gtcore.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9a:aa:b3:84:d3:92:70:88:c8:8e:28:4e:34:79:86:88:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gtcore.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:aa:b3:84:d3:92:70:88:c8:8e:28:4e:34:79:86:88:45
Serial Number (int): 401079529107327154221991860133843268175941
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:3e:a9:39:72:06:de:35:b8:c7:e2:61:d7:1c:bb:06:aa:d1:21:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:9f:e8:60:25:5c:0f:43:af:34:c7:2b:43:e1:e8:5b:b6:fd:4d:0d
Fingerprint (sha256): 2d:ee:69:67:c9:0f:b7:a5:48:29:cd:64:0c:6b:ed:68:c4:d5:88:6a:da:5f:05:45:be:aa:e2:6e:72:65:a0:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gtcore.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtcore.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtcore.ca
www.gtcore.ca

Other certificates including the domain name gtcore.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for gtcore.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401079529107327154221991860133843268175941
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 11:51:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-17 11:51:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtcore.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1036958738550896673013573241139971071968754546124199181558265261370530804644722246200775860889796843490934417897553657740923579030333693484317101797178879206814047214178717382229101379104443123571742493816330951627761868118935424375593318185953785358128711678339363122577345831380825269087112382246014370834323674352482195322613409626585245398504643904130304805226969974621139861837371177816260983252807640838297036814812837915894509666782838026400506092353448200052550147982835811109715128559098293807366452971029257910953067443059863394884053294700649855554742763301614951615272162136030737710523108112403016416830442146895856495083160679123705958147482956402450025764277939017636523913013326546337965485488471533220803934299999701609252462692775443215731282050407565835955750184512704565735371077134790941411260371452033687525832645286683990913381258388601536631114315562365137670838023239207973585993215275636357415330494876490992260463621562879282000384378395268483359583097836818395761863799433587901669438318423780494517031812664729899571468799197297513116128357414908179853669530327967117786155186415348327490176831870184296759509657317051851816426787183661569818836690365809788009417995648566648944757883707602416843311044201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							383ea9397206de35b8c7e261d71cbb06aad121a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtcore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtcore.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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