DV SSL/TLS Certificate for jazz-resto.ca

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the jazz-resto.ca DV SSL/TLS Certificate

This certificate with serial number 06:d5:0d:37:1e:51:08:2a:3f:a0:e7:0c:89:98:46:f2:fc:5d for jazz-resto.ca was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for jazz-resto.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:d5:0d:37:1e:51:08:2a:3f:a0:e7:0c:89:98:46:f2:fc:5d
Serial Number (int): 595171425899886092147955242011504864853085
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 1a:fd:a5:c4:64:df:bb:cc:bf:c2:66:37:f8:0c:ce:8a:97:a9:f2:c6
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e4:33:ea:31:90:8d:57:83:c7:eb:fe:f8:59:e4:d5:67:3b:c7:8f:ef
Fingerprint (SHA-256): 6d:e8:cb:9a:05:3e:df:7e:a7:83:94:e0:e7:e1:b3:f7:e2:5b:9a:59:46:04:5d:8b:ed:0f:39:7d:e9:9b:43:fd

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/94.crl

Check the revocation status for certificate jazz-resto.ca
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for jazz-resto.ca

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

jazz-resto.ca

X.509 Certificate

The complete raw X.509 certificate details for jazz-resto.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgISBtUNNx5RCCo/oOcMiZhG8vxdMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTMwMTYxNDQ1WhcNMjUwODI4MTYxNDQ0WjAYMRYwFAYDVQQD
Ew1qYXp6LXJlc3RvLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
hAAl4YZFZki8b+swKL3hbWDfUzIa5lVSZlk3z74z6dPO4iGKDN5DQuz1r09OhPfY
EKDf7ylHBM5UacX5vJl34Ac0sq/uhWJH/xK3U+QprG1iYbh/qOzoMtGEC9AP5DBx
FjFLsb2zd4+iurmmn0smsVBh9j0aLUjD7bTnpRmUrX5q6M6E9RrgBWxAf41rO7AX
Nuq26j7P+J1T0TM7zScSIP4I4yQBPWmEBk0RmQ6tkyrS9vugHEEu4fzIeAu6Cd2P
G4bryahCM+EHuwYbA4SKXgcdObumVTJXXvDAS3do3wNI33fjQ07lpVkCFx7IVMnJ
7Tp4Uu79496VLUciPA8xGQIDAQABo4ICHTCCAhkwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQa/aXEZN+7zL/CZjf4DM6Kl6nyxjAfBgNVHSMEGDAWgBS7vMNHpeS8qcbD
pHIMEI2iNeHI6DAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9y
MTAuaS5sZW5jci5vcmcvMBgGA1UdEQQRMA+CDWphenotcmVzdG8uY2EwEwYDVR0g
BAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMC5jLmxl
bmNyLm9yZy85NC5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDtPEvW6AbC
pKIAV9vLJOI4Ad9RL+3EhsVwDyDdtz4/4AAAAZciLwP9AAAEAwBHMEUCIQDv3OHF
1IWUL1yro09RnccUy+X/iAhTanewLoOePVw8WAIgNtH1Qou26hgMof7GhNDyh+Vf
IGCXCQwYZuJeV0nHAvsAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwN
sAAAAZciLwvUAAAEAwBHMEUCIQCOAXO8Yrnafzgb7bvlJZaZDg2ZmB+itWT2Q05/
DdWDLgIgLbKFUbEG7TLFgxzGoZpLYZ+8fPhj+OLu6S8Ilnh54AUwDQYJKoZIhvcN
AQELBQADggEBAMQKZJtSClTU/j6nQ7IKxTpSFEBPFQV2nAnYAqd5zozJb9z8ggwV
SRs5iVTzXL7jCsvE0wzmNzHjrftBZqeqojtI31X16KBb/rwM6XGJguW7qYYfmUHw
zxv8tiTsGDPhCzdo9FCjZbi/OicKAwc+t+oXMAseZChA2XSJiOvvlmgM1v7+alB3
rIP1sn548EgFufIqdLg4xv7Yaxwjr46wN9C6nsl2FXuKTrRVPkvUUu5YjfmRaKyh
76w9RJrwsBe1USFODbH8N2EuKa5NJA3lr9iGXRTgPU+MrFRAjVgVpW57jZTNf+SM
0Q3+5TI5Of4EudmFmxSFOedoxJq3hKScrhs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAAl4YZFZki8b+swKL3h
bWDfUzIa5lVSZlk3z74z6dPO4iGKDN5DQuz1r09OhPfYEKDf7ylHBM5UacX5vJl3
4Ac0sq/uhWJH/xK3U+QprG1iYbh/qOzoMtGEC9AP5DBxFjFLsb2zd4+iurmmn0sm
sVBh9j0aLUjD7bTnpRmUrX5q6M6E9RrgBWxAf41rO7AXNuq26j7P+J1T0TM7zScS
IP4I4yQBPWmEBk0RmQ6tkyrS9vugHEEu4fzIeAu6Cd2PG4bryahCM+EHuwYbA4SK
XgcdObumVTJXXvDAS3do3wNI33fjQ07lpVkCFx7IVMnJ7Tp4Uu79496VLUciPA8x
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 595171425899886092147955242011504864853085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-30 16:14:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-28 16:14:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jazz-resto.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16663529223469533806646750007360949427999016189495928562607954833671333171974093251048209402834659939593936592660482461406192981680806519528795849250594398641501392465632831089068207872943574147258755129493244714360105656921247221689858270040906953859157957837785709257189443010125743462073161096103983011319537561431830966084552640973488031995058969387729876496923071423645650895273481963544885841104270121463200115027431699434832103503642094917528094307761738584878864203022474435526063761879109982363190916424973344454228782521616938990908710539976007595017578939096542104842667065526230310250068103416951857951001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1afda5c464dfbbccbfc26637f80cce8a97a9f2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazz-resto.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/94.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197222f03fd0000040300473045022100efdce1c5d485942f5caba34f519dc714cbe5ff8808536a77b02e839e3d5c3c58022036d1f5428bb6ea180ca1fec684d0f287e55f206097090c1866e25e5749c702fb007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197222f0bd400000403004730450221008e0173bc62b9da7f381bedbbe52596990e0d99981fa2b564f6434e7f0dd5832e02202db28551b106ed32c5831cc6a19a4b619fbc7cf863f8e2eee92f08967879e005
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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