*.briercrestchristianacademy.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:59:cd:c0:c9:62:8b:ee:d5:1f:06:f8:cd:1c:ab:f8:71:43 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.briercrestchristianacademy.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:cd:c0:c9:62:8b:ee:d5:1f:06:f8:cd:1c:ab:f8:71:43
Serial Number (int): 291895481195949007036492304709940084764995
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:d1:79:03:e0:c5:4f:8d:1f:5a:df:85:74:80:86:c8:ab:3e:b0:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:f1:42:42:a3:07:3c:a7:fb:d4:f6:f2:52:3e:56:09:a5:8e:8c:2d
Fingerprint (sha256): f3:4f:17:77:91:3c:fc:48:2e:bf:30:b7:c6:1c:9c:d7:f4:f0:e7:11:bb:77:07:8c:ef:f9:32:ab:15:34:6f:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.briercrestchristianacademy.ca

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.briercrestchristianacademy.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.briercrestacademy.ca
*.briercrestacademy.com
*.briercrestacademy.net
*.briercrestchristianacademy.ca
*.briercrestchristianacademy.com
*.caronporthighschool.ca
briercrestacademy.brierweb.net
briercrestacademy.ca
briercrestacademy.com
briercrestacademy.net
briercrestchristianacademy.ca
briercrestchristianacademy.com
caronporthighschool.ca
www.briercrestacademy.brierweb.net

Other certificates including the domain name briercrestchristianacademy.ca

(limited to 100 certificates)
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
*.briercrestacademy.com
briercrestacademy.net
caronporthighschool.ca
briercrestacademy.ca
caronporthighschool.ca
caronporthighschool.ca
caronporthighschool.ca
*.briercrestchristianacademy.ca

Certificate

The complete raw certificate details for *.briercrestchristianacademy.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B2ETxFRoZ3DUAI1hNAi
I95SeQtYkSve1Qno+rSCD5Q4HlmwS7ZB2OtnibMaSp4MJQKxz9yT0s/WNDpn/Mqu
Sq1Ja+gjTTLYX4ZFO9W5KiGkG/iJokAGrAs3Tl4HZWWyrqgIXy9/9BprE1WTCXaI
idLPOEgQCWCoM2tQVr6Otce8o5PgaMKum5QmKHYbndl8UByJnoIngOYKGEl35khy
A4O2p5WhDmPnExZo7PgZrg9738TtFYrAhRHLtjcuA8v9KUYtvKs8eFnJGlKqWERq
XSqQNCk83ke0b+J2zLJXCTrK3qNUUnjn96ZrV3v79g/5JrrKAZfIXzlbKVN6r/O0
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291895481195949007036492304709940084764995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:06:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 00:06:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.briercrestchristianacademy.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26272122725024480391577562929374295017430765898635401106191395316127387429692707613374749077528732082314544529023514967734037431255123207466817567977590715898305742383458614532989396184910941068144763740143478936349680363639892919444617526564593728533955830119947649195968426852780868708470291371851586972558380023235968098930662808987549222356483574663781179114954873608431354477290005200473119468872351701865467226440716103200926513735373825596859484666239281797568107056631840847667136448120579438697301212905877455304217493140111403206508896825462121819281554409222659751847351286252752397624209431831960031048771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62d17903e0c54f8d1f5adf85748086c8ab3eb00e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (394 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briercrestacademy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briercrestacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briercrestacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briercrestchristianacademy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briercrestchristianacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caronporthighschool.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briercrestacademy.brierweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briercrestacademy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briercrestacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briercrestacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briercrestchristianacademy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briercrestchristianacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caronporthighschool.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briercrestacademy.brierweb.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018791e68cfd00000403004630440220345eeda9474c7621049aac18a30ecf5093e8f443264fa030f773a11b8c666670022068e0b9be9175ee662f2d954602d48aad77cbcb1a83effd5937d7f4d526bab9be007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018791e68d1d000004030047304502201102b893f18343597c970348ae1d2ae1589a95ef119c365e30bd4bfb96b15de50221008f79b64d28663f50bbe96e48f256da645ee824995fbbad30efd6335d1c4db94a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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