www.itiswrittencanada.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:6e:79:e7:b2:20:09:3f:52:65:60:5f:e6:38:00:ff:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.itiswrittencanada.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:6e:79:e7:b2:20:09:3f:52:65:60:5f:e6:38:00:ff:c5
Serial Number (int): 263525400043611740251565023095072718127045
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:b7:1f:46:bc:a7:06:9e:25:88:5d:57:7a:85:0b:a5:a6:73:b4:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:8a:61:09:4e:43:c3:dc:b2:31:00:4b:fe:ff:50:b2:af:fc:82:5d
Fingerprint (sha256): ec:ba:ae:70:e6:39:8a:77:de:d6:3a:38:9d:0f:4a:70:4c:50:60:a9:fa:77:b3:e7:34:c7:26:68:f2:6a:20:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.itiswrittencanada.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.itiswrittencanada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itiswrittencanada.ca

Other certificates including the domain name itiswrittencanada.ca

(limited to 100 certificates)
*.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
fr.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
estaescrito.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca

Certificate

The complete raw certificate details for www.itiswrittencanada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263525400043611740251565023095072718127045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 12:50:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 12:50:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.itiswrittencanada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721204972407239295375848099144136854864680144055592929617252648159908208809134672425842166697232211337742229372809372662132240797054371632764778802042733639290390777815619193330746003096452186006318807437836640223850280936551935221339888257193750743825719302590866405212837254460357490051027073790620659226683260997843641679302823795519340025740019279994038214666494493887362234263925195801158282009849898088815404163386459065617394246039577393070363123893381768096726549608320977096022942276844344972169787187394083653246655962758778306857580020988722700079233222137757955387828651622213978020434050394667371595176751083629055531723497589552704127539494666919222248936890745468369134489429965125122090691223271879016637862124176808764683668738198189558616159711660554949983853198119993954490862177880325443973944644280062373575643621428483494639927401359949979252295422408599710365107707881391489883604334704062692034651258512485989537027512543353577158672667933337055508658360946218062388967733941142615822794179328023341512968491634521445995738277016698578507049296577508964320803964550543512346768612698331364880671113753198484753821703609028258797688246645838413681705554896223076354320451384556981365481948962377901741743178369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							beb71f46bca7069e25885d577a850ba5a673b47c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itiswrittencanada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170159d63b4000004030046304402201a0f1de134967dc772959e9466553d2ef6e2416b71f446614c44d792eb58263602204d1ef7313d52ff536db4125fc3981583c509f83c8652f014d215b18edf58ddb10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170159d652700000403004730450221009681a7a99a254d1bfc2d5ef5849c88ed8f8e3df17af1b896fbf63322524f5d24022051f4d0ca46298f6359c8dc4ee39619c138c077e3560f2ad52322505bbde6bb0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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