a-sap.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:13:0e:55:c5:aa:77:d1:7d:ff:ca:b5:75:35:31:59:9f:c7 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a-sap.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:0e:55:c5:aa:77:d1:7d:ff:ca:b5:75:35:31:59:9f:c7
Serial Number (int): 267821277313093096551728281676359583506375
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:c5:24:2a:60:82:57:ff:9f:0b:15:9b:6b:4c:aa:e8:d8:2a:06:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:0a:53:9a:57:b7:d8:f3:b7:df:87:3d:d2:3e:7f:9c:76:d1:84:eb
Fingerprint (sha256): 80:9b:e9:43:ba:ed:e7:4c:8d:bc:d9:0f:39:d9:36:23:c8:9f:70:3a:95:bc:c7:bf:f0:7c:98:90:4e:81:e3:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a-sap.ca

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a-sap.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-sap.ca
ancient-arts.com
appellatefirm.com
bestexamdumps.com
ciao.cool
everydaydiadems.org
forextrainingcourse.com
fuse.com
medical-training.com
optifold.org
polyethylenefilm.com
pulpclassics.com
reporthoper.com
showfiles.com
stlouisreferral.com

Other certificates including the domain name a-sap.ca

(limited to 100 certificates)
ericsdogexpress.com.a-sap.ca
a-sap.ca
a-sap.ca
philandsharri.ca
a-sap.ca
a-sap.ca
impossible.ca
3dcar.org
a-sap.ca
a-sap.ca
a-sap.ca
a-sap.ca
a-sap.ca
a-sap.ca
continuals.com.a-sap.ca
a-sap.ca

Certificate

The complete raw certificate details for a-sap.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1p9k/qvRtHfxjtVtEL
wVRrAsPzZgpGI/d69bxqdWAJuaurO8PFCkOHQa2S+Rtg7jO0UOhufzHUQz6lER0c
D9qfKydvtqNIYixM+Lyp84RDtttqgH/chpPoNaf6prEyKHAVKfOayZ6OAhZAoXMn
O2QsaEvYyv8GV79HxX4xcbUdUhLnRhWllbdBcjQH4RgR7tD4ICrbP0qozt3EhU/j
UFpOYKHtjnFP//fohPiyb4GRGidIHiBkNgk/NtX8+bR9ulPGO1YfYkyKM13Mb2ed
u3J87Cxq2Ae82EA6O4pSE+hzHFukavYRCG1aQVn/Epb/ehBAL4MYrAw7C5PXRLpZ
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267821277313093096551728281676359583506375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 15:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 15:16:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a-sap.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23542168629967360367888326776504716040773210563640143395397906399482552257189518012899344868789335442837395499490278255655760503881552133845914799524528749520984862013611320407790948965846676033731987793175433890194582912303317343851975459234145479015478711368478666428265257888017534860534731574702656519552619907157044687894828814426294808595231554295045274129863807336599124745188776170253043304680135964072559597891058062154955609234328589413574172126250925128481678294093801974525812395537641503352820286441655838518871638952374861107381947574642130185106054600848657993161582129264313868337660492555405521213791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dc5242a608257ff9f0b159b6b4caae8d82a06df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-sap.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancient-arts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appellatefirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestexamdumps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciao.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydaydiadems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forextrainingcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical-training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optifold.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyethylenefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulpclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reporthoper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouisreferral.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db7daee530000040300483046022100b19662f695e642fc0d0b5158a30b1dad0709721fb8f824232889fd715ce49af8022100d5189cd13418faf2e99e0c559ea7d64c04c5243eea92ec520a53bc485297889d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018db7daee560000040300473045022100ad5ad8cab307be453b874e56d00351ca1b7816c4216fcb1f21d1d423642a05a902207b93a91843531667a3074dd5c6645d56c3c3de116d0a7704374880f7668d39c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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