friends.calgarycommunities.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:13:f2:8a:7d:e6:d0:5f:f2:ad:3f:5d:33:d9:08:4c:a0:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=friends.calgarycommunities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:f2:8a:7d:e6:d0:5f:f2:ad:3f:5d:33:d9:08:4c:a0:09
Serial Number (int): 268124615032313164903875119811681086906377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:a9:57:4f:79:5a:55:6f:61:5b:72:e1:ad:4f:2d:92:98:11:f4:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:67:56:37:e4:53:c9:ce:f1:ce:e9:fc:24:8f:69:8f:44:7e:d8:88
Fingerprint (sha256): c8:97:e3:ef:40:17:7d:5f:8f:b3:ed:61:78:2e:64:f4:6f:80:a7:c2:99:74:19:ae:27:94:63:94:3d:d0:f0:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate friends.calgarycommunities.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for friends.calgarycommunities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

friends.calgarycommunities.com

Other certificates including the domain name calgarycommunities.com

(limited to 100 certificates)
members.calgarycommunities.com
activateyyc.calgarycommunities.com
members.calgarycommunities.com
members.calgarycommunities.com
members.calgarycommunities.com
friends.calgarycommunities.com
calgarycommunities.com
calgarycommunities.com
calgarycommunities.com
friends.calgarycommunities.com
planning.calgarycommunities.com
www.calgarycommunities.com
activateyyc.calgarycommunities.com
planning.calgarycommunities.com
activateyyc.calgarycommunities.com
calgarycommunities.com
activateyyc.calgarycommunities.com
calgarycommunities.com
members.calgarycommunities.com
planning.calgarycommunities.com
www.calgarycommunities.com
*.calgarycommunities.com
vps.sfginc.ca
www.calgarycommunities.com
members.calgarycommunities.com
members.calgarycommunities.com
activateyyc.calgarycommunities.com
members.calgarycommunities.com
smithfamilygroup.com
activateyyc.calgarycommunities.com
www.calgarycommunities.com
vps.sfginc.ca
calgarycommunities.com
*.calgarycommunities.com
calgarycommunities.com
members.calgarycommunities.com
friends.calgarycommunities.com
planning.calgarycommunities.com
vps.sfginc.ca
friends.calgarycommunities.com
calgarycommunities.com
calgarycommunities.com
www.calgarycommunities.com

Certificate

The complete raw certificate details for friends.calgarycommunities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZoSSOrzuo8t/G8JlgTr
HvyP8Yf8PNdETsyDdI9aaocFN+6mHwft2Qf3mhmdYK91KixiJopL6gJ4WJ7hY0xx
bXj+KA+f51Naurf8Msb50yR33ix3EzXfR1/mT7M6UP9ru4MHpaoe9E5g/gmCi1BA
GbOElQV/m65wiTR8g4ng+TcOF23tydKwji2jNkct3FnYm6k2u0xSnlY/l6XnZ3N6
N2xdQsI34t+aVsJmttYh8UTPYkrv/k7xywfjHuZZaW9hTdQ/JHLKvntCvTbSDzwP
vQNXsPYKj3gzltK6vlD4dRoy11DGEGnHyqAXtdoRzraWDyuvdhM1SeDQOSaOhJqA
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268124615032313164903875119811681086906377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 21:36:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 21:36:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'friends.calgarycommunities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21915202210507070545947886694213693258158717526699278969734021201920412767676400889142212173766788349259663923120901400924034980276473397604844617551298125949564925897377294977776226209940443436490162986173261551629342479259403277231805135985661493337332682100359906892539101665398415388247708703917522506908882584876851420457595788117888652786184996244569826911758843045833829325638822784845878285059927861235147412715026650418986169943970547016227917433631978633897574136683602749181566141294772287495923540863210506711512040496221432635791562126517734826126623079336770188058673904198077799786689378521148733161487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ca9574f795a556f615b72e1ad4f2d929811f4b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friends.calgarycommunities.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f6866daf50000040300463044022075a678132f96498277aae9a77f722d5d2a12c5c85bdaee7e661464bc6b6f016502204f0434bc9d148a9a2ec5174a1d65ae0fa940465d42aa4637be22c2d5ab02ef1c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f6866dae600000403004630440220194a0790983fe963e867e5a1f7453d4b7598b2e9e130b66178a9bb7eddc703cb02203444f2649f0e7c059e530568800ec464098a3ceb527283aaac0979ec581690ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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