gtcore.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d7:06:a6:c5:70:af:bf:34:fd:57:79:5c:a2:67:48:4e:29 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gtcore.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:06:a6:c5:70:af:bf:34:fd:57:79:5c:a2:67:48:4e:29
Serial Number (int): 421618693908858619660508245152873914584617
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:fe:57:3c:a8:03:a0:e6:d9:6d:75:22:99:ba:ad:2a:c1:37:ae:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:02:80:1d:b5:6f:f0:41:1e:67:66:66:40:97:39:97:d1:f0:6a:db
Fingerprint (sha256): 3d:d1:33:f0:49:c9:a9:85:5c:c1:9a:18:50:4b:d3:73:bc:37:cb:af:57:aa:09:e4:84:dc:c8:45:31:0b:e2:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gtcore.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtcore.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtcore.ca
www.gtcore.ca

Other certificates including the domain name gtcore.ca

(limited to 100 certificates)
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca
gtcore.ca

Certificate

The complete raw certificate details for gtcore.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421618693908858619660508245152873914584617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 09:51:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 09:51:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtcore.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657106858029757137070967581898932192247616233510954501166066346444305899481796654694196672545536032395182370961990176101235836192060503534909584995770188867514689995588744268344205887356686516528157771821955931419704277569325779296515979195770756837583399150249137445286504039487273428759372333162898232061875566894694163555381462378218277489506815885011948445444330849409541389969516275159228767329643409957543606073970704619652294424972786067510431014972765170625408808399574051568409267614593006348771038675385314470224178688107753527246052394666087395693680292575368246334744357052347802625443438200439479478941767393661509913522078251839570040474719975981050826785359152134557428549991137741335339914576524917580812351402305415072386528252794981165585236327653065710385864825754451093967389060075564311223560260324567248108039469784527836264834748664370310733384312022036228411886314044221559754168718656865110788473728589510573227732761628905718032313484700443146111705764311990141307070256231816579555674578689270306477234013964799130220863334138863686234088686774474737260963839715607259823899992370393729677383588785014938533014396893583410270733176395018437829605044073021714098476646670017799584991325025346513222014488919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84fe573ca803a0e6d96d752299baad2ac137ae66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtcore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtcore.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001653d3635ae0000040300473045022062d4a15ae0ccfdb3547b62d26b329c5d465f01d02644f621c589b97773d3c75a022100f9ab14c1ee453146f481d399632cccb485c0053c8af87bc9f436c5b5f166e349007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001653d36378b0000040300483046022100fc294c910cbbfe04711f8ef4a806350e1bcc9c4d7b1dd59bbe517ab47ce54693022100a242738e7e54361c1aca3abe6b94629310e9930c4c4b8f69b8e4aa7df58c5696
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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