ytec.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:88:a3:63:00:e0:25:c2:3d:16:6e:23:23:3c:9a:c3:8e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ytec.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:88:a3:63:00:e0:25:c2:3d:16:6e:23:23:3c:9a:c3:8e
Serial Number (int): 288060505774956550876869930458985363325838
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:11:38:ce:93:d4:c2:0e:c3:05:f0:ff:26:23:8b:f9:94:69:b0:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:aa:27:d5:e3:01:19:d2:d2:24:8b:4b:64:4a:cd:fc:ad:c3:24:f3
Fingerprint (sha256): 51:e9:eb:2a:31:18:55:50:3b:c5:e7:72:b7:85:a7:3f:63:d1:54:57:4b:85:15:b2:e0:00:f3:66:65:ff:94:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ytec.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ytec.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ytec.ca
ytec.ca

Other certificates including the domain name ytec.ca

(limited to 100 certificates)
tickets.ytec.ca
sandbox.rpcadmin.sauvara.com
todohierromaldonado.com.uy
crm.ytec.ca
j4k.cz
game.keystonecrusade.com
tickets.ytec.ca
ytec.ca
digitized.ytec.ca
whereami.ytec.ca
mdbin.ytec.ca
heterizeinfotech.com
tracmor.ytec.ca
fax.ytec.ca
ytec.ca
www.upliftnow.net
sni240765.cloudflaressl.com
unifi-video.ytec.ca
ytec.ca
www.crictrac.com
samad.fr
ytec.ca
ytec.ca
hm.afivn.com
object-storage.ytec.ca
dev.ytec.ca
pequenieses.com.ar
inscripciones.app
www.gia.re
registry.gitlab.ytec.ca
ws.ytec.ca
acmebroker.ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
ytec.ca
www.imobiliarialink.com.br
owncloud.ytec.ca
ozak.co
tickets.ytec.ca
sheriff.dev
meet.ytec.ca
ytec.ca
gitlab.ytec.ca
object-storage.ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
courses.learn2build.in
www.yakomc.pl
ytec.ca
object-storage.ytec.ca
ytec.ca
ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
www.collegeoptionsfoundation.net
www.vinijlawfirm.com
www.ytec.ca
digitized.ytec.ca
www.wfviana.com.br
ytec.ca
drdanilofcruz.com.br
sheriff.dev
docker.ytec.ca
ytec.ca
mta-sts.ytec.ca
ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
www.agritunasmakmur.com
sentry.ytec.ca
devweeklima.com
brizuela.mx
object-storage.ytec.ca
crm.ytec.ca
crm.ytec.ca
id.ytec.co
www.downloads.iarahealth.com
crm.ytec.ca
ytec.ca
sni240765.cloudflaressl.com
issues.ytec.ca
season2018.devfest.bg
sni240765.cloudflaressl.com
id.ytec.co
rc.ytec.ca
sni240765.cloudflaressl.com
crm.ytec.ca
israelblennerhassett.com
crm.ytec.ca
fax.ytec.ca
rtw.ytec.ca
email.ytec.ca
pbx.ytec.ca
start.ytec.ca
object-storage.ytec.ca
whereami.ytec.ca
acmebroker.ytec.ca
serieso.com
claims.web.opc.joinedup.io
memble.app

Certificate

The complete raw certificate details for ytec.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KU3uZWE/Rs5OgCpeKgy
yAicux7C6c5Ob9IJ0mp0AqwT5eYmvaVKf98+FjfPXY7DQLTgi8C8gI101ubOEBO5
U+n3kXamoi8hmT9SbUpXDCRGnJ+DOYXQvTcAGGdAzn070IYb5oCXuMR4ZyrBBFIx
jUc55VypueH+O0SxoolgzcTLZZvjxVDkf/iEcFWwyjpDpW5ZtKENqKJlre/pDAHh
/OGAEknlnPpOlPpQXpZVlA4kWhqTIweMDtLxZzmrbnFPePL0EBlBD3TeZxo/RLbG
M2H31O1ERU1CID5KY8r1SGNy+WTRKtikeZpzKdDmVWvBEyXIH+EZYaKxB5Qrxpbn
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288060505774956550876869930458985363325838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-20 15:10:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 15:10:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ytec.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29368758624431668598726783840345249960650746215512233599182854600925685211520946972742730157025166024903123465002373154664892891338990495169886587344927262808343720816752616305470749188400604167816924851820028067549056372870043332239086950716985744005636329015763718852460063642980145422772084682193426828403499026229797734966454297704121764841159080083718582316923499185340703322956832474132354996824534350963576826594986486886279939360567697820416110639801501421252761174421076562634879323158092444233715769214165767349724546264403351076592106069067428220095126860056597588919506753702394601489825956866201344206819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d1138ce93d4c20ec305f0ff26238bf99469b0fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ytec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytec.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001637e50fdc20000040300473045022074ac0fb388a30c87fccf3258aaa0f07d30f99745503daca3e6f27bc2794d51ac02210096bacd079830df0bcdba9d2efccb04300d4af2c51e864fae40de36d8433efab6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001637e50fde40000040300463044022030735c6e5d66e6e0d6c72c7b6d3adebc56c6350d0a9b2e4bbf4413ec287af236022041a4a49bcb4c763c305d9e9d58948102f58d1e28ef3a56552d73be1313aa47cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a6d24d6082d370cf1f456a72b18b7fbc35988a64bc07c5c28287ded8de753c3837c098f57f0c14fcd28a6de53086681287e04e13d254935e70d003bd692585793e0ff4112f4ce46c5a4534f484814c0de198fe6aa25a440380bcb9b11c79cab2dc93797aaefb48e41132487ad20418da446a42e90a9d4d4a7969488986ddedaa0877586ff4e1d34620c6574fbc11b6337804bc31ade2a1593b361cc70ee723a4502a8a86a88f94413a1836dc7b895694225004d77490876c8cc3326d2726551d3febaaf4779e28562eb16cd02832dcd0871204a46149cd401548a68fd0837baa1176d2109351a6206022f829dd62b6daee9bd2f700cca1fba759ebf80e04e77