brinkmanlab.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:61:1a:1a:db:4c:ca:53:af:3e:69:5a:4a:70:50:71:be:95 was issued on by Let's Encrypt.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brinkmanlab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:1a:1a:db:4c:ca:53:af:3e:69:5a:4a:70:50:71:be:95
Serial Number (int): 294378946762152161305225152521338667253397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:5b:7e:fe:28:9d:c1:3b:03:aa:05:da:8c:08:3c:da:dc:92:a2:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:48:c8:8d:ac:52:c2:f7:50:6b:fe:13:50:03:5c:d2:1f:5e:e7:d1
Fingerprint (sha256): 6d:7b:90:ab:b7:07:a4:ba:b7:ca:b9:dc:ef:e9:cb:44:1f:0c:90:0c:0a:8f:42:14:71:d8:9a:af:73:e6:7f:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brinkmanlab.ca

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brinkmanlab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aap.innatedb.com
*.all.innatedb.com
*.allergen.innatedb.com
*.arbutus.brinkmanlab.ca
*.bcid.ca
*.brinkman.mbb.sfu.ca
*.brinkmanlab.ca
*.burkholderia.com
*.cedar.brinkmanlab.ca
*.childdb.ca
*.curated.innatedb.com
*.ibcwg.org
*.innatedb.ca
*.innatedb.com
*.innatedb.org
*.irida.ca
*.microbiomecanada.ca
*.ortholugedb.ca
*.pathogenomics.ca
*.pathogenomics.sfu.ca
*.pseudomonas.com
*.psort.org
*.sfu.brinkmanlab.ca
*.watersheddiscovery.ca
bcid.ca
brinkman.mbb.sfu.ca
brinkmanlab.ca
burkholderia.com
childdb.ca
ibcwg.org
innatedb.ca
innatedb.com
innatedb.org
irida.ca
microbiomecanada.ca
ortholugedb.ca
pathogenomics.ca
pathogenomics.sfu.ca
pseudomonas.com
psort.org
watersheddiscovery.ca

Other certificates including the domain name brinkmanlab.ca

(limited to 100 certificates)
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
sni.cloudflaressl.com
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.stage.brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.brinkmanlab.ca

Certificate

The complete raw certificate details for brinkmanlab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4o7sKdli7H6jAuBB0HE
YCr604C6gLyRxFlG6rk8++3AOL7fRbu1Yjmvu8w7vjasKOXJSymu5BmMvs1nEk/D
lq7LRK0OhL0uNDAJVBsWU5NsW3i+nFJYQ2p29xR76GpV47+NPzMiFVZIgfLW26Ly
6DvcCCaYw8Ww/gH53lRp/6ha9SfLsCUl0Ct+Br06HftwzkEtcZOwrlj2djtBHBPl
sXW6x4etl6IXMKJh99o0VaIQTgvzr2cm2ZXoOqRx2QkfDqp9XgE0OSHkt3KeRy0R
rwwxHsZ7SaepkINpxHF1ltkM/paR1jOp9A7bJUQb0agvFD4rc3YgHtwONUQ7EW9L
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294378946762152161305225152521338667253397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 18:50:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 18:50:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brinkmanlab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22664821902784285596419283281793220950362094416673840468734393441335853101321930738383386015550157082375861499563110045460775008103715012017587925989265906656968103243277484736555634481924568197578689691601131771613771876034690481126775913690754373694081787256928895150219615896026299173010418377140093627005661904276517624678723624293587248785723982113820865592399627251771934558374881945810422943465237820655355986354443164315010975875778702768486100304255974727206487559033821689164860493194217261998116152509376133079718486240406373566979505150821877834468102557550569788302313250315366084590853461847634328111979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d5b7efe289dc13b03aa05da8c083cdadc92a269
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (731 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aap.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergen.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbutus.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedar.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curated.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfu.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watersheddiscovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watersheddiscovery.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185e02e49280000040300473045022072b156418b9450e43fcffbeb4660d00df5769d316d8b7e9c75c415a3d8aa82110221008e07104be714c2fe29a4ac14e1fdd169b9daf373cfd337817bf995f6b90382c60075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185e02e493f0000040300463044022064232796f3666005a6ef25c15ae6f6fcfedaf0567476f9fe615fbc4a6b7a811902202f1b9df4cc45d8ad4dbdad398d6c3910fcc03b9a1182245d340d10679a86068a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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