brinkmanlab.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:17:17:19:56:90:d2:33:c9:32:41:56:a0:02:13:b8:a7:15 was issued on by Let's Encrypt.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brinkmanlab.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:17:19:56:90:d2:33:c9:32:41:56:a0:02:13:b8:a7:15
Serial Number (int): 356306341973308223455420427076185458517781
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:5b:7e:fe:28:9d:c1:3b:03:aa:05:da:8c:08:3c:da:dc:92:a2:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:a6:99:cf:ac:c3:30:17:f5:95:d5:61:d1:f5:2f:cb:b2:32:4f:9d
Fingerprint (sha256): ee:70:80:09:61:41:f6:a2:56:bb:13:c8:91:f8:79:b7:99:4d:2b:e4:46:b1:94:7e:2b:c0:01:7a:3e:c8:be:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brinkmanlab.ca

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brinkmanlab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aap.innatedb.com
*.all.innatedb.com
*.allergen.innatedb.com
*.arbutus.brinkmanlab.ca
*.bcid.ca
*.brinkman.mbb.sfu.ca
*.brinkmanlab.ca
*.burkholderia.com
*.cedar.brinkmanlab.ca
*.childdb.ca
*.curated.innatedb.com
*.ibcwg.org
*.innatedb.ca
*.innatedb.com
*.innatedb.org
*.irida.ca
*.microbiomecanada.ca
*.ortholugedb.ca
*.pathogenomics.ca
*.pathogenomics.sfu.ca
*.pseudomonas.com
*.psort.org
*.sfu.brinkmanlab.ca
*.watersheddiscovery.ca
bcid.ca
brinkman.mbb.sfu.ca
brinkmanlab.ca
burkholderia.com
childdb.ca
ibcwg.org
innatedb.ca
innatedb.com
innatedb.org
irida.ca
microbiomecanada.ca
ortholugedb.ca
pathogenomics.ca
pathogenomics.sfu.ca
pseudomonas.com
psort.org
watersheddiscovery.ca

Other certificates including the domain name brinkmanlab.ca

(limited to 100 certificates)
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
sni.cloudflaressl.com
brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.stage.brinkmanlab.ca
brinkmanlab.ca
brinkmanlab.ca
*.brinkmanlab.ca

Certificate

The complete raw certificate details for brinkmanlab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4o7sKdli7H6jAuBB0HE
YCr604C6gLyRxFlG6rk8++3AOL7fRbu1Yjmvu8w7vjasKOXJSymu5BmMvs1nEk/D
lq7LRK0OhL0uNDAJVBsWU5NsW3i+nFJYQ2p29xR76GpV47+NPzMiFVZIgfLW26Ly
6DvcCCaYw8Ww/gH53lRp/6ha9SfLsCUl0Ct+Br06HftwzkEtcZOwrlj2djtBHBPl
sXW6x4etl6IXMKJh99o0VaIQTgvzr2cm2ZXoOqRx2QkfDqp9XgE0OSHkt3KeRy0R
rwwxHsZ7SaepkINpxHF1ltkM/paR1jOp9A7bJUQb0agvFD4rc3YgHtwONUQ7EW9L
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356306341973308223455420427076185458517781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-05 17:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 17:05:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brinkmanlab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22664821902784285596419283281793220950362094416673840468734393441335853101321930738383386015550157082375861499563110045460775008103715012017587925989265906656968103243277484736555634481924568197578689691601131771613771876034690481126775913690754373694081787256928895150219615896026299173010418377140093627005661904276517624678723624293587248785723982113820865592399627251771934558374881945810422943465237820655355986354443164315010975875778702768486100304255974727206487559033821689164860493194217261998116152509376133079718486240406373566979505150821877834468102557550569788302313250315366084590853461847634328111979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d5b7efe289dc13b03aa05da8c083cdadc92a269
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (731 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aap.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.all.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allergen.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbutus.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedar.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curated.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfu.brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watersheddiscovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkman.mbb.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkmanlab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkholderia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childdb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcwg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatedb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irida.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbiomecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortholugedb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathogenomics.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pseudomonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watersheddiscovery.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a668581f600000403004730450221008ece5ff520048b05658c2b185fb02e699d20310d7b8726ecf840b646c14702d0022010f752da0b902f3f1f6b5ef15997367c75a17cb9d211d0cbb475e5b8a17815e9007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a668581e4000004030048304602210089dfbcf58a596ea63ce3e9a119be193506372394ee023b29f08c55e77b544d4b022100a0f2dc755f475c18003bb0a902cf868cb0ef0bd56d1727d9235f7dd9b9caff50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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