www.saint-aime-du-lac-des-iles.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:64:a4:cf:96:31:f9:80:2a:53:28:4a:d5:83:a8:dd:9b:91 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.saint-aime-du-lac-des-iles.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:a4:cf:96:31:f9:80:2a:53:28:4a:d5:83:a8:dd:9b:91
Serial Number (int): 382696451662214113066081706059066010082193
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:17:cf:62:53:af:83:fd:e8:61:b0:08:03:56:9c:a7:e4:02:17:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:e0:56:60:cb:bb:61:83:7e:30:9c:d7:72:55:5a:8e:63:08:6b:fe
Fingerprint (sha256): 6e:fa:9f:cb:44:f7:83:71:8a:c9:bb:73:cb:dc:ca:64:17:68:c5:bc:90:80:30:e6:c4:f9:a5:40:78:1e:74:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.saint-aime-du-lac-des-iles.ca

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saint-aime-du-lac-des-iles.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saint-aime-du-lac-des-iles.ca
saldi.aegir3.koumbit.net
www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net
www.saint-aime-du-lac-des-iles.ca

Other certificates including the domain name saint-aime-du-lac-des-iles.ca

(limited to 100 certificates)
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca

Certificate

The complete raw certificate details for www.saint-aime-du-lac-des-iles.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382696451662214113066081706059066010082193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 04:42:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 04:42:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saint-aime-du-lac-des-iles.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803053394393829715152586559326241796715834356770374100337278272809664886313341260211908715122995589345506719449793085499998705724148279085684485475132274781623983018327001671956182477370825769126898586279998867896318584755937002916800509151769286478571044791656828217932599935267539013986167133364630597289748715242072872883362490598195849590947341669768104488944374031433875797619303296460267549747493479515662401975010263208866900216691530689780984822874820480903308545298903537671786697032349235064817969621766118186502117685029145535877026452820121285968273585249595897777163384591447732913723877306094728566462404595152876823223175585925005495496702956707493514188726848731916615325471114191464663650416384601258757709958476134586478777142573709341954908278500385245496832145662008323250404736581333517563132107811815018111881391318145517626627831416661461403864693384659783091776157599013845182015776541969337325666975917860988353390344818528685753772326410679340146131137842499271898000911216541819343084320783019544014026086651224719101097182771087287098875204829881603750702467378237777140074373096018948906882902822277014548451228376613337868055514091673140488957832673577962520156981558617885880679121509213973244352702683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e217cf6253af83fde861b00803569ca7e4021771
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-aime-du-lac-des-iles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldi.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-aime-du-lac-des-iles.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d72a3db9700000403004630440220246513930c0ce568c13bd4ef5537fc4dfcaf721232064189b037661018d97d6f02202e4ea8e30be2433786c60a6048a535dbfd3e092638992d2a7ef6afc70410d174007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d72a3dbf70000040300473045022100fcd43708a266a09decf5e4983448489e22b8b0bed8ccb4139b446ee21ca678b702207dd846d45093be255b33f03fc639cdfc2f63d2f5317faae4e104e3c367c85dc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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