eics.ab.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:fc:92:7f:e4:d7:5e:0d:30:a8:9f:20:3e:55:12:99:4b was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eics.ab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:fc:92:7f:e4:d7:5e:0d:30:a8:9f:20:3e:55:12:99:4b
Serial Number (int): 316798327360748609601185313979361536416075
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:26:c7:e3:8c:61:89:28:c3:59:69:81:78:c9:3e:18:93:93:81:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:a5:0b:d4:33:87:db:7d:a3:a0:8e:7c:87:4d:27:3f:f2:bc:92:f6
Fingerprint (sha256): 9e:57:ff:79:2e:ef:7c:9c:41:5d:f3:c9:18:2d:40:ac:c4:cb:03:12:9a:77:45:a1:bc:64:66:06:19:09:0e:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate eics.ab.ca

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eics.ab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abj.eics.ab.ca
chesterton.eics.ab.ca
eics.ab.ca
epk.eics.ab.ca
hr.eics.ab.ca
hs.eics.ab.ca
jv.eics.ab.ca
mcs.eics.ab.ca
ola.eics.ab.ca
olmp.eics.ab.ca
olph.eics.ab.ca
sab.eics.ab.ca
silc.eics.ab.ca
stj.eics.ab.ca
stjp.eics.ab.ca
stl.eics.ab.ca
stmn.eics.ab.ca
stmy.eics.ab.ca
stn.eics.ab.ca
stp.eics.ab.ca
stt.eics.ab.ca
summerschool.eics.ab.ca
www.eics.ab.ca

Other certificates including the domain name eics.ab.ca

(limited to 100 certificates)
eatoolkit.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
cls.eics.ab.ca
sls.literacy.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
support.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
staff.eics.ab.ca
eics.ab.ca
eics.ab.ca
*.eics.ab.ca
mipi.eics.ab.ca
support.eics.ab.ca
services.pickalbatros.com
staff.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
cls.eics.ab.ca
support.eics.ab.ca
services.pickalbatros.com
my.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
eics.ab.ca
eics.ab.ca
staff.eics.ab.ca
support.eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
mipi.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
support.eics.ab.ca
my.eics.ab.ca
*.eics.ab.ca
eatoolkit.eics.ab.ca
my.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
mipi.eics.ab.ca
staff.eics.ab.ca
cls.eics.ab.ca
*.eics.ab.ca
staff.eics.ab.ca
support.ebizsoft.co.uk
eatoolkit.eics.ab.ca
cls.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
my.eics.ab.ca
support.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
my.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
mipi.eics.ab.ca
*.eics.ab.ca
support.eics.ab.ca
staff.eics.ab.ca
cls.eics.ab.ca
eics.ab.ca
sta.eics.ab.ca
eics.ab.ca
mipi.eics.ab.ca
support.eics.ab.ca
services.pickalbatros.com
my.eics.ab.ca
*.eics.ab.ca
eics.ab.ca
*.eics.ab.ca
*.eics.ab.ca
staff.eics.ab.ca
staff.eics.ab.ca
eatoolkit.eics.ab.ca
sas.eics.ab.ca
cls.eics.ab.ca

Certificate

The complete raw certificate details for eics.ab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MTY+VAtIux6tjOlPTfw
drcx5aPYUhvIlzypDrDaJJB9lY3tTsZTcD56mRZS8KnRkiLF+8woakHYKIgESuBP
3lBFDqQNT0fQmKkqnYCKBxD6nIFHOcFmIy1+dmhnmQR/la7tK1tprNe2ef0OwZgG
S3sodVjUnEUzcdICtZ5/J5QtBDLv6NnmbaefUWz1LHN9jytpyg16ZCR2+3KNN6pH
2GNnlKwM9lsCRzFI0pSnrBQpVEclsIx0yybPbCKGQr2eWhunTyf0s6s5Bt6BckPN
qBo6KMZMPEtTdWJIeaPrNVvRba1tN7SPiMTo+oDSLKKciTo/BdiLqY5NMT/y0JUF
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316798327360748609601185313979361536416075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-11 21:53:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 21:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eics.ab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30394262338655293985938733108565311733571418173470085958502485822103055981614325014627124234900667841974372138072466139184439332910593419335582045106798141150432411709211978973065425439208588429719867647835457135372307530523950674521473015237582157481253001286717112044108894922163462358801278586692422500114940322520077069194177766945518153109184988464779591499656262418425390126389684668784037910118251671504589933624864406447784971331301127550761788149934443722196154185835377565579661272819951580890122586019651945440050401639851003191724390344404366410132149935004435834324216380685666026068443006308747975132617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c26c7e38c618928c359698178c93e1893938149
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (387 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abj.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesterton.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epk.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jv.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcs.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ola.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmp.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olph.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sab.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silc.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stj.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjp.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stl.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmn.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmy.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stn.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stp.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stt.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerschool.eics.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eics.ab.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc096b7c20000040300473045022100f2798b3dc5c338d37e19aae50d8dcfc2899e54829fef73d873db9118130d94400220351a73647963ef150e000b126c13801172a912ad38442ff426f076e7cfa6100300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bc096b8010000040300463044022052ae661c01818216fffe4d46b831889538d09589934272467798d4c99d33b398022010351ab36593110be1f96c840d7b5a7b6d10c00070f1646e6a2b4b76802b0f9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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