volunteer.letstalkscience.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:81:a3:56:0f:c0:d9:c2:6a:b9:e8:40:40:22:e6:a4:17 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=volunteer.letstalkscience.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:81:a3:56:0f:c0:d9:c2:6a:b9:e8:40:40:22:e6:a4:17
Serial Number (int): 268995388368920914189228006180127758525463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:57:de:25:55:21:95:1c:a7:ad:b3:b5:66:35:58:3f:d8:34:52:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:d7:06:41:27:7a:1a:e7:dc:51:72:7c:7d:7c:c3:56:5b:52:cb:6d
Fingerprint (sha256): c9:83:22:a6:3d:85:58:a2:32:01:71:4a:dc:f6:cb:e7:44:2d:fc:d9:68:3c:0f:3b:a4:56:3e:16:dc:73:47:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate volunteer.letstalkscience.ca

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for volunteer.letstalkscience.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benevoles.parlonssciences.ca
challenge.letstalkscience.ca
curiocite.parlonssciences.ca
curiocity.letstalkscience.ca
defi.parlonssciences.ca
explorecuriocite.org
explorecuriocity.org
ltsc.letstalkscience.ca
sentierdidees.parlonssciences.ca
staff.letstalkscience.ca
tomatosphere.letstalkscience.ca
tomatosphere.parlonssciences.ca
volunteer.letstalkscience.ca
www.explorecuriocite.org
www.explorecuriocity.org

Other certificates including the domain name letstalkscience.ca

(limited to 100 certificates)
api.letstalkscience.ca
letstalkscience.ca
portal.simforcanada.com
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
remote.letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
volunteer.letstalkscience.ca
pre.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
app.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
remote.letstalkscience.ca
support.borealdesign.com
staging.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
brightspace.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
helpdesk.workcentral.ng
remote.letstalkscience.ca
dct.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
support.corp.io
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
*.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
app.letstalkscience.ca
volunteer.letstalkscience.ca
app.letstalkscience.ca
app.letstalkscience.ca
staging.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
support.atlasti.com
auth.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
help.trkall.com
support.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org

Certificate

The complete raw certificate details for volunteer.letstalkscience.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7RtxIYAekiMbVrZzxo1
abEOZ/mJvcJMxgG6ShDt8IEBUgZdIuZnHfdNUlnFR/xi80rkdDeCPCnK8zxXUyxT
nVAD3xTx4h+ABQcoPz4AGvWoHhFjCXegyVOBGuBmKXCtNz3rYp5GwV33Hxm5cvRG
WO6TuLnLCDtULYi63mgIyVB4B2CGJQlmmHMeSrjrwHdaNKQeTz3R8uNyLSVLHOYo
r+n6ejreOVZEkTlxcTcYwV7/3w3ZfSP+mfz+hbi0cPzLM9nbhRf8zdA3amkYcH5K
nKfxojZnRDgjp25vvIZkZ/XWed0R4XGETtucRiDW8ks8hA+HmvYr0HhxwwFzcRhd
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268995388368920914189228006180127758525463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 17:06:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 17:06:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'volunteer.letstalkscience.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17131143917875796191649540201559875357821957739584479184428652103098977685335108344788971580479216079676810893035360976147864496035125790083858412276728195830491502410159818773482048945513870174539286264314359525858874442104142365377553121826535837750598317460093516409021081144934981214281612523388114126047907962692512862595632160900173860732187659425554237146774796660499162857429639453953657074309995653148476201174831802736340244387192057461875076589299122794634537444483129790061857004443493491933784646456554575390261686223550569761784284013069517241480901916978327081312102761732346578292475679355978961673587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f957de255521951ca7adb3b56635583fd83452a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (426 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benevoles.parlonssciences.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challenge.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiocite.parlonssciences.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiocity.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defi.parlonssciences.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorecuriocite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorecuriocity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltsc.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentierdidees.parlonssciences.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomatosphere.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomatosphere.parlonssciences.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteer.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorecuriocite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorecuriocity.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e18b3101e000004030046304402201bc61ef7b16e2d3281261ba7c74b0ccba93140138342d1c4beaed0c4d88735b3022078f2a24fd3c4b9e3b40f59b7d96b0fc1f9644df620eff1fa7285793e3fb385d5007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e18b310190000040300483046022100d9ad69542e707b8e6b0050dd65161d39a62d254a8447385cad760294a8441459022100bf9de18140327db30054cad3376c5be4523e5a9fc860644b5c12d85d02dffcf9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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