acculab.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0b:0d:65:b6:4a:2f:86:e8:f1:a1:0e:0d:95:f7:41:ae:ff was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acculab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:0d:65:b6:4a:2f:86:e8:f1:a1:0e:0d:95:f7:41:ae:ff
Serial Number (int): 352210057846375366390758254058403677712127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:a7:26:0f:f3:17:24:fd:75:6a:e4:e0:bf:d8:e9:c2:15:60:25:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:8b:cf:77:4e:19:65:63:39:c9:3f:c8:78:48:3c:a0:6e:7f:8d:e9
Fingerprint (sha256): 50:6a:53:5f:0f:90:68:28:b9:46:a0:8c:d2:77:d7:f0:59:c3:05:9e:67:c9:63:ce:c8:ca:e6:fc:48:32:1b:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acculab.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acculab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acculab.ca
www.acculab.ca

Other certificates including the domain name acculab.ca

(limited to 100 certificates)
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
helpdesk.pnaresort.com
acculab.ca
support.simpleintranet.org
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
acculab.ca
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
scis.gtechnologies.in
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
acculab.ca
support.tailoredindustry.com
sni162080.cloudflaressl.com
support.richkart.com
sni162080.cloudflaressl.com
reporting.acculab.ca
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
support.simpleintranet.org
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
acculab.ca
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni32654.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni32654.cloudflaressl.com
acculab.ca
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni32654.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
acculab.ca
support.precisionextraction.com
sni162080.cloudflaressl.com
sni32654.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
acculab.ca
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni32654.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
acculab.ca
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com
sni162080.cloudflaressl.com

Certificate

The complete raw certificate details for acculab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsloXFMRX93YxUpm+JlDY
++Tx89CkEAA/59vvn4XqRKFPJWdDeSoGf6o17pgcjQQlPWTPv11nnuvoy5HIftHt
9Z0wexl9FCE3xkW6bnlrknO0mCLSZ3Nai2D0GgKmYxXzUYPO4wuMJUqX+dHIkiyj
26a4rgpgs51MoUBfYgWsVQIualQTRBFJIuErrHfu9yOsfzESIcXrJmDHftlcrdOJ
MoLi/hp/cHBPtMUfmD80UwJju5+TCv0e6qWP6wsVu70CrmUOrbp5se1aMOtaBKak
BccYV9Q2qqsN3QbBuoAdWZIX+yvnT+1HJRDNZG0kMMAVKczlSOdYzFxdPbbcEDQD
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352210057846375366390758254058403677712127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 10:51:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 10:51:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acculab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22514843397911154483147907882658352040986714739182763685813375036094618092025574369329899198978987731860794790658250216102178989166821337555439112142955714803042553957549603590048528640270069751844714971098409294511080242383302216754494886679472564177128833222934985642904626919527944252039212527347034485317893280707476800478922742052837681354963750534947902420238512771871751628198475935798050572155061984581237856961458811040304066130549836337277601886582814805504900608260036351865669625804768977683850181333590099394564409147854869843222111705093240022031622230095196321751482045562952958971928454753302481208289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91a7260ff31724fd756ae4e0bfd8e9c215602521
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acculab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acculab.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001667790bca60000040300473045022100b78ae7de68e7f92c371236d5163365851b7a4ee685766bec4654dd5641a2402b022076ce9137f83dccc34b130a49957f24d1b470232e0485823bbcceef8c57e271780077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001667790bd1e0000040300483046022100e2bf3f3d75f1d764df33b987d6ddbcbdb2a9e6b2d0df4c46723ca69e087e2e11022100e8aadb417952244a4ad06eb7b74d6f009d5d5f8467f54fe6398dd78d23e18b5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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