www.saint-aime-du-lac-des-iles.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:9f:45:db:96:23:93:29:48:9c:4b:cb:28:f4:dd:33:7d:28 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.saint-aime-du-lac-des-iles.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:45:db:96:23:93:29:48:9c:4b:cb:28:f4:dd:33:7d:28
Serial Number (int): 402646896957371351040698869136516084628776
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:dc:16:52:0a:36:58:a7:f2:fc:b8:09:6e:52:9f:3d:0c:a5:5b:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:8e:dd:cd:fc:fa:5b:37:01:6d:2c:d9:e7:1d:62:9e:72:25:aa:c8
Fingerprint (sha256): da:3a:75:e1:af:ab:b6:ab:2f:9f:54:97:7f:5f:b2:5f:3a:00:3b:ca:09:16:4a:8f:66:b5:79:74:b6:4f:96:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.saint-aime-du-lac-des-iles.ca

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saint-aime-du-lac-des-iles.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saint-aime-du-lac-des-iles.ca
saldi.aegir3.koumbit.net
www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net
www.saint-aime-du-lac-des-iles.ca

Other certificates including the domain name saint-aime-du-lac-des-iles.ca

(limited to 100 certificates)
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
mail.saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca
saint-aime-du-lac-des-iles.ca
www.saint-aime-du-lac-des-iles.ca

Certificate

The complete raw certificate details for www.saint-aime-du-lac-des-iles.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402646896957371351040698869136516084628776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 08:51:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 08:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saint-aime-du-lac-des-iles.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872444298051248134072099789790724756453408470599906448567904020500722580916278631372441063648859906613649677599496071047940569236259653454106996339468494564711907554006164582241971465795276033641371279168528443925721151354475328783908345637702400261289511571443455518045434273301646122490330469117532354706848482533655774304333142146981011656644636861254949586076144330416307606884584128097507681119911837792260055418185173839198111217847757235886251282050302057673513442682620543750665091305190006733708962524372601584793485745914818919582018881654690557299813076723857512639269706093689556616208393597504966866602442361866852104738149631134351886319339003436669859719435572560630207095748247731194973334702066759399411972197882240738361121704989672500838294625826911994884415290292971468501551000429789160573084776998140354346301845996434454533281229340330857090628721803477333151949963136853213109949168717642158035807593734527473145719195705224550733752526860907652773108168451924770818677661235400326619495653774890908852817408130653549263902809793178454530088308527869968534880193841824061320481651528883713032119558101846525265647747363610886405559039357273727688967945704170170849879680494238303997745954644867964717566373609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31dc16520a3658a7f2fcb8096e529f3d0ca55bab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-aime-du-lac-des-iles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldi.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-saint-aime-du-lac-des-iles-ca.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-aime-du-lac-des-iles.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c2f1718820000040300483046022100fe371222f8387b4b2f1bf2681827f2fc30caf6435b89077188b747d32708890c022100dd6c8d552bb1a45a80df700b7feaeb914f21b998ddc1b10c94bced1a285b6ed9007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c2f1718920000040300483046022100969d8f14431e2ab1de9a235e24ed478c93bc09740112f4f8f76ae3274862617c022100a57952e2a1ccc01aaceddec88fb83d2f2ce877d85f86ba4380b950d960af5561
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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