cfl.fcfq.coop

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:14:54:76:08:95:29:c5:60:6b:d5:b5:10:25:7f:0a:07 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cfl.fcfq.coop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:14:54:76:08:95:29:c5:60:6b:d5:b5:10:25:7f:0a:07
Serial Number (int): 310024259371831077753631204287007535598087
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:53:9b:0d:f2:02:f7:4f:82:c3:8f:3f:91:05:aa:50:ff:5b:dc:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:d4:0a:96:59:20:34:c5:4b:d3:2d:48:d0:d7:a0:a7:9c:64:bb:08
Fingerprint (sha256): 5e:ca:da:f2:d1:b5:13:80:12:b6:37:40:a0:bd:39:31:7e:35:f6:f6:24:ba:08:b7:c5:62:ee:00:14:6e:1d:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cfl.fcfq.coop

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfl.fcfq.coop

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfhcn.fcfq.coop
cfl.fcfq.coop
cfo.fcfq.coop
coopfbrunet.fcfq.coop
demo.fcfq.coop
eauxvives.fcfq.coop
mfamiante.fcfq.coop
www.cfhcn.fcfq.coop
www.cfl.fcfq.coop
www.cfo.fcfq.coop
www.coopfbrunet.fcfq.coop
www.demo.fcfq.coop
www.eauxvives.fcfq.coop
www.mfamiante.fcfq.coop

Other certificates including the domain name fcfq.coop

(limited to 100 certificates)
afdr.espace-famille.fcfq.coop
www.cftemiscamingue.com
cimetieres.coop
cfo.espace-famille.fcfq.coop
cfl.fcfq.coop
fco-cfo.fcfq.coop
cfbsl.fcfq.coop
cumbre.fcfq.coop
cass.fcfq.coop
fco-cfo.fcfq.coop
afdr.espace-famille.fcfq.coop
afdr.espace-famille.fcfq.coop
afdr.espace-famille.fcfq.coop
timiskamingfc.com
cimetieres.coop
coopfunerairestjeandematha.fcfq.coop
cfo.espace-famille.fcfq.coop
summit.fcfq.coop
cimetieres.coop
afdr.espace-famille.fcfq.coop
fcfq.qc.ca
cfl.fcfq.coop
cfo.fcfq.coop
cumbre.fcfq.coop
cfl.fcfq.coop
sommet.fcfq.coop
mail.fjord.coop
fcfq.qc.ca
sommet.fcfq.coop
afdr.espace-famille.fcfq.coop
espace-famille.fcfq.coop
fcfq.qc.ca
www.fcfq.coop
www.fcfq.coop
fco-cfo.fcfq.coop
cumbre.fcfq.coop
fcfq.qc.ca
espace-famille.fcfq.coop
perrinfuneralchapel.com
cass.fcfq.coop
rflanaudiere.fcfq.coop
cfl.fcfq.coop
fcfq.qc.ca
fcfq.qc.ca
cimetieres.coop
sommet.fcfq.coop
sommet.fcfq.coop
espace-famille.fcfq.coop
cfbsl.fcfq.coop
cfhcn.fcfq.coop
aupres-de-vous.fcfq.coop
cfl.fcfq.coop
fcfq.qc.ca
cfhcn.ca
summit.fcfq.coop
www.coopfunerairelaurentides.org
cfo.espace-famille.fcfq.coop
sommet.fcfq.coop
aupres-de-vous.fcfq.coop
summit.fcfq.coop
fco-cfo.fcfq.coop
summit.fcfq.coop
cfbsl.fcfq.coop
sommet.fcfq.coop
cimetieres.coop
cfo.espace-famille.fcfq.coop
fcfq.qc.ca
afdr.espace-famille.fcfq.coop
afdr.espace-famille.fcfq.coop
coopfbrunet.fcfq.coop
cimetieres.coop
aupres-de-vous.fcfq.coop
fcfq.qc.ca
rflanaudiere.fcfq.coop
cumbre.fcfq.coop
cfl.fcfq.coop
cimetieres.coop
fcfq.qc.ca
sommet.fcfq.coop
fcfq.qc.ca
fco-cfo.fcfq.coop
www.cftemiscamingue.com
cumbre.fcfq.coop
cfl.fcfq.coop
cfgrandmontreal.espace-famille.fcfq.coop
cfhcn.fcfq.coop
cimetieres.coop
rfmaska.coop
espace-famille.fcfq.coop
cimetieres.coop
espace-famille.fcfq.coop
aupres-de-vous.fcfq.coop
fcfq.qc.ca
sommet.fcfq.coop
cfo.espace-famille.fcfq.coop
fco-cfo.fcfq.coop
aupres-de-vous.fcfq.coop
fco-cfo.fcfq.coop
aupres-de-vous.fcfq.coop
sommet.fcfq.coop

Certificate

The complete raw certificate details for cfl.fcfq.coop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aScG8F5gHjX8Cp852UE
3O4OcqeHV0DNNUna1NjSUZIrux81rfWlaxYgUHBGbR1iz9WjiHDgdpctbsLfMi1M
ap7PJp+zWfYHor1ulb3XE1xYuBSv0dWJ0FVAqHQpOuUbNlDoMQZGo12ua/HNnDWX
ZyLyzZvQjCuDBrvFoPDGo7RN1AcPQf+zt55hDv91eDrNIMolJkZmvalGiWTjU97R
S7wAwETFoZCEhqDipdtxUE43aAP77m9UmsU7Hh7eCIZ9HLDA3Wy8wXj9QDTB7SN1
6NS4QjzT5BAL2cMsvNPkXqj9crmRcO5oH2onomR6z6u7sYZkCdwGliRB3PYKFlxs
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310024259371831077753631204287007535598087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 08:05:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 08:05:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfl.fcfq.coop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27979837514475047930928232970868334956659352243725722971590019618028156739268211105918668296128013970109516886691910464237083077229405888945095366919931379638207177537160349880387510689922902058299342533293042906328397683089898380235389008290226012054143321306620450950672479983846106489929082353399613069995535329608975570883306893141730749167779635336750796386852278192528956278089250677570704317999109973333169487883472155163356040046184760885104085633341210147687283526040487609187566060395927510940145956918035474128500441624896750741886823242947171255277080337367870413274353538379462637792657892014798562684073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c539b0df202f74f82c38f3f9105aa50ff5bdca3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfhcn.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfl.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfo.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopfbrunet.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauxvives.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfamiante.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfhcn.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfl.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfo.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopfbrunet.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eauxvives.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfamiante.fcfq.coop'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017085e4e8830000040300483046022100f6c9d4df995ae8e712bf14e02152f5bfbd3bd79e7316416ba755aef9f14f533b0221009ae536135fa0cb89b9a09fd0d5e755c5804a66d3abe5785e403bc07baf727a7f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017085e4e8d50000040300473045022100bf62868b66ce823b04cb64c00af9cf3a1c76908ffaefed449509174cd36460a40220607fedb686db33b59d9d1b67e6810bcddf14e70eb9daf4f2c65d98ea3b29e860
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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