ucc.on.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:bd:69:b4:33:cc:9b:b8:1f:9f:c1:69:06:36:96:9d:ba was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ucc.on.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:bd:69:b4:33:cc:9b:b8:1f:9f:c1:69:06:36:96:9d:ba
Serial Number (int): 297658561626211400464401767833088535469498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:d5:bb:a9:91:39:89:98:de:05:7e:f9:7c:af:a6:39:61:79:08:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:5f:89:1d:53:e7:d6:6a:25:09:20:d1:26:a9:a1:73:0c:c8:71:6b
Fingerprint (sha256): 90:f7:db:7e:16:12:46:f2:67:4e:d8:14:4d:cd:22:d1:d5:ac:08:5c:55:60:52:86:aa:0f:34:9b:bf:c2:fa:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ucc.on.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucc.on.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucc.on.ca
www.ucc.on.ca

Other certificates including the domain name ucc.on.ca

(limited to 100 certificates)
headsup.ucc.on.ca
mountaindew.ucc.on.ca
ucc.on.ca
*.ucc.on.ca
ucc.on.ca
ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
parents.ucc.on.ca
ucc.on.ca
ucc.on.ca
bluenet.ucc.on.ca
archive.ucc.on.ca
www1.ucc.on.ca
applications.ucc.on.ca
headsup.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
towards2029.ucc.on.ca
ucc.on.ca
headsup.ucc.on.ca
pc.ucc.on.ca
pc.ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
applications.ucc.on.ca
*.ucc.on.ca
pc.ucc.on.ca
pc.ucc.on.ca
www.ucc.on.ca
*.ucc.on.ca
webmail.ucc.on.ca
giving.ucc.on.ca
brightspace.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
*.ucc.on.ca
parents.ucc.on.ca
events.ucc.on.ca
pc.ucc.on.ca
ucc.on.ca
events.ucc.on.ca
ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
*.ucc.on.ca
ucc.on.ca
parents.ucc.on.ca
ucc.on.ca
ucc.on.ca
worldaffairs.ucc.on.ca
pc.ucc.on.ca
bluenet.ucc.on.ca
bluenet.ucc.on.ca
bluenet.ucc.on.ca
towards2029.ucc.on.ca
ucc.on.ca
*.ucc.on.ca
giving.ucc.on.ca
*.ucc.on.ca
pc.ucc.on.ca
ucc.on.ca
pc.ucc.on.ca
towards2029.ucc.on.ca
archive.ucc.on.ca
ucc.on.ca
mountaindew.ucc.on.ca
archive.ucc.on.ca
*.ucc.on.ca

Certificate

The complete raw certificate details for ucc.on.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryeuRrKIvLYDgpt8Mv4h
nBeg/eBlcU+0ZAvgke459Lt0T0urabkyNOOj7gjnjBdC61F6zSKlGFxndu3zNIaO
yeraXOFh3CdvEy1woss/rc+dw9gWBfelhXupW8iPt3B/xC9aK1UrKURR7fqNyfhH
xUDnBTijcSNKSrqDxRXrOlluc80yE085MFnZ9vtFSQtb2+s62L98+0Sz/ENR0PAD
3S3yNlu8WU/r7XNNhPidOtE3EbFgcAAfraX5q5Ueuhf9BiZT7Sgk3RTC9RAT59zX
WJJ45YRZmiK36CoexYUd5+1b/3tGkiZ57w/iv/ILXaHmZVN+99Qsa7F8TvGC34ls
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297658561626211400464401767833088535469498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 02:09:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 02:09:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucc.on.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22111270684185258499509436500717903124236352244753419688239854161437509413927246331125249166896057193246072503813109555969086282560595216547904973300003855156501036446766640900534329007454419934713632979049298785125677821041856946973562048808031488131373654187193624153268283502371086119645710556741739215634063852733696190532689782775870076341157055765383078879964466137495501582304104689039075002693780432972539940491926471584275244090829311848018716360955395534027204368921945445739361072003235980545554104211801801678544029115645647162875984444860680297986652963160371592112218703827558913586090779280355652889651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ed5bba991398998de057ef97cafa639617908e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucc.on.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001884695ad710000040300483046022100eb9aa4dc9ae3c72192da4a8687cd0437b1e75d15879cb8e957461d00c979970b0221009cdd4cb21dcfcdccbf3e126f20023a4f26dafcf833d00db4b5e91c8840bcf9ea007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001884695ad56000004030046304402202ba8bf3672deb6745021fef82b818c65e0d97f6b61be6f46de64d5f929663ccb02206a85879f242540e2bcd3cc86bfbb6310bb8db002512a43a59cff25e508d53beb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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