brandxtech.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c6:5a:88:c6:da:bb:44:c6:35:9e:c1:5b:b7:c9:c9:cc:ca was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brandxtech.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:5a:88:c6:da:bb:44:c6:35:9e:c1:5b:b7:c9:c9:cc:ca
Serial Number (int): 415945393082627003308312968493600288132298
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:bf:25:a1:48:e0:dc:50:c6:ae:da:d1:ff:54:39:4c:bb:d2:d7:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:5a:2c:96:0e:49:07:18:8f:21:88:fd:ba:32:3b:96:c0:c8:f5:df
Fingerprint (sha256): d8:87:95:9d:cd:ce:93:92:34:af:a8:e8:a4:0b:1f:b2:c1:ce:bc:81:de:aa:eb:6c:16:37:c0:a7:a7:87:49:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brandxtech.ca

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brandxtech.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brandxtech.ca
dashboard.adaptiveag.ca
dashboard.adaptiveagriculture.ca
dashboard.aerogrowmanufacturing.com
dashboard.brandxducks.ca
ducks.colinlarson.ca
www.brandxtech.ca

Other certificates including the domain name brandxtech.ca

(limited to 100 certificates)
grafana.brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
staging.brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
api.brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
grafana.brandxtech.ca
brandxtech.ca
staging.brandxtech.ca
brandxtech.ca
brandxtech.ca
www.brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
api.brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
api.brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca
brandxtech.ca

Certificate

The complete raw certificate details for brandxtech.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415945393082627003308312968493600288132298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 19:37:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 19:37:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brandxtech.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720455285543672412528213333511830091008115148422914045476402352634727845420666043658049804741997571112790419365433572563140965797902711882212741127881032067667235671035565321418212377627484635497189818071598009553792063323487922924278644901204486429301994068831941832938752701082193138874444082798975778342713717035248432136425047121515564580862350985652098515332886409805663030678976804570094349836672378100398758270702866010958653251860598923108887480201816539974782026026386292562811977388703320437342378646274040695605704128799786750579902097267968381194850838075811019828160617660083370174462265903704169366754987115142158363947001365225888155635980021742295980124822807163850973332376773175915131374226256953037844846984671337723815825096755825062783334560906265438288953810417675494179985682994370689928698807979799837506883784533046849638359721378838234435485142761494898567440614446436396321508901571731980884222877923667825929881276526184600898369310908522545837492653269093881798549421776687150052587450089871411838304023181150320666535808387693227998255359115513163846064929972277716782489265846630775415882063147783383271071764504623727890522697722274374042702186499643645276199449316053086364625420890576816098719236421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fbf25a148e0dc50c6aedad1ff54394cbbd2d7a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandxtech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.adaptiveag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.adaptiveagriculture.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.aerogrowmanufacturing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.brandxducks.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducks.colinlarson.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandxtech.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001713c9ccd62000004030047304502202596a2893f8ffcb303de36306a81e7c4d96466bd0eb9f4af9da5085944db4004022100dc7f4cf40f638214326cf6524037f1a0ab39e665c168c50da4988e223cf2192c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001713c9ccd500000040300463044022074ad1f159f3ff1db1dfdfa62d04d9c975b30cbb83fda0e209f0fb982ef9d28c8022005b0d594836fa903e699dac83995b193680fe788164522bc0b18964bc1988569
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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