ams.genieall.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:a8:51:40:93:5d:33:1f:a0:23:48:a1:88:41:a4:ca:1f:a1 was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ams.genieall.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:51:40:93:5d:33:1f:a0:23:48:a1:88:41:a4:ca:1f:a1
Serial Number (int): 318612298201554179035445006164018298757025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:b4:d8:7c:45:99:68:df:e1:1e:85:8b:7f:4a:b1:ac:28:2a:0b:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:1c:ab:50:af:19:7b:0d:af:96:31:82:37:fd:06:af:6a:56:80:f8
Fingerprint (sha256): f3:99:18:d6:94:22:e3:64:5a:e7:d5:27:69:e4:c9:7e:4f:43:07:c2:c3:79:d6:36:da:5f:fa:59:80:c8:00:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ams.genieall.ca

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ams.genieall.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

24x7.informo.com.br
24x7.sierra.sg
ams.genieall.ca
cloudteam.prolaborate.com
esupport-apm.provintell.com
istechwatch.datamarket.com.tr
liveops.quokka.one
monitor.netlabindia.org
monitor.secload.com.br
monitor.solonetwork.com.br
monitoreo.ademanda.com
monitoreo.nubacom.mx
monitoring.fuego.qa
monitoring.sidusgroup.com
monitoring.xencia.com
noc.plannet.com
topico-status.dinhost.com.br
uptime.koneksahealth.com
uptime.stackharbor.com

Other certificates including the domain name genieall.ca

(limited to 100 certificates)
24x7.ifxnetworks.com
24x7.ifxnetworks.com
monitor.secload.com.br
monitor.secload.com.br
monitoring.resolu.com.au
monitor.business.teksavvy.com
24x7.ifxnetworks.com
monitor.secload.com.br
ams.genieall.ca
24x7.ifxnetworks.com
24x7.ifxnetworks.com
infra.stealthmonitoring.com
monitoring.resolu.com.au
ams.genieall.ca
infra.stealthmonitoring.com
24x7.ifxnetworks.com
monitor.secload.com.br
infra.stealthmonitoring.com
monitor.secload.com.br
24x7.ifxnetworks.com
24x7.ifxnetworks.com
monitor.business.teksavvy.com
ams.genieall.ca
monitoring.resolu.com.au
monitor.business.teksavvy.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
monitor.secload.com.br
jk.assuredos.com
infra.stealthmonitoring.com
jk.assuredos.com
24x7.ifxnetworks.com
noc.gerdaumetaldom.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
noc.gerdaumetaldom.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
jk.assuredos.com
noc.gerdaumetaldom.com
monitor.secload.com.br
24x7.ifxnetworks.com
monitor.secload.com.br
24x7.ifxnetworks.com
24x7.ifxnetworks.com
genieall.ca
24x7.ifxnetworks.com
jk.assuredos.com
noc.gerdaumetaldom.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
genieall.ca
24x7.ifxnetworks.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
24x7.ifxnetworks.com
ams.genieall.ca
monitor.business.teksavvy.com
monitoring.resolu.com.au
24x7.ifxnetworks.com

Certificate

The complete raw certificate details for ams.genieall.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg0b19BtP7ml322MTIuy
t+59hYAPv49m0r2RWJP80IpuQkCxakStjKrNCKProjBCR/rHctSbmq05IWugDi3W
VN8tJ01HNLg1007K02CLIM8UcVCoT0iWDMfrYJRFOy2kNtmoA4U7KGJrzSSvRr1c
lzLVafeXWIMjdyDXr+6EpgZdmDbf7FzdRBMHWCtQ89sRGxMfobQeqBkBhNIeU04e
zQMQU8y/oq5G6bzbes41DSxeH9hUfI/ExNdZtjEcANhgFswCe0SpR5oUCEQJwoNi
PXVT+bj5MJoe1EIGoJtXlDLhnkWg36gIU077GRmXwXT+DVXFSsKGm31B2pmkQ2eh
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318612298201554179035445006164018298757025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 11:56:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-10 11:56:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ams.genieall.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22476882455331318022231403047405655894441573367596239639232051712928346436193026362879181989256142320826021242823459399343379282425712681654259428215217867990458261626349282878337847863873022333238087679948451079826288664724838785378849404007624690135804446047011629384476504192874175182080915416367479435515320695318717005787846863042373137207546029058611896208014407307260106124999500956611331069708612909579633436013381037637611496779087821900546737904077911948354119544102298279245424378999265967938710994864427227107626437642387041802338681455833379566323442287100858815019849203871786646093672758383784369824219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26b4d87c459968dfe11e858b7f4ab1ac282a0b20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (456 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24x7.informo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24x7.sierra.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.genieall.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudteam.prolaborate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esupport-apm.provintell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istechwatch.datamarket.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveops.quokka.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.netlabindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.secload.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.solonetwork.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitoreo.ademanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitoreo.nubacom.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitoring.fuego.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitoring.sidusgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitoring.xencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noc.plannet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topico-status.dinhost.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptime.koneksahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptime.stackharbor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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