www.daygroup.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:7d:05:50:b1:7c:a4:b3:c9:30:fe:80:f3:cd:69:ed:4e:56 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.daygroup.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:05:50:b1:7c:a4:b3:c9:30:fe:80:f3:cd:69:ed:4e:56
Serial Number (int): 390991504715747666772538525622348448353878
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:fe:df:20:7f:5d:8b:b4:34:2a:d2:49:77:12:16:6e:e8:7b:7f:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:3d:ca:5a:45:63:6a:3f:9e:f0:d6:dd:af:8a:3a:9e:88:e0:57:a0
Fingerprint (sha256): 71:55:9a:c2:17:2e:da:20:c3:71:c8:a6:ed:42:36:4e:30:0d:04:16:07:fe:ea:58:4b:da:73:e2:51:33:af:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.daygroup.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.daygroup.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daygroup.ca
www.daygroup.ca

Other certificates including the domain name daygroup.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.daygroup.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISBH0FULF8pLPJMP6A881p7U5WMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MDcwNTAxMjhaFw0yMzEwMDUwNTAxMjdaMBoxGDAWBgNVBAMT
D3d3dy5kYXlncm91cC5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AME/k4PWRZEhBWmpoXGdf5pTc557BKLZN6rH7LMGTCh6tT9fBcOQt7DPRqeWv/T6
pGfDlipvoWT+rrjwcIek2Nfk2bN+LG4M28/aTbMw/T/jA83oY9CbdVk6YL7SNH6c
icaarEzGEF/weeRjZyGz3GzW56CKfpmU/Ce8eqLCfcLdXqvsk/Z5Hj9Vndrhta9d
rCW1YFrUp6gicW0l6fnLawxscvScMUqHnz9opccvegW5VWAc2OvEYnjpavDaNssd
uGGOgekx6nDaal5kkt/aSHk/bBR8WA7VoqfXVjYd5euzkYHcpOaTF4vttjNMduGU
DOCwXducAzjCYsiuHnk53P0CAwEAAaOCAh4wggIaMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQU9/7fIH9di7Q0KtJJdxIWbuh7f3YwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wJwYDVR0RBCAwHoILZGF5Z3JvdXAuY2GCD3d3dy5kYXlncm91cC5jYTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHoyjFTY
ty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiS7w74QAAAQDAEcwRQIgQQo3
ztkWa32a3TpYWXhJBiZfUGvI0T4Puigq5QhM7jgCIQD1M/wvKIbZUzDqA7WWxedP
rD3BuR0+jh15COTZVWw/pAB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31t
Br1uAAABiS7w8CYAAAQDAEcwRQIhAPmwOFsB3WDkgcQg6FW65wuvV74He7LXMW68
IFxe4H+lAiAJicGLtglD34NdyJAtzc63OVFKWgeYB0gOnLgTmJt+ajANBgkqhkiG
9w0BAQsFAAOCAQEADXTry0xDTIT553K8zWaP+wSnz4g8iepTifvzaQJ6KRovFLaQ
FzRnNEqgghb/OwxyBVAtwGY4TE0VJ9gpwK3LtWClVulKIF2zDoP4I0SCHTQS4x93
NXBd4RufoymAEWfgO3/W+BCg4zE2ytOEyAs4rO/gy6Y/JnMW2aOHD88dAxOt9dTT
iq/DvI0HozxwQqMSQZB43+aVqtTHv3Yx/73WOvUD3r5ftdyqMFNdwzn1qaOkZsvY
FEvI8oXReLAm3PxosFaNrudBDPxEPy1ZySOtK0nQdx67dEvN/fONkJm4GRMPtUVR
exLCwJxiuJNcocDgKjqyDEVRe6aqGb52PdmkFQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT+Tg9ZFkSEFaamhcZ1/
mlNznnsEotk3qsfsswZMKHq1P18Fw5C3sM9Gp5a/9PqkZ8OWKm+hZP6uuPBwh6TY
1+TZs34sbgzbz9pNszD9P+MDzehj0Jt1WTpgvtI0fpyJxpqsTMYQX/B55GNnIbPc
bNbnoIp+mZT8J7x6osJ9wt1eq+yT9nkeP1Wd2uG1r12sJbVgWtSnqCJxbSXp+ctr
DGxy9JwxSoefP2ilxy96BblVYBzY68RieOlq8No2yx24YY6B6THqcNpqXmSS39pI
eT9sFHxYDtWip9dWNh3l67ORgdyk5pMXi+22M0x24ZQM4LBd25wDOMJiyK4eeTnc
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390991504715747666772538525622348448353878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 05:01:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 05:01:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.daygroup.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24395343466124024435628588593034668408225572396448549424211122615842401670514308420480750038306639869710985862833982875621884317186585869069086795912772448656368216368921271671622047736448547226779077068896544968272484980260125037521878538547757745530917639009080825846887966879981618439065943620973526021410091433343002282310698299835759708367935776993774275981298376884210300858387885941147937508038485994630694838524188488317865750024931914360841669321182927890946891864187955379755439081823293365207126014780233099813801977356560735930027719623247901551728210475952398464330876286519848439254215702780167155473661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7fedf207f5d8bb4342ad2497712166ee87b7f76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daygroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daygroup.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001892ef0ef8400000403004730450220410a37ced9166b7d9add3a5859784906265f506bc8d13e0fba282ae5084cee38022100f533fc2f2886d95330ea03b596c5e74fac3dc1b91d3e8e1d7908e4d9556c3fa4007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001892ef0f0260000040300473045022100f9b0385b01dd60e481c420e855bae70baf57be077bb2d7316ebc205c5ee07fa502200989c18bb60943df835dc8902dcdceb739514a5a079807480e9cb813989b7e6a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d74ebcb4c434c84f9e772bccd668ffb04a7cf883c89ea5389fbf369027a291a2f14b690173467344aa08216ff3b0c7205502dc066384c4d1527d829c0adcbb560a556e94a205db30e83f82344821d3412e31f7735705de11b9fa329801167e03b7fd6f810a0e33136cad384c80b38acefe0cba63f267316d9a3870fcf1d0313adf5d4d38aafc3bc8d07a33c7042a312419078dfe695aad4c7bf7631ffbdd63af503debe5fb5dcaa30535dc339f5a9a3a466cbd8144bc8f285d178b026dcfc68b0568daee7410cfc443f2d59c923ad2b49d0771ebb744bcdfdf38d9099b819130fb545517b12c2c09c62b8935ca1c0e02a3ab20c45517ba6aa19be763dd9a415