*.rumi.ca

Issued by R3

About this certificate

This digital certificate with serial number 04:76:e5:83:f2:bb:a3:60:89:f9:77:13:2c:40:02:8f:df:ea was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.rumi.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:e5:83:f2:bb:a3:60:89:f9:77:13:2c:40:02:8f:df:ea
Serial Number (int): 388907541348844292311405374652596641325034
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f4:a8:8b:10:0a:c7:ed:b5:fb:dc:92:49:53:e2:1e:ea:f0:bc:0a:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:3f:ab:4c:96:31:7a:f5:c4:28:03:6e:b0:8e:a4:eb:75:6a:56:f2
Fingerprint (sha256): ff:78:15:49:67:34:d2:3b:68:6d:d0:f3:7e:d1:0d:56:f8:48:4c:65:7b:f3:25:4c:b8:3b:b9:83:f9:ff:12:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.rumi.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rumi.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rumi.ca
rumi.ca

Other certificates including the domain name rumi.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.rumi.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8y8aqbo9ncuFeMtFXbm
ld6dgJ3utBx3cYNiIRPh2LMJcCZQ38oovetqjYWdg2AZQNzEwJBfibvofDGVBtlE
JQlNAKD0MP3Rtmt2qYQbnk2JCX2fwsRAwAjr8O93e+DsDC0tynIco4usUKPaIiWj
RHGX4/z/hUGIkdMH/UCw7Ck34nrl8RfR3LmvKx8QYWwElv+5rbusyZDHWMY0zhVP
eq66SvuIuH4diAMRxCGx9y5jUfljgpbzEoztnQUuJiMmE1uCKckDgkiadyXaO3IU
2QTQ4jSDMQIt452htLY2MbKpl0NHbtBejVsVVr4rPFOXS1fty1fB0tp4ygGiRNlz
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388907541348844292311405374652596641325034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 20:50:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 20:50:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rumi.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18657989915580969123384373289615970717131911384097644380315191376254706202983599568705510674471442693376763721043115983381693892820730197141219850225481993798208357108699737585264451770646494395254913491316201409715984394281838225544768812048977406353679287689128060351153722759782446990224066941006289012272762149451362092975707299334976185841556236375000583274872933942696040975842456478693104244693472347985386949238521664323540868786524708217545683590715739648267612738593983126021955558749021854210031935015796297923115980033096274947784342175706098533914673397245937148406017665173090637115672466375575531516839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4a88b100ac7edb5fbdc924953e21eeaf0bc0ad3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumi.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a719ffed00000040300483046022100fdd2ed7f19db2ca9c95b1440948b2ae9d51df6c2f6d82a1b1968dc195fe4baec022100eec1ecff558d58fda496a0dd112f0ffc9c599f8450180f61893c8afaed5ba46b0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a719fff3f0000040300483046022100f22deb74fdf3adf872b01cdc4e0854c282d9c2fadecd637ef9a4351c44f3478f022100c6e21a85969df0b221f5be9e7f61d7ec3aee6ff9cbb09d06059fb596427c9a5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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