www2.briercrest.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c1:dd:5a:3f:ff:49:09:ea:f2:a8:87:0d:08:57:1a:47:e8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.briercrest.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c1:dd:5a:3f:ff:49:09:ea:f2:a8:87:0d:08:57:1a:47:e8
Serial Number (int): 414417868534585435444077196612747910596584
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 67:bc:53:53:dd:4b:89:62:82:8c:22:f1:5f:ec:9d:d8:ab:16:13:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:8a:14:28:fc:f1:b3:28:b9:1a:b6:bb:75:1a:29:54:33:99:ec:fa
Fingerprint (sha256): 5b:31:54:cc:64:b5:c0:28:8a:89:69:d2:b4:81:9b:57:97:bc:d4:c0:4b:1d:b6:a6:e4:dc:e4:fb:03:6d:99:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.briercrest.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.briercrest.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.briercrest.ca

Other certificates including the domain name briercrest.ca

(limited to 100 certificates)
lyncfe.briercrest.ca
youthquake.briercrest.ca
art.briercrest.ca
live.briercrest.ca
athletics.briercrest.ca
*.briercrest.org
info.briercrest.ca
briercrest.ca
media.briercrest.ca
site.briercrest.ca
christmas.briercrest.ca
skypefepool.briercrest.ca
www.briercrest.ca
*.youthquake.ca
media.briercrest.ca
live.briercrest.ca
media.briercrest.ca
briercrest.brierweb.com
site.briercrest.ca
briercrest.ca
www2.briercrest.ca
youthquake.briercrest.ca
site.briercrest.ca
briercrest.ca
info.briercrest.ca
briercrest.ca
www2.briercrest.ca
athletics.briercrest.ca
accessse.briercrest.ca
athletics.briercrest.ca
info.briercrest.ca
live.briercrest.ca
live.briercrest.ca
info.briercrest.ca
athletics.briercrest.ca
athletics.briercrest.ca
site.briercrest.ca
athletics.briercrest.ca
mobile.briercrest.ca
youthquake.briercrest.ca
briercrest.ca
athletics.briercrest.ca
brierweb.com
secure.briercrest.ca
briercrest.ca
briercrest.ca
briercrest.ca
athletics.briercrest.ca
christmas.briercrest.ca
site.briercrest.ca
athletics.briercrest.ca
live.briercrest.ca
briercrest.ca
www2.briercrest.ca
www.briercrest.ca
www.briercrest.ca
fs.briercrest.ca
skypefepool.briercrest.ca
mobile.briercrest.ca
briercrest.ca
site.briercrest.ca
beamonline.briercrest.ca
christmas.briercrest.ca
site.briercrest.ca
mail.briercrest.ca
info.briercrest.ca
christmas.briercrest.ca
briercrest.ca
www2.briercrest.ca
athletics.briercrest.ca
youthquake.briercrest.ca
info.briercrest.ca
mail.briercrest.ca
art.briercrest.ca
lync.briercrest.ca
beamonline.briercrest.ca
christmas.briercrest.ca
accessse.briercrest.ca
mail.briercrest.ca
briercrest.ca
mail.briercrest.ca
brierweb.com
athletics.briercrest.ca
briercrest.org
info.briercrest.ca
christmas.briercrest.ca
site.briercrest.ca
secure.briercrest.ca
live.briercrest.ca
beamonline.briercrest.ca
briercrest.ca
christmas.briercrest.ca
secure.briercrest.ca
christmas.briercrest.ca
mobile.briercrest.ca
youthquake.briercrest.ca
secure.briercrest.ca
*.brierweb.net
mail.briercrest.ca
mobile.briercrest.ca

Certificate

The complete raw certificate details for www2.briercrest.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414417868534585435444077196612747910596584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 15:36:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 15:36:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.briercrest.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714431006911554828776016462634368512454417479509046559916547201062844417988321879439161258592192305742181535996620349032286308210140754399005369581217126244880738780600886134984226105684603231917071957055626139311456652103612779746509675884360410429910470788895580814521410015707766674003297915933248162417769037806184053352275890248614890952587556171433929527564970169026904406693486043419176227804958295206533271296656937278067973320030698880430642113981587095179138633910940749265016793640077069141886292420670751313005120068556546880367790364287346446289934507146282533726407741386661932561618573171257952081400867342331524269118439514627164927554911273924980750691068386470326408345598273829426819990608583574769660102076732632623697130656402303605178891532879422034936834725678702320184379716461075155276823774892161232859385927281345425915825272053757930442689969426673357999898094388598439251301715151791045663558466257369542393850196445096204152622886657635447174672550661563565954382808500165278961361101647931233389266063920861942177508691224612396289435952300584678073343544915683197697021120076053077094750599942869233401286526740188371533735832170319352924516169363133377095617502841054494479400815818339949323583455541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67bc5353dd4b8962828c22f15fec9dd8ab161371
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.briercrest.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e60795779000004030047304502201ffe8bcaf7b8b9e781ffba0d971f33628e27a338206702a95587069fae7197a6022100e21d362ce0d7a8d74d124be039e56b4a262dd9fc8ceca080d3933eabebfc6a4400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e607957a4000004030047304502202f84c8b864e1acded942ad7500e94fd6bbc65e5b2ba00523e5439d7dd31a5feb022100e37143653d95ea51703aabd7179be02b4553facfb66939e88fe08f89a4298447
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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