qweri.lexum.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a1:49:9f:ac:5c:50:6b:54:96:9e:5f:67:64:e6:fb:27:f8 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qweri.lexum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:49:9f:ac:5c:50:6b:54:96:9e:5f:67:64:e6:fb:27:f8
Serial Number (int): 316220181584332969788495171042552900691960
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:ff:df:b0:df:13:b5:66:3b:d1:4b:1d:5c:b8:a6:5c:42:a5:3f:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:54:d9:af:13:cc:5a:35:bd:d7:55:9b:91:6e:97:99:75:ba:52:ea
Fingerprint (sha256): 68:69:b6:51:8b:e5:d7:7b:2c:95:bd:7a:df:9c:4f:f2:5d:31:91:49:a6:0c:92:aa:e7:5c:08:43:ad:f1:62:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qweri.lexum.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qweri.lexum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agreements.actraonline.ca
ccq.lexum.com
collectiveagreements.caut.ca
commentary.canlii.org
eliisa.lexum.com
ententes.aqtis.qc.ca
greybook.seylii.org
legalresearch.org
manuels-manuals.opic-cipo.gc.ca
qweri-demo.lexum.com
qweri.lexum.com
recherchejuridique.org
scc-csc-qweri.lexum.com
sm.aqtis.qc.ca
www.legalresearch.org
www.recherchejuridique.org

Other certificates including the domain name lexum.com

(limited to 100 certificates)
decisia.lexum.com
decisia-us.lexum.com
qweri.lexum.com
caij.lexum.com
mail.lexum.com
decisia.lexum.com
lexum.ca
decisia.lexum.com
lexum.com
lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
lexum.ca
qweri.lexum.com
qweri.lexum.com
decisia.lexum.com
lexum.ca
*.lexum.com
decisia.lexum.com
qweri.lexum.com
decisia-us.lexum.com
decisia.lexum.com
decisia.lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia-us.lexum.com
lexum.com
qweri.lexum.com
lexum.ca
app.mylexbox.com
qweri.lexum.com
decisia.lexum.com
aaa.mpac.ca
mail.lexum.com
app.mylexbox.com
decisia.lexum.com
*.lexum.com
jira.lexum.com
jira.lexum.com
qweri.lexum.com
*.lexum.com
intranet.lexum.com
lexum.com
mail.lexum.com
qweri.lexum.com
*.lexum.com
decisia-us.lexum.com
decisia.lexum.com
mail.lexum.com
mail.lexum.com
mail.lexum.com
decisia.lexum.com
decisia-waperc.lexum.com
mail.lexum.com
*.lexum.com
qweri.lexum.com
caij.lexum.com
decisia.lexum.com
intranet.lexum.com
app.mylexbox.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
lexum.com
intranet.lexum.com
decisia-us.lexum.com
jira.lexum.com
intranet.lexum.com
qweri.lexum.com
app.mylexbox.com
qweri.lexum.com
aaa.mpac.ca
lexum.ca
app.mylexbox.com
jira.lexum.com
lexum.com
qweri.lexum.com
qweri.lexum.com
*.lexum.com
lexum.com
decisia.lexum.com
lexum.ca
lexum.com
jira.lexum.com
decisia.lexum.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
mail.lexum.com
intranet.lexum.com
*.lexum.com

Certificate

The complete raw certificate details for qweri.lexum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8p0tD2VXYUPhm4El3+T
26YVO7j1eNlcsm/7yeulIhdIWTvJZ0FcjVl6LXtHJxdxu1Guo0kzP3v3zqWUco4Z
gniFsEFPWj6oDQFRCCnxjVWs2hddN0pVMf7GUDY/wb6Abe4A6lyWdGikLctWsbwi
WbbnWVZLSZHe02VTHgM6C4cDPpG3MWVUhM6Pa+5RYQ/KGwV0eQKVO9Zjjieu+E0s
2RwltfUgZWBSBR08layTv26NwuVhCIcI/w5aw26OXSWBsWwN+eatbREGgDuII6td
6r17lWAq5D7BF2EoMJ6ED+VpHgSs8R7jdK4bcTX/iAQ3Cxj/7sW14xLFmV9iSiGU
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316220181584332969788495171042552900691960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 23:04:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 23:04:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qweri.lexum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23706397741630773215986631267597316792289870129743915946189918589766079954131031048829289877525615530938379669644767495374145615475610285693173564819239697255368413900567876318968177853279695262144527794097619168181140569664189929506877824891727414352847949893522525813843251515233553328016687659439506534868604789710904112630338079887140611955043445591572019117778717231440277279670305767606741487717984940829607377268335379967705748735866252317003156877334305630509096627222025565800731564929573336021553840872905530789039484524668810457644480185247087999150576562243379042736050324683386292798935584986141072397461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2ffdfb0df13b5663bd14b1d5cb8a65c42a53f93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreements.actraonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccq.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectiveagreements.caut.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commentary.canlii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliisa.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ententes.aqtis.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greybook.seylii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuels-manuals.opic-cipo.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qweri-demo.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qweri.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recherchejuridique.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc-csc-qweri.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sm.aqtis.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recherchejuridique.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001692c440c1c00000403004730450221008302a595682eb419b62f80ff4b06ed06a81091e4b319638bcf55a8e8e18ab60702205fe1d146737864a72ac885f9bf858495cce307d663c92c6cd8d2cded21c70c8800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001692c440a0c0000040300473045022100d281806561dbce60beaab3c3f9b3d2b8740005e250f2fe0128890997b37f3fcb02204a479db69f545cd718d05b22f44349c8da8e3fb4c42da2808ee1bfe70dbc72ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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