brinkmanlab.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:88:74:6d:02:04:1c:7b:42:aa:59:54:2e:e1:ea:a8:08 was issued on by Let's Encrypt.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brinkmanlab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:88:74:6d:02:04:1c:7b:42:aa:59:54:2e:e1:ea:a8:08
Serial Number (int): 322428780998933438993639257447636983785480
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:5b:7e:fe:28:9d:c1:3b:03:aa:05:da:8c:08:3c:da:dc:92:a2:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:74:44:46:8c:65:4a:49:70:8a:9d:32:90:9b:ef:18:e0:50:e7:99
Fingerprint (sha256): 8c:b4:ec:15:92:cf:e5:be:27:6e:ff:10:3a:71:17:01:73:83:3d:dc:8d:ff:b7:63:fd:2d:f2:81:5c:76:b4:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brinkmanlab.ca

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brinkmanlab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aap.innatedb.com
*.all.innatedb.com
*.allergen.innatedb.com
*.arbutus.brinkmanlab.ca
*.bcid.ca
*.brinkman.mbb.sfu.ca
*.brinkmanlab.ca
*.burkholderia.com
*.cedar.brinkmanlab.ca
*.childdb.ca
*.curated.innatedb.com
*.ibcwg.org
*.innatedb.ca
*.innatedb.com
*.innatedb.org
*.irida.ca
*.microbiomecanada.ca
*.ortholugedb.ca
*.pathogenomics.ca
*.pathogenomics.sfu.ca
*.pseudomonas.com
*.psort.org
*.sfu.brinkmanlab.ca
*.watersheddiscovery.ca
bcid.ca
brinkman.mbb.sfu.ca
brinkmanlab.ca
burkholderia.com
childdb.ca
ibcwg.org
innatedb.ca
innatedb.com
innatedb.org
irida.ca
microbiomecanada.ca
ortholugedb.ca
pathogenomics.ca
pathogenomics.sfu.ca
pseudomonas.com
psort.org
watersheddiscovery.ca

Other certificates including the domain name brinkmanlab.ca

(limited to 100 certificates)
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
sni.cloudflaressl.com
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.stage.brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.brinkmanlab.ca

Certificate

The complete raw certificate details for brinkmanlab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4o7sKdli7H6jAuBB0HE
YCr604C6gLyRxFlG6rk8++3AOL7fRbu1Yjmvu8w7vjasKOXJSymu5BmMvs1nEk/D
lq7LRK0OhL0uNDAJVBsWU5NsW3i+nFJYQ2p29xR76GpV47+NPzMiFVZIgfLW26Ly
6DvcCCaYw8Ww/gH53lRp/6ha9SfLsCUl0Ct+Br06HftwzkEtcZOwrlj2djtBHBPl
sXW6x4etl6IXMKJh99o0VaIQTgvzr2cm2ZXoOqRx2QkfDqp9XgE0OSHkt3KeRy0R
rwwxHsZ7SaepkINpxHF1ltkM/paR1jOp9A7bJUQb0agvFD4rc3YgHtwONUQ7EW9L
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322428780998933438993639257447636983785480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 07:27:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 07:27:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brinkmanlab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22664821902784285596419283281793220950362094416673840468734393441335853101321930738383386015550157082375861499563110045460775008103715012017587925989265906656968103243277484736555634481924568197578689691601131771613771876034690481126775913690754373694081787256928895150219615896026299173010418377140093627005661904276517624678723624293587248785723982113820865592399627251771934558374881945810422943465237820655355986354443164315010975875778702768486100304255974727206487559033821689164860493194217261998116152509376133079718486240406373566979505150821877834468102557550569788302313250315366084590853461847634328111979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d5b7efe289dc13b03aa05da8c083cdadc92a269
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (731 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aap.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergen.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbutus.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedar.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curated.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfu.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watersheddiscovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watersheddiscovery.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c247d6098000004030046304402202aa463132515b14b379fe4a5a6159b57944d2603b39b4695eccee39b4fa455b902201adbac7cb5b387e52a7d33f1ce55a759133993375b663281fa838b2f5fa46f09007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c247d60de0000040300473045022100da4ff3d7371f5071032467e58a11dfca8e160706b214bbce44f82e5eaa7f9587022046e99e0b426e2966fc80d0bd910fd9d4d59714d23eaba364115840c7a8629b21
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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