www.cd1.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:24:96:64:0d:0b:e1:f5:99:0a:85:ea:42:ce:a3:e5:e4:6e was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cd1.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:96:64:0d:0b:e1:f5:99:0a:85:ea:42:ce:a3:e5:e4:6e
Serial Number (int): 360899212629861127806755928354203095131246
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:2c:1e:0b:86:fb:58:8a:86:bf:ed:a5:e8:fc:c8:12:ce:dc:76:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f1:68:32:7c:e0:65:e6:2a:a6:9b:63:2a:2e:26:01:27:35:96:e2:a6
Fingerprint (sha256): 85:0b:33:e3:1c:c5:a0:92:c7:2e:37:8c:eb:87:c8:62:82:78:46:f2:18:78:f2:79:e5:e8:49:93:e3:ec:59:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cd1.ca

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cd1.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.arrogant.ca
*.hostednetworks.ca
*.hostednetworks.net
arrogant.ca
cd1.ca
gepp.ca
gepp.ca.hostednetworks.net
hostednetworks.ca
hostednetworks.net
mail.cd1.ca
mail.gepp.ca
mail.managednetworks.cloud
managednetworks.cloud
www.arrogant.hostednetworks.net
www.cd1.ca
www.gepp.ca
www.gepp.ca.hostednetworks.net
www.managednetworks.cloud

Other certificates including the domain name cd1.ca

(limited to 100 certificates)
www.notwell.net
3.cd1.ca
hostednetworks.net
3.cd1.ca
hostednetworks.net
hostednetworks.net
2.cd1.ca
hostednetworks.net
hostednetworks.net
1.cd1.ca
2.cd1.ca
cd1.ca
3.cd1.ca
hostednetworks.net
1.cd1.ca
hostednetworks.net
3.cd1.ca
www.cd1.ca
1.cd1.ca
hostednetworks.net
hostednetworks.net
1.cd1.ca
2.cd1.ca
3.cd1.ca
3.cd1.ca
1.cd1.ca
hostednetworks.net
cd1.ca
hostednetworks.net
1.cd1.ca
hostednetworks.net
cd1.ca
hostednetworks.net
2.cd1.ca
cd1.ca
cd1.ca
2.cd1.ca
2.cd1.ca
hostednetworks.net

Certificate

The complete raw certificate details for www.cd1.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyeIAklGLhGclDBkLtAY3
h11rYbBJHq5UtZFhCFNP/9LbZQ4vUHew5l208R19ysJLfXuU8g+7C/kt3dEppCHw
/aw8yybKelyZuqHS6TjJM/0k7y+Un5bhHdrlmNYF7KlCR4EB5KhV6IijbHDI8qyF
2V+j9y66/wyPMMHId/aBrDAUx7d3ZAYA0hG87vpnmmY8fkCPi5GYYgOg0Te0CdEn
m7wvsU3ES9x6rdoSv0rWsdxMnR52u77/IVk/9faZvjDfilNrAXd0UtsUS1JHb9Ej
7jrWExPN6qmJ8OvJQK8PajCGmDNk0QEbAKN0uy+PLEBzJ6jb8EwuoUwRWHYZGljL
sldi3dF7zYfqUxgdo8U5tHBdOZp7tiQETH2KOFxhVShbrSOcbN9ny9kfmgQsvu1K
Hyhk2WyA1kjMrwrI7TEyxG97eeeUAsYPcTUiF3A0qjSj6sE7N+pPRY2W7vwrJv6M
rSyZX0mQv5up2WfglyrY9TSKfiUVNMEH8wD6BrV3O00f3AgUvs8kXatNQN1xtIq1
W+0yX9Q+NcMDraUPbD7mOTlJKHz1Ikjdw7IOmS1UpTgzjrDj41U7u1D53yHh+7oY
p3j/lsW4XOQucEFY+VVCz+WcoEFGJD2ZpHWjEsrR1l/c6j3MatEAz/CYr1+5wl3o
1Ga/zSpqpKUYjmccSuG42rECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360899212629861127806755928354203095131246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 04:58:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 04:58:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cd1.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823610054030498747052765873586977106617130833643424903300617024739102913826086440292902637708294307229804044209990828230307009601859009510102121060939917901003735322673116251369328965879979280269143631063291471546423893508954066445791977446317340088660034545223209729853068132848451523435949961911198127315439250392761798985053442506233111756121946581746200099062025582481679813040661129693138136822077784652446782594837181345742062181209405561680188467741013563684131558090968915627621717652810924712841636715420499048693910489453263016702342316697079856615030233850656396789698334896645810390408208020518381884088922096622091244354879067376584440699482850049676227889665258605218905438201761456326669657044298513085012893261811115304101683547878644365533896362660106599001111269764968708519702485880521184071549537280289665993615677012710992567817446798823429607331923072659238161963484755947047826053652679386481519789806106392649787257593884792454386761081347080610333507824456840591546473297878404626052830430499463312015677232527986116267411968176833918599439875168639903439541748866753541103756553092820032732437147035809988606595463702403239593686900089741304113943142468565537244167548774719232031346812015336953972245715633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a2c1e0b86fb588a86bfeda5e8fcc812cedc7689
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrogant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrogant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd1.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gepp.ca.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostednetworks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cd1.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gepp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.managednetworks.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managednetworks.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrogant.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cd1.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gepp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gepp.ca.hostednetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.managednetworks.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac09e7ecb000004030046304402205cc22cfe1d113070137d292418cbbda09ff1697fbea926c874d384bdfb453813022028c0f0a11af0538e5b3072adb3b81b4ebf34e6fc94c6e7035f51a5932a66643a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac09e7ec70000040300473045022100ffb27bc99f70cdf9aba61e2e84edb31e1ae1d484731153d3cfd788357c595fd302204c56b08cd2b05ae30dbbf57a6467ee59766f00d314200ebc1e65c73483f4032f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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