itiswrittencanada.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:c4:72:08:b6:35:54:23:1e:4b:2e:35:94:56:1e:a8:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itiswrittencanada.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:c4:72:08:b6:35:54:23:1e:4b:2e:35:94:56:1e:a8:6f
Serial Number (int): 432419726775302871907865048398800063735919
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:d7:a4:05:fa:70:62:54:98:53:5c:8e:df:c0:83:30:2b:43:e7:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:65:66:39:84:85:70:39:4b:81:07:ef:b5:15:2e:97:65:c3:ca:9b
Fingerprint (sha256): 9d:0c:d2:bf:a1:e5:b5:31:1e:89:c3:c6:27:a8:fd:bd:5e:eb:0e:ea:8e:5e:56:09:25:bf:79:f6:d3:6d:41:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itiswrittencanada.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itiswrittencanada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itiswrittencanada.ca

Other certificates including the domain name itiswrittencanada.ca

(limited to 100 certificates)
*.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
fr.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
estaescrito.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca

Certificate

The complete raw certificate details for itiswrittencanada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs2TFoezDt1kYYeOGB0Sd
eC1T72wlfeIM9okcyZOpc8Bp1acWAKoglSxPIov7bwvBMpkPcczWm5Q8HmQJAeoG
Qx+FxGldgNNp+EsS1UiJgRdZltkZNRMiodKDFcxMNT47RuRRXO7+MQmq/i2GQoQD
ddNF2z5FcnG0oSoxKpbNlHpLNdRI20Q04d1sAZPmZ7izBDGGfYczS5wCYphOpFU2
kzEG3QAngHzb5s4cBXgpRdUhuAT49Ld8z8y5uU4f3f9tQxBHltDYOLZFZFhhAKbU
zlUCCkj4n43taTJ/Z36lD7bp6q4IrR15jllrp2vqrOpQoFNuRTLMdycfCls3HV0w
jJcqxhft5YNUjgQuzWU4GpWM6viYV5Mr58kCwnTLPx6NZlq44TxE2GMnA/E96h3R
6+6nOkQHJ/6uZOZU9af74RJ+yWVmKATEKXYbrH/8vWeAbR2ajGvy0MD2HEpe1J/a
vhe1il/pJgiFsiDCU4Z2BPTr1olVpem5hn5rs+H/vK2UOKOPXm0IGCODgfF4rlXl
mg3h6Mm2piL07WYnvsNrBt4aGqUhhK15vuouhWIIMYnw2TaJyK6VuK7UYgQveQVi
8UU29PC0wGM/efa9emj4sjQJmUAPgm+TahS6DlkbHPqF02u8Xrd1YGHJqi5V4ph4
Lmt7hqbV9u7Le101D79RFGUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432419726775302871907865048398800063735919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 12:49:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 12:49:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itiswrittencanada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731862201848623052751763551668771943604860176672583670876379024845118760312719690608775679791063764371101741330624519980300898200086464318283848083291802216952327929940914307187089804945561440762314442755865340001348475935322003048352148036854213960961051887712996150448922083292008722224263442498645290399288983805470083328080832322945865130567213360391566563154574171800527685883955740325230041599377789801581914680200601812515207880950023310007503335195823050434133794011006803384659592404798493766420890943545861019457839711015363181158497849946967242643805261614040305410020799772594737906800011681346591826340504324248719282556070574439279044295060595569784260491797737316296266745389931779294568464216104390674677144848715177912239645336559485482006046240834264343632200974688519395007667569730324072927749449599704569104700862419777119197962850134425797436889774880682189956099872487097945319684950208371869999675667769401782751704101863226852216197449440436532826964624317738333548360867640657606464876661369753808022864326198340969999768012404478670607789623079846184072860715347697355984751608568697131511919565695962946319229688527192142143435066786494416412886013237630611834573047592652688246009124676335687962173969509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55d7a405fa70625498535c8edfc083302b43e7ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itiswrittencanada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f09d2885d00000403004830460221008465acc980027b101bfdeac01e6444cd6106a5390455bf1ac5e47e77adbc48a3022100dc6474b407920623ef79fdccd8af87e63669d5a106807fa0b52a3cf74a383a2800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f09d28863000004030047304502204a5eb42a1a053b85e3eefb158a6411179e46f2cfe0519a789f1b7c79f430ef6a02210083b7143c75574d3f588f37c2ba101b6c07f346cc11339fe3d7d777b2969cc70b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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