www.riviere-rouge.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:c6:d2:56:ff:29:18:83:1e:dc:4b:c3:03:5d:aa:e5:54 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.riviere-rouge.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:c6:d2:56:ff:29:18:83:1e:dc:4b:c3:03:5d:aa:e5:54
Serial Number (int): 265344243121419894568608458410112938861908
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:4b:52:0b:06:d9:1a:86:8a:dd:e9:9b:3e:45:2e:38:82:ef:a5:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:69:a2:2b:3f:47:15:83:0f:11:44:e0:3a:a5:29:84:70:75:89:b1
Fingerprint (sha256): b0:76:ad:73:fc:e4:9b:58:d6:0e:e6:fa:9c:40:61:da:8f:78:b1:72:04:c6:ec:5f:3f:a5:7d:ad:25:2d:80:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.riviere-rouge.ca

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.riviere-rouge.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

riviere-rouge.ca
villerr.aegir3.koumbit.net
www-riviere-rouge-ca.aegir3.koumbit.net
www.riviere-rouge.ca

Other certificates including the domain name riviere-rouge.ca

(limited to 100 certificates)
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca
www.riviere-rouge.ca

Certificate

The complete raw certificate details for www.riviere-rouge.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265344243121419894568608458410112938861908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 22:45:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 22:45:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.riviere-rouge.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748013623300085866773712043251918442174496927849790223710496340421519017059292399189409869342492690843090098835553378851906234512995678050971782577080230381420374296427531401959172574388149385405053017091319217522867003493608262893004684553398184195072176015358527293613599257692965325994957408831120557319431713885533147070757950809110077878344122927747118113052818016858766844120391406504007287272666464314607811323206015168016081026593549858011682924999546825593357953600173694915132198503703623617543531205630259343390606049879136797161379334035115350497737076891321238169400674733231933164532930547027005856548067584752584953160229358563902819179193068624666799534954090138938088922403347043231355523261197792875772887530221757098307010519995035227695951808770782441140118855230065927915698798951883385866303815602681625747172581240830009390298528236495275743031931030501363831143375004988522360998197144746208800542294799093033515740042025541383431895020162852636747013674801913829491181166850202688862847811180620665489067372335353689409075589033929700456686705339806915024751776332306189038745221934164472688777124859155453110583992103913062341943698407905796891324065739474399963018083933245298570232060735729269560565815053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							334b520b06d91a868adde99b3e452e3882efa550
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riviere-rouge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villerr.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-riviere-rouge-ca.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riviere-rouge.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb0bf4c900000040300473045022100965cc78fdda383ee7b9d93056547eb28ef15873e5f256cec297aea68b5dbf86102203f3e5f628ab49b42429423a2d672edc31a58fad2bf6f639ae015abd2b77d5af0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb0bf4c880000040300483046022100d25cc99ffdb0e6fdda3df7713df857d6753e5d5241e9365c30a401f0d48a4b490221008eef79ea6a1445a0b33cfcf52121ebb8adc9d07dcca87c0fbf1ecfb7e6473878
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088957244818feb13de16ed664495d1694f13c1e25cb6412c9e1d6492397451bcf8b881c7fb99e58b470c05388a5f350a0b80f26bba292d3c08740002f6a16fb990872dc7be10fe4cf327f12a9daaef2bac408aa1638b459a085a16d7d6c6652375c19f423e2c2528442c8d646bf052219d1fcfdc23b893f65e0cee32d3326ecb1f99d2f4f7652e67c13dc1e10b2727823e3f037e674ea7c37ce5c5a619056af2195b68d4f9d54f4bc27f759ade503e81c84db788fa39a6c711ff303e30ed030a863dbd8baf0ec941f4cb2695943df7c0f30d3e2ce2ccc1b43b79daec74f04f71aa2b8f01195b591aa802e03cf91918befb425ae2cef93f61dcb796b67bad56b4