdisk.spiritmovers.ca
webmail.spiritmovers.ca
www.spiritmovers.ca
www.spiritmovers.webspirit.ca

Other certificates including the domain name spiritmovers.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for spiritmovers.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgISA8m9tceDqOIbAf7s6NagzQbBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTkxMDQ5MTRaFw0x
OTEwMTcxMDQ5MTRaMBoxGDAWBgNVBAMTD3NwaXJpdG1vdmVycy5jYTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAPRUhkwb/A3pOWRbi/jJ1c8fiFcSN9zW
5SE92u5BRUbtWz7S4CCXkc2TtBkcAHQmAOW2AvMuLOtQyfbpLvcG8uWSZIk0RRwl
CAB2BwXjPrSBgfrOjCexd6tGvc6i5C9EbE8y8wifT79ezQSBhpUEtNp2zfWlKSEV
rVi6oEE4xVnTXNqVgXzbcO3cO32EARhFByJISNdmUEz+TLU4qhT3eK3HQHpvdkVl
LNy3CWs0KNcQYvy35wjBG2Pdj2D73nHH7iTa7Ynhyh1WwknCT9qCAv2TwkKJN/4Y
trwwOE7dP2uAx6sTUy5jjpVNShaw6W4s5dgwqeRzQSw4bbmeFNvDsfMCAwEAAaOC
AzUwggMxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYjljXdRS7c+y1YyYe4bNGi/A
j0cwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCB6QYDVR0RBIHhMIHeghxhdXRvZGlzY292ZXIuc3Bpcml0bW92ZXJzLmNh
ghZjcGFuZWwuc3Bpcml0bW92ZXJzLmNhghRtYWlsLnNwaXJpdG1vdmVycy5jYYIP
c3Bpcml0bW92ZXJzLmNhghlzcGlyaXRtb3ZlcnMud2Vic3Bpcml0LmNhghd3ZWJk
aXNrLnNwaXJpdG1vdmVycy5jYYIXd2VibWFpbC5zcGlyaXRtb3ZlcnMuY2GCE3d3
dy5zcGlyaXRtb3ZlcnMuY2GCHXd3dy5zcGlyaXRtb3ZlcnMud2Vic3Bpcml0LmNh
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsChCW
dgAABAMASDBGAiEAxIVJ/r09vK0UXTPenL0vTjogNBuwGCfIlXTpViUca/sCIQCU
9bO+Oxxqe5/Wroi3XD9gQ1PGFfxIwZZYsv0djYpvQgB2AGPy283oO8wszwtyhCdX
azOkjWF3j711pjixx2hUS9iNAAABbAoQlpMAAAQDAEcwRQIgB5A5ZQnoPXerMM1B
ka6M95+liQVKJbNhz2TEHkc8kkMCIQCIUz3B2akHmwDgkU/CQ3UjgWc7t1JsRqE7
yZCIr7wPSjANBgkqhkiG9w0BAQsFAAOCAQEAlzo9j7czBgKUxzoTHOGP/S5Tblza
QfU6vrbNgPmXB7b5VRPwMo+CgF3n/wr8WgxujBe6cC05h+asP35JeBOsOl3pKYW0
oMF+HU8FvYXQT8MjD69878jY5YgvneYexgyk2qzouf+hiFNWPbUQi9cEhpJBizVp
bgQ0unauN6PCuboNfvOxjIMWh9Lm120SpV1xmGICrng580ZtGKAeOL6f8S5fUjsx
Fj9iBywY7ZcPuO6DdXFxeYLpeniDQq7ZNfA2eiht2os+5yV7AdpeDc3gdjNYhZ/C
ZV5igyZH/7QiCPq1AGHJ5KqgFDoKu0hheQkPG8pmaVMx9TLikwFjENvGfg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FSGTBv8Dek5ZFuL+MnV
zx+IVxI33NblIT3a7kFFRu1bPtLgIJeRzZO0GRwAdCYA5bYC8y4s61DJ9uku9wby
5ZJkiTRFHCUIAHYHBeM+tIGB+s6MJ7F3q0a9zqLkL0RsTzLzCJ9Pv17NBIGGlQS0
2nbN9aUpIRWtWLqgQTjFWdNc2pWBfNtw7dw7fYQBGEUHIkhI12ZQTP5MtTiqFPd4
rcdAem92RWUs3LcJazQo1xBi/LfnCMEbY92PYPveccfuJNrtieHKHVbCScJP2oIC
/ZPCQok3/hi2vDA4Tt0/a4DHqxNTLmOOlU1KFrDpbizl2DCp5HNBLDhtuZ4U28Ox
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329985781489954782242266550718151267256001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 10:49:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 10:49:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spiritmovers.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30843827044862796894764761173826592774568606662196535173757694229483150767887953529141745847310027074354576543131317460947757871272697346379240081708803856393761433441355265111071158788781705067936124317285088199169308563441092711648757180501814908395434821454944996098580050790385895748071207317758797816223896461483190953126274488069423486983737638445709294387642435498464454507590358709963563045859264600952171657847946193023355988557151023145653042042681774862087949763124754801862266471470357157270695976359296967208426010995258127518775820087205094183526515536184453621040760617917483688448654599120166437761523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6239635dd452edcfb2d58c987b86cd1a2fc08f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritmovers.webspirit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritmovers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritmovers.webspirit.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c0a1096760000040300483046022100c48549febd3dbcad145d33de9cbd2f4e3a20341bb01827c89574e956251c6bfb02210094f5b3be3b1c6a7b9fd6ae88b75c3f604353c615fc48c19658b2fd1d8d8a6f4200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0a109693000004030047304502200790396509e83d77ab30cd4191ae8cf79fa589054a25b361cf64c41e473c924302210088533dc1d9a9079b00e0914fc243752381673bb7526c46a13bc99088afbc0f4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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