dev-stats.torontoflagfootball.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:51:54:2d:9d:83:d7:c6:c2:eb:11:12:b1:8d:7a:50:ec was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev-stats.torontoflagfootball.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:51:54:2d:9d:83:d7:c6:c2:eb:11:12:b1:8d:7a:50:ec
Serial Number (int): 312827599746125200107093922891174279532780
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:60:95:d4:dd:a6:c3:be:31:97:f4:c6:6f:23:3d:b5:c8:2b:f0:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:c2:4e:62:8f:03:6c:16:b2:12:b8:f3:2b:a1:96:a9:4e:fe:7e:ae
Fingerprint (sha256): 82:22:20:b9:19:e5:28:b9:40:6c:4d:81:61:11:07:b4:b2:aa:78:59:ae:0d:13:35:fa:d9:55:b8:e0:e4:15:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev-stats.torontoflagfootball.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-stats.torontoflagfootball.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-admin2.torontoflagfootball.com
dev-api.torontoflagfootball.com
dev-intro.sportscards.io
dev-stats.torontoflagfootball.com
dev-www.torontoflagfootball.com

Other certificates including the domain name torontoflagfootball.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dev-stats.torontoflagfootball.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23JMmDc7rzFDWiY8FJ1l
kSzKyhU67JeXXc/wqW9TQ6MMRf8zEhmhHLttkKKYt4ZQ23kOhV2q+LWJctkMfp8S
XTAbHZ8ty0PKc9F40c5X8PP3Qz10yKHLI7lY/I1MZCYCt6WT5GjTHJqFK+c0yzF6
43eT3YKPbS6iveskMHeuMUGyri6eSz38S/ft3W+TwxEpWREXiEtPCwm08cobDptB
KrFIk83EsGUIYPaCtXB5u5rGfxKbVb9JFHMHWFWjyk6hqvIASgqoz9YsQZZMBZ7r
njRklYRBtr/U7m6UB1bb/11y5EYF3P9xUmbMdHIA1oQt6Id50Ea0bh2Bvzz+WVTY
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312827599746125200107093922891174279532780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 15:59:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 15:59:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-stats.torontoflagfootball.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27702551822596332582603835124863532867463086085360485479361922120545572168290597494758850292754033968068631573638792552656497396876877072987881113342888073522631022357258779095228576089628165884548847490050081417152271019615663614693044855147935684399976826877893786782215353992500486292716975847657330411476253059632948439316150180845074979955029744971664860894835421096771897814254196659108736329895589168360452580847458168188796762011326042838626988182299649026798201126716421608609895120065488285332670654060039942922004810864736252816952287279512754589937787010346935823683229353564462694270425232373263489095911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f66095d4dda6c3be3197f4c66f233db5c82bf0c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-admin2.torontoflagfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.torontoflagfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-intro.sportscards.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-stats.torontoflagfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.torontoflagfootball.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bb8c73a66000004030047304502206e4c9e96605d97e28cf093890d66d7d41af3e00fbdc4492e3d2b430e6627313d022100bb7504df540d313c2e6c86d9ec238f3864db225cde30b8c05e78eb3250bc3a1e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bb8c73a810000040300473045022048c78c84bf03dc5ed6caac5b73a3f2f6d3e67f6bf68209a637130934b0858fe1022100f96ad0238f9bfb4654c06b148ac5ecd5bfbcc05f67e7729279de2b2d450091d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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