www.kickboard.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4d:c2:73:5f:64:5d:30:4c:7f:f7:a0:ae:94:f5:6b:aa:11 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.kickboard.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4d:c2:73:5f:64:5d:30:4c:7f:f7:a0:ae:94:f5:6b:aa:11Serial Number (int): 287797069328294575905020446133684030646801
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 13:60:5f:fe:09:c5:35:87:57:69:af:2a:7e:47:f4:a0:65:2d:9c:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1f:5e:c4:10:58:d5:cc:f8:7a:4a:96:0f:c0:67:b9:80:33:d5:82:40
Fingerprint (sha256): a6:82:a4:8a:67:a0:03:c5:8d:15:3d:67:59:86:a5:71:85:4e:3f:8f:f8:00:83:a7:78:7c:6f:77:2c:90:e1:ae
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.kickboard.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.kickboard.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.kickboard.ca
Other certificates including the domain name kickboard.ca
(limited to 100 certificates)
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
www.kickboard.ca
Certificate
The complete raw certificate details for www.kickboard.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISA03Cc19kXTBMf/egrpT1a6oRMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjUxNzM0MDBaFw0x OTA2MjMxNzM0MDBaMBsxGTAXBgNVBAMTEHd3dy5raWNrYm9hcmQuY2EwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eR/yUnr9h2By1znKHVicCiIGRscm RxLXYu4+AjTQZrOFqWAK1kld0lik3XVHKdrAXtH4gOR7TT9X5R4lvHNotn+OwEBA +op/wnjAUr9QszZ9V8JowexrP6cW/yHLyy3j0FKQ9/PQwlX0An9gm1PJnTOfrb8O gmTrdMcstiwSRVarc9vEGgYKL+AixGMUw4umJKjJLQBvS652+9cE9XyKcZDhXto6 Y/8kYv6TcoA2cUTkxxAXBhZRDd08LC5x5atSJ2+gpK9+z28wh1J+s7rIPXQZbcjO 8eEUn5a1vHrEagWUWuTsB8FkP7ZWLRLHuLxWz/ljjbjo3BDXHz3syep7AgMBAAGj ggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBNgX/4JxTWHV2mvKn5H9KBl LZygMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wGwYDVR0RBBQwEoIQd3d3LmtpY2tib2FyZC5jYTBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AOJpS64m 6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABabYhdzoAAAQDAEgwRgIhAPJ7 SyGBFpWaFlGSCEvFT4s6F3Xnkhi/fP6lkDNR95y0AiEAxzVciTj/AV1G3uKJqkwX 931irbh7p4pW+89jPJi5i+gAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdo VEvYjQAAAWm2IXdCAAAEAwBHMEUCIFejLiPgPB6MfmGtAwPKtJZ0JLo6X1VDHIpm 7V9XMMDCAiEA1KnJ62IxND4GTIJL+trcZ2QTbcXNY9+OdwFOKRh/b9UwDQYJKoZI hvcNAQELBQADggEBAJbx+WCinNo7J0iOUHg+zttKoDsoMtzNgLFy0d7XW0lWi2MF GcEvwX0LQmCrfY1Xb1h7a5whpFtLI1twObUDwopBnS8TdSJOvhOT/SzZ0UNUlLSD UyHyznXGU+0cSyoHyyRX4ya/qPQkuaP+1UYgRFuNJhHKvUbxEfhGBHtluf3M4nRN 77+od7Nv+Mm6qSCUS4QJv33S4lycny8CVabwYMNZWztu73ScKN9aaK9I9RC7aSQ1 WK61w9+Ei1hiEKUpqxHLfZgOmOFlYfoAy/ri/h+NyFRdWPP12ZhsUojM3Kg3e3s3 1LnfqAdLrMw5a6SS2KGC5otqWX4GMkDolCHFvOw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnkf8lJ6/Ydgctc5yh1Y nAoiBkbHJkcS12LuPgI00GazhalgCtZJXdJYpN11RynawF7R+IDke00/V+UeJbxz aLZ/jsBAQPqKf8J4wFK/ULM2fVfCaMHsaz+nFv8hy8st49BSkPfz0MJV9AJ/YJtT yZ0zn62/DoJk63THLLYsEkVWq3PbxBoGCi/gIsRjFMOLpiSoyS0Ab0uudvvXBPV8 inGQ4V7aOmP/JGL+k3KANnFE5McQFwYWUQ3dPCwuceWrUidvoKSvfs9vMIdSfrO6 yD10GW3IzvHhFJ+Wtbx6xGoFlFrk7AfBZD+2Vi0Sx7i8Vs/5Y4246NwQ1x897Mnq ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287797069328294575905020446133684030646801 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 17:34:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 17:34:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kickboard.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23035100364534455917927832316141842719132690402283980987186566408230393800801247227028806248629339711833571612113397786713261889030652920446095488277223827851627952663400678372841286372064032115980331154806872564012619907739504109024435690218133307476108403514644688298807493126576511229141348260332489897332414107518467564299825535476088539555718836386758629303853183278038600450173437176213677933324462177439459657040933882244389247146814657437479579036031538804907490639522255921306385504154176594571430636469412079733865425887607675686068001518099598945534472600305647465851800279283511519332626914851547446372987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13605ffe09c535875769af2a7e47f4a0652d9ca0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kickboard.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169b621773a0000040300483046022100f27b4b218116959a165192084bc54f8b3a1775e79218bf7cfea5903351f79cb4022100c7355c8938ff015d46dee289aa4c17f77d62adb87ba78a56fbcf633c98b98be800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169b62177420000040300473045022057a32e23e03c1e8c7e61ad0303cab4967424ba3a5f55431c8a66ed5f5730c0c2022100d4a9c9eb6231343e064c824bfadadc6764136dc5cd63df8e77014e29187f6fd5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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