tangibility.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0a:7b:d9:18:bf:87:d7:e9:f8:17:7e:e8:64:c0:c9:76:a4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tangibility.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0a:7b:d9:18:bf:87:d7:e9:f8:17:7e:e8:64:c0:c9:76:a4Serial Number (int): 264904303738342422312597557437621594584740
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: db:66:f2:bd:5d:7b:89:66:0e:98:b5:d2:78:e7:79:3c:cd:dd:82:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c8:b9:5a:fb:9e:fb:aa:d9:21:74:c7:c9:c7:f4:b8:ee:1d:00:9a:99
Fingerprint (sha256): f1:a4:0a:93:88:25:80:39:8e:87:e3:3b:52:11:f6:8e:48:08:41:98:ae:ed:f9:d7:d2:1e:d7:ee:4d:0c:85:8c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tangibility.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tangibility.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tangibility.ca
www.tangibility.ca
www.tangibility.ca
Other certificates including the domain name tangibility.ca
(limited to 100 certificates)
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
accounts.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
analytics.tangibility.ca
hosting.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
hosting.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
nextcloud.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
wordpress.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
accounts.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
analytics.tangibility.ca
hosting.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
hosting.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
nextcloud.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
tangibility.ca
tangibility.ca
wordpress.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
tangibility.ca
analytics.tangibility.ca
analytics.tangibility.ca
Certificate
The complete raw certificate details for tangibility.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAwp72Ri/h9fp+Bd+6GTAyXakMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDMwNjMzMDZaFw0x OTEwMDEwNjMzMDZaMBkxFzAVBgNVBAMTDnRhbmdpYmlsaXR5LmNhMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dkhSBiAoq403IS7wmVLNHdpc4nXj9Vf 9WsQIlbDCkXxSJULgQ1h1DKk4lyqdT9Rkk+QsJV/po/r/4HU1w1IQGywckg1D/TS zKeJ5MoaqDBmM8XB3Bxp8fyKLnhoUweX04Kxr5DSJRmmSRdIIJ1f+UxkkvcF3KPy H1X+c0NPufutqaps7dqDU889ay9F4BtRHuhnEatnXORWtkgxymGvQH2SXc7GzXdo SwGdLXdF76koJFGOzx+7IyKq9E1vstLA0vPxQ5qLl3T+K6sRZ5Ml85WwErKRWlci gmT/AjSVdVbo+GgXe/taDQ6s3XtQRhtHn1iFs1XKaae8jmeuRTRE7wIDAQABo4IC dzCCAnMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTbZvK9XXuJZg6YtdJ453k8zd2C IzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMC0GA1UdEQQmMCSCDnRhbmdpYmlsaXR5LmNhghJ3d3cudGFuZ2liaWxpdHku Y2EwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWu2 wFbFAAAEAwBGMEQCIDA2mmjCDoVQkKoJgBiVpefH1YO35Ptl+UU/76Ho402RAiBA Fkzt8lv5uMkGvE3kIoE9oSsl1OjY/ylM7ftyHIYp4wB3ACk8UZZUyDlluqpQ/FgH 1Ldvv1h6KXLcpMMM9OVFR/R4AAABa7bAVrIAAAQDAEgwRgIhAOFCPF0KUfFhWnDP 4KJDvfoqSBRpQaLf1dJRewcQYadwAiEAv/4B3oC6TF9PtLB8f1ZFzJfhA2dLqMZK xLK32T8OaRIwDQYJKoZIhvcNAQELBQADggEBAFztWY+rvrKAzSDt2AwS/QUY4s53 JF6CjcUnNVZWTbeIL1Zj9cKNRVT13qkdFQOjVTsu9x9u0Uc3s5NuIUs5+GVJKKeC 5ZUZP2ieE5AuS2A7BdOUEEEjcP4v9tIv8eSvh/D8eeyAhbEK3tqMhPRO83vSADZk 5gyS2OATura04UlA8LXDWZdCbNiYpng8PygjfF84t0ETy8JJNu9hF0RVXm6Pbnt3 tfU0xY9mYfcotgYmL0Kn5Po7G8Enid/wsJiWeldd5j5e1I7GxpTdAOE6LdoVHAht GNpYAbOTMt2zinxuumO/YjRsqCosKMSKWQKCFA/qP0kueVTjVlF4Z2F2dJo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dkhSBiAoq403IS7wmVL NHdpc4nXj9Vf9WsQIlbDCkXxSJULgQ1h1DKk4lyqdT9Rkk+QsJV/po/r/4HU1w1I QGywckg1D/TSzKeJ5MoaqDBmM8XB3Bxp8fyKLnhoUweX04Kxr5DSJRmmSRdIIJ1f +UxkkvcF3KPyH1X+c0NPufutqaps7dqDU889ay9F4BtRHuhnEatnXORWtkgxymGv QH2SXc7GzXdoSwGdLXdF76koJFGOzx+7IyKq9E1vstLA0vPxQ5qLl3T+K6sRZ5Ml 85WwErKRWlcigmT/AjSVdVbo+GgXe/taDQ6s3XtQRhtHn1iFs1XKaae8jmeuRTRE 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264904303738342422312597557437621594584740 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 06:33:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 06:33:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tangibility.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29520595853802770310488789168585208987088827404695182665315049211996856255167222473280638792483103184388798216228597447649925252224892745511650423774462111842593935886513048130271232354858199659674790676043853581516184233892393764528922553522229770296887667108998911652596373188425740664317730077034386134298445874464481268091203640432922208715807954509944778088689253939443990422858319813455066523226147586093439987965426422884211302552396554978991321327526276754762513465780224553708776803051168352527343308076957143853048845753293639579077107513007047184944033632457028320417403747795298804923966190922310800917743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db66f2bd5d7b89660e98b5d278e7793ccddd8223 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangibility.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tangibility.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bb6c056c50000040300463044022030369a68c20e855090aa09801895a5e7c7d583b7e4fb65f9453fefa1e8e34d91022040164cedf25bf9b8c906bc4de422813da12b25d4e8d8ff294cedfb721c8629e3007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb6c056b20000040300483046022100e1423c5d0a51f1615a70cfe0a243bdfa2a48146941a2dfd5d2517b071061a770022100bffe01de80ba4c5f4fb4b07c7f5645cc97e103674ba8c64ac4b2b7d93f0e6912 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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