psc-gpc.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:84:9f:61:25:38:13:5d:17:3f:03:f6:79:7a:9d:a8:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=psc-gpc.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:84:9f:61:25:38:13:5d:17:3f:03:f6:79:7a:9d:a8:73
Serial Number (int): 273082743911579291767431952421222117910643
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:68:b2:27:59:77:2b:20:cd:62:cd:b8:65:4c:69:ec:a0:17:44:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:3d:f9:79:ee:02:7c:a0:9a:5d:ff:7e:e2:56:1f:8e:fa:11:18:24
Fingerprint (sha256): 19:45:d8:c4:d0:6f:12:a2:9a:33:45:1c:0d:87:fc:2d:cc:18:fd:fd:ad:78:a5:32:8d:de:a6:0a:ac:a6:4e:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate psc-gpc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psc-gpc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psc-gpc.ca

Other certificates including the domain name psc-gpc.ca

(limited to 100 certificates)
*.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
*.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
www.psc-gpc.ca
www.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
cpcalendars.psc-gpc.ca
psc-gpc.ca
webmail.psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
*.psc-gpc.ca
*.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
alternc.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca

Certificate

The complete raw certificate details for psc-gpc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyYXPw0lN3EWwJTKEU3XZ
Uqdo6pZdVnWRPcrp9g2f1eqGbsIzgVsFjdP63dCYPJgpi26tIB8R28nBZfC+S16F
NGJYdi7lvvvITGTNfGXP33kKTK9IfzIJwRd0mdySZhgu/Otjgd0R/DJaeEwxHGTn
7KgM8NHe7tqo0uTAypVYsztpdUfkqehyyLPb4Wk8wzhrqImi7fa0V0vK+D8NidkZ
FcaBJrqt3n++Cm0NkltBq9EDn5dqrhk6pd6L25MX03AL6dqGfs/+hwLhGCxtnvTx
JBnBRGTBvPlVew+IOTZ75tJ60HcQnO4lx544Bji/zbrqiIHOcWZBNl1vnJ/yIyuR
qgC6GXZEOiSsbeifn8Mdl3nnT6bwk6OWgHLfMZoQA4rftGoOxSYl71cXG5hV97pY
bPP/3cbAkH0krYZcQHSJU4wzNvpkMeyiD3DxOuLgDvMo0Yw7ehYUq0W3MRzs/t2J
9hMDlF4oWGo92XErCWQIAIZUjYgvpuWZ+w9w9+78xrDTbBqw0RHLA9sTaYpcyh9U
qzprVdV8DxvP5FRzE75p1Q2U3GTGy2hmR0C1q8yyUHRDS9pESB1tufA5wvmQPW57
+ZXmKZgDfsNVlPGaE5fBrdtoAe2CF3FtQ3EXRi1bGTFoWqzTPH9NY3aVgcBHDKqV
t4dh/wpZYz9aJuXktaqpjGMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273082743911579291767431952421222117910643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 04:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 04:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psc-gpc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822140893579861435343954224389777533418880757092093448211464950645273446216890432851736365237494898995945261824269054700947377767121861469494012880962697287932871389291368635536426648393179269857813031230971375083558759369378307379629692350489555838864475940463204718649341021323539629667091843880474821085056719460240743565611730788829149877012600766230488475091268298704545670543481395961070419187210043136857626658332526059974153062506249482753865742375246245884775207661467118817444133786280193450405042435665336466227005043084003724227545009734608784331431534658124252145978567050750431338493766292607877657639446933509218795525957170406494260331786348414082744013177498912258162752310193345412949530196039121731109817434549281487460397349204286164744950772221974803803903980910934534084799217989868180109421481306269144491466164241441207467055327022913311735182713010915781872335764426187343892876142224023030800451449038035318321503673150292822165561581079294308615704548966222966899960308435547549230483201062352652388560943541387991987975875416409075752684632632920293303104965502245487710886333712885130864358621281371479805336552622312125371280021872893569259302640438275108135624273103733992624659188831003136652676271203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b68b22759772b20cd62cdb8654c69eca01744ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psc-gpc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167727043a9000004030047304502206de63b13d0fe0355b7930d2b52551800e3650ca5263ede2ffd0e30c501a27601022100e5038fc07b5ea83f2d1f7830f4b607a9053485f40a66aae10ccc571a89a92fe8007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167727045d3000004030046304402202551633035ee27c6bda643deab9995c3542e707513ce4593c7c8ad16eb06d8370220345d0d7093560174e1730f815ebb92ef507206c3b37ba57e74ce11b7fe41b9e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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