brinkmanlab.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:50:fa:4d:e1:39:bf:25:32:85:17:34:bc:98:bf:e6:57:13 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brinkmanlab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:50:fa:4d:e1:39:bf:25:32:85:17:34:bc:98:bf:e6:57:13
Serial Number (int): 376004444454637722504162443772340516312851
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:fe:77:50:f5:ba:40:c2:4e:fe:2a:9b:33:e3:b3:00:68:59:98:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:3d:36:cc:4b:b3:af:4b:e8:f5:16:63:2f:42:94:c2:72:73:0a:3c
Fingerprint (sha256): a2:c0:f8:61:4d:6c:8c:53:ff:e5:63:98:5d:4f:16:fc:a7:12:34:65:35:a9:ed:22:43:d4:7f:b2:92:87:70:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brinkmanlab.ca

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brinkmanlab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aap.innatedb.com
*.all.innatedb.com
*.allergen.innatedb.com
*.arbutus.brinkmanlab.ca
*.bcid.ca
*.brinkman.mbb.sfu.ca
*.brinkmanlab.ca
*.burkholderia.com
*.cedar.brinkmanlab.ca
*.childdb.ca
*.curated.innatedb.com
*.ibcwg.org
*.innatedb.ca
*.innatedb.com
*.innatedb.org
*.irida.ca
*.microbiomecanada.ca
*.ortholugedb.ca
*.pathogenomics.ca
*.pathogenomics.sfu.ca
*.pseudomonas.com
*.psort.org
*.sfu.brinkmanlab.ca
bcid.ca
brinkman.mbb.sfu.ca
brinkmanlab.ca
burkholderia.com
childdb.ca
ibcwg.org
innatedb.ca
innatedb.com
innatedb.org
irida.ca
microbiomecanada.ca
ortholugedb.ca
pathogenomics.ca
pathogenomics.sfu.ca
pseudomonas.com
psort.org

Other certificates including the domain name brinkmanlab.ca

(limited to 100 certificates)
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
sni.cloudflaressl.com
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.stage.brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.brinkmanlab.ca

Certificate

The complete raw certificate details for brinkmanlab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4o7sKdli7H6jAuBB0HE
YCr604C6gLyRxFlG6rk8++3AOL7fRbu1Yjmvu8w7vjasKOXJSymu5BmMvs1nEk/D
lq7LRK0OhL0uNDAJVBsWU5NsW3i+nFJYQ2p29xR76GpV47+NPzMiFVZIgfLW26Ly
6DvcCCaYw8Ww/gH53lRp/6ha9SfLsCUl0Ct+Br06HftwzkEtcZOwrlj2djtBHBPl
sXW6x4etl6IXMKJh99o0VaIQTgvzr2cm2ZXoOqRx2QkfDqp9XgE0OSHkt3KeRy0R
rwwxHsZ7SaepkINpxHF1ltkM/paR1jOp9A7bJUQb0agvFD4rc3YgHtwONUQ7EW9L
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376004444454637722504162443772340516312851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 20:09:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 20:09:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brinkmanlab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22664821902784285596419283281793220950362094416673840468734393441335853101321930738383386015550157082375861499563110045460775008103715012017587925989265906656968103243277484736555634481924568197578689691601131771613771876034690481126775913690754373694081787256928895150219615896026299173010418377140093627005661904276517624678723624293587248785723982113820865592399627251771934558374881945810422943465237820655355986354443164315010975875778702768486100304255974727206487559033821689164860493194217261998116152509376133079718486240406373566979505150821877834468102557550569788302313250315366084590853461847634328111979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dafe7750f5ba40c24efe2a9b33e3b30068599831
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (683 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aap.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergen.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbutus.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedar.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curated.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfu.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psort.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f64576477000004030046304402201dbc030a19e4cbc6c7f8178cccf895f42beeb789cd8266b9ef3ef511025aab3f0220310346fb2c518ce94088f4caea56cc7fb84f085613ed5c0d18e54ffd6f1dd28400750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f645763980000040300463044022022eaf3879de75f02ddf084845320baaad24a7d24a802d2fe1e87317c6945c7b402201e0ffca146949efe136a98827ac75205ab3836f413796647dc90919c2b24e033
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00081819447bd30b890ea6ccb5e3c0bdd8a430612fe9cbc4720b11716cc007f104ec4432dc78e642e51ee9f8959c8f4a6d526d9bd0f48b26e89e0be2c792a53e23ace16a6e2cced6378297f3735ecb179f85466596b352186ffed82a1283a37e7ed09307ec1cd15844a84c999dfccfb8290c6cf370c62eee467cfe35c7c85297d51ae42507bfd5a46fb5d303e8444e99b9e29dbc43c517add38d708cf6448e0cf062c33f2df92feb6355fd823cbb3f34f44c542df4ab3df8a8e61c3d237160a0bcbe0f785a2a5beb06bb9852f7d07679439353dc78066523f318a6d0a84bea37355657aaac9398bf2c9cf236edb8ed51dd7ae2587f586ce139353dc8bad958c1bf