alimexi.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:b4:b9:b9:ab:a9:6a:55:df:68:49:41:30:a2:a4:19:25 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alimexi.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:b4:b9:b9:ab:a9:6a:55:df:68:49:41:30:a2:a4:19:25
Serial Number (int): 289139954895883093264456211329774549997861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:bc:09:66:ef:a9:e7:db:71:b3:4e:3d:9d:e6:7e:f9:1b:06:66:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:3e:97:0f:f7:55:29:30:7d:42:85:d4:1c:cb:6e:d0:5e:10:2e:58
Fingerprint (sha256): 54:1a:22:2e:a1:f6:7d:80:10:af:0b:6c:04:d5:13:c9:12:ec:e2:af:5e:81:73:8c:c6:0c:c9:b6:9a:3b:8b:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alimexi.ca

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alimexi.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alimexi.ca
alimexi.com
evolumarket.alimexi.com
evolumarket.com
exatecquebec-org.alimexi.com
exatecquebec.org
mail.alimexi.ca
mail.alimexi.com
mail.evolumarket.com
mail.exatecquebec.org
www.alimexi.ca
www.alimexi.com
www.evolumarket.alimexi.com
www.evolumarket.com
www.exatecquebec-org.alimexi.com
www.exatecquebec.org

Other certificates including the domain name alimexi.ca

(limited to 100 certificates)
alimexi.com
alimexi.com
alimexi.ca
alimexi.com
webmail.alimexi.com
alimexi.ca
alimexi.ca
alimexi.ca
alimexi.com
mail.alimexi.com
cpcontacts.alimexi.com
alimexi.com
mail.alimexi.com
alimexi.com

Certificate

The complete raw certificate details for alimexi.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN6MXFGmNA9OwS3U0P8I
avcRtIf4AFxhBWkv6fTriUmyAFdQXCe2F6ei8Uoidov1Jn4YqpPbnQnbWy4nEBNK
AbuwnSxVUX2ikteRYeI6K7pKgnw2m/SUxEc/iXdjJY11xfdGECsJINtnPVmyUBhA
MaNzKsl9A0a5f9D9onsNDIegfneia66qT/aDP8Ay9VW9tMG8+My7e95ECKzdnKcU
DPXlLwVK8FdlOdC41krM4Lk1GGv4yAzkrIV1GP+vkA52+QPJsBphFVqzVk6RF38o
4HFxRDvHIKdW4M1RCQeiP7B7JeJlHd2uzivZaJ/XbMz2y+IVPX75HpXOSvTwKU8W
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289139954895883093264456211329774549997861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-12 13:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-10 13:08:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alimexi.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23337590762599596293775878114749379167506695013375085324522655573666400671537459886291710660965228230950135921059023540886303903305821589134855559018974839549356376025671675214044381284311009870202215201521761159757662826606535838460089647101855445668301220802572540619674355790412349677621771296571331111443547285093910128594079072290096517529016155518969573166381771611963307919286019480657832576988682550860702367750927092265883404743327463188544523174341960639100186975974586728487772349301188454016335670440837961056948332327407886374876643204674177853392034159019554049302489474910639167633592858204469302597209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0bc0966efa9e7db71b34e3d9de67ef91b06668f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimexi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolumarket.alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolumarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exatecquebec-org.alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exatecquebec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alimexi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.evolumarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.exatecquebec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alimexi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evolumarket.alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evolumarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exatecquebec-org.alimexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exatecquebec.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aac5f41ba000004030046304402206c068f88050eb089a9f3812d77120902fb090be3070984fe71fa91eb6a43a88002207e4780d5d0f09ee2655a689065258a841a6c66eae14897b2f0251bdc4ae0438e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aac5f41de000004030047304502200a8512d1f4a20f41b674f0869804f42b040d0a5e62cc745c71c39393f456d67d022100a41c957e66cc39d48d3104df620cebafb5ec2d9bf4d8890ea2e50c38cd7f744e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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