webmail.conservationontario.ca

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 7f:1e:35:e5:1f:ab:84:2a was issued on by Starfield Technologies, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.conservationontario.ca,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:1e:35:e5:1f:ab:84:2a
Serial Number (int): 9159817950313284650
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: b8:c7:7c:bb:9c:0f:19:cf:38:25:48:26:92:d4:d2:99:26:3b:7d:0a
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 69:6f:56:f1:29:a1:6b:de:a5:68:18:e3:8e:13:10:ba:03:4f:47:5d
Fingerprint (sha256): 7d:01:d5:c8:96:4e:9a:6a:f2:0d:43:8b:00:bf:da:30:8e:cc:7d:88:d5:97:07:27:93:c8:e8:a9:39:a5:c3:8c

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-149.crl

Check the revocation status for certificate webmail.conservationontario.ca

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.conservationontario.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.conservationontario.ca
www.webmail.conservationontario.ca
mail.conservationontario.ca
autodiscover.conservationontario.ca
vpn.conservationontario.ca

Other certificates including the domain name conservationontario.ca

(limited to 100 certificates)
conservationontario.ca
conservationontario.ca
conservationontario.ca
dev.conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca
mail.conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca
calendar.conservationontario.ca
conservationontario.ca
*.conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca
*.conservationontario.ca
conservationontario.ca
conservationontario.ca
webmail.conservationontario.ca
webmail.conservationontario.ca
www.dev.conservationontario.ca
conservationontario.ca
protectingwatermatters.ca
conservationontario.ca
protectingwatermatters.ca
calendar.conservationontario.ca
*.conservationontario.ca
mail.conservationontario.ca
conservationontario.ca
protectingwatermatters.ca
protectingwatermatters.ca
*.conservationontario.ca
*.conservationontario.ca
conservationontario.ca
conservationontario.ca
conservationontario.ca

Certificate

The complete raw certificate details for webmail.conservationontario.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LYXoEskMo5JlNh3Nlqz
6JKWoMUsSe4hijKowQtE3z4bMUqAhDvtKuLNpP42JlRhvj3v+MrUwYQqb7mN1U7o
4NqyKJgyjIXmZiHv7JF+/wlpmAVI+nBhlhHzDSfQwbhF8ANKctQcF31YWtF1IvcU
8f3ErlJCwelb495joA2gyFbUSEYYCMTGnBVLCLSek98+6stDy9NmPrR4IUDop1U+
gNIfeLzRItzFE4QxtsPgc1RPnM+Yetpx5l43NPzplIgCgCCSCzHdawcwTIoDNkzj
Awu0Gm5ey3DXfQR8f9lPKXgCbYnr0CRWdectkh2qWjOEZNyiyOQWxXRkAUkbGHFy
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9159817950313284650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 20:40:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-13 19:20:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.conservationontario.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26852313707456436976300912794039201339807766049763316104380302878538278459201208792541331302966076667499477167624249671092046123493639469667523566552405718623669428184607054872677372841118552820708958969863697338117311626075133119189628978543451014534272727983429526341671545998453399191342893071189903178483703860726658136938931288592422221733619935837524755731870261226739563225424975281499090464038761700312345870037556751990646106535586765204427825286761947024528837212287773771448930650054026139871326700494682615564328754246207949360930927727808680311907371385517581237113386132980651640158634036086614460035611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-149.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.conservationontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.conservationontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.conservationontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.conservationontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.conservationontario.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8c77cbb9c0f19cf3825482692d4d299263b7d0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016aeb92bd9f0000040300483046022100fe568d2b4ee1caae2966d158aefacde4353ff22a88e7f4128e9e5d0a94f0389d022100b8eb8eb06552b6099debc3b2e61285d9b9ac8b87ae15c11809117ae3b2ba66f3007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016aeb92c2c1000004030046304402205c63e5dcbb283876bc259a2d9ca8dab083799bb405943e2891e380944c14ca3f0220700038c55267e0eb7277b69c2f173fd47f7a3a657ea315df8d3cedc7282ee89e0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016aeb92c80f000004030047304502205114b5213394c2d0750880016e8bfbdcf5a1a2e672eb6e1ca1857a8bc604da88022100dd4c6ed1be99b39a53856765e5819a80cdca3e4471b9a008f25070352182a9bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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