apiforfait.gvq.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:49:c4:a9:95:e3:af:bc:dd:fb:5d:c4:66:37:10:27:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apiforfait.gvq.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:49:c4:a9:95:e3:af:bc:dd:fb:5d:c4:66:37:10:27:52
Serial Number (int): 344123527730548043029314205914431023490898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:f0:68:4e:33:cf:3c:9e:86:89:88:5f:25:b5:08:3c:90:e9:06:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:e8:ae:20:61:5a:e4:d8:bc:dd:c1:5a:03:74:eb:aa:2f:86:4b:70
Fingerprint (sha256): 40:58:ad:b8:86:8a:6c:fd:10:03:d7:65:24:8f:fe:0f:8e:cf:4b:db:29:fe:d2:94:0b:60:06:80:ae:00:b2:30

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apiforfait.gvq.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apiforfait.gvq.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apiforfait.gvq.ca

Other certificates including the domain name gvq.ca

(limited to 100 certificates)
hr.web-ai.studio
people.tesseractesports.com
myhrms.keaktephaenkar.com
sni.cloudflaressl.com
team.theblaregroup.com
hr.welhunt.com
myhrms.supermpower.com
people.pixelkare.com
people.generictechltd.com
hr.intellisystech.net
careers.srmtech.com
people.cititech.co.za
hrms.bostonlogix.com
hr.ccla.us
careers.hitchhealthit.com
people.generictechltd.com
hr.nari.ge
people.basic.am
imagine-spectacles.ca.gvq.ca
forms.bnikarisma.com
career.dxbme.com
my.dataeconomy.io
people.fajwah.com
people.generictechltd.com
employee.passportogo.co.il
people.sarisuki.com
career.fabrise.co
myhr.salubrify.in
mitarbeiter.rawe-hermetics.de
team.aat.team
hr.atc-portal.com
people.caliber.solutions
people.israelit.pro
careers.hitchhealthit.com
employee.passportogo.co.il
people.hookdm.com
people.cititech.co.za
careers.hitchhealthit.com
people.basic.am
support.connectivitybusinesssummit.com
people.spreeloop.com
hr.web-ai.studio
receptif.gvq.ca
careers.hitchhealthit.com
jobs.tmcelite.ca
hrms.brevitysoftware.com
careers.spcfz.ae
myhrms.keaktephaenkar.com
people.tripleasolutions.com
fetes.gvq.ca
people.basic.am
people.customscity.com
people.covalentrg.com
gvq.ca
jobs.msitdd.com
careers.spcfz.ae
people.tesseractesports.com
gvq.ca
people.basic.am
zoho.illumedia.net
people.yeastar.sg
people.tripleasolutions.com
people.unorthoboxed.com
rh.q14.plus
events.dynamicedgerealty.com
rh.digiactif.fr
workit.birger.technology
time.argaocenter.com
people.basic.am
careers.spcfz.ae
me.tapinad.com
events.dynamicedgerealty.com
workit.birger.technology
people.covalentrg.com
hrms.resulticks.com
people.dupleit.com
people.generictechltd.com
people.fajwah.com
career.dxbme.com
hrms.examroom.ai
hr.atc-portal.com
booking.posllogistics.com
jobs.layer7.mx
employee.passportogo.co.il
people.fidypay.com
hrms.examroom.ai
me.tapinad.com
people.basic.am
apiforfait.gvq.ca
jobs.dimensionplus.in
hr.nari.ge
emplois.gvq.ca
support.connectivitybusinesssummit.com
people.dupleit.com
receptif.gvq.ca
myhr.salubrify.in
myhr.salubrify.in
careers.hitchhealthit.com
gvq.ca
careers.inbound.studio

Certificate

The complete raw certificate details for apiforfait.gvq.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d9QJ6tH6iFp2TtJ7pk1
aEeVsRlJnBz4wDEsv9HYoVbj27/uy0UDqZQ5EPnlEOdKQhCyS7n1AwCowggkiwpR
8QwlMrws2eOMBj69BYWn6wXMfh5EKbOxo3+rJ9goEt9vuyLan+LH9Ogu+fDsxPiw
ly8dAckYECb9JuTE5byl7NY41hlBSDreZzVTRs079tyly9IQ1q4fZy2MMqaxG0b8
9IJqXbtS/MLfv5Yw3LV+qVDaPP9YDwZMcMfboHeWdAkIBJKdnx3wNcbqJs6s65ln
3Ic5obmJKVmVbuseF5gA80s2J+k6hhwaFoPs9RJ3pcPsNoa/eJ7wwxzmw4+SBTH+
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344123527730548043029314205914431023490898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 02:03:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 02:03:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apiforfait.gvq.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27503831974080112752869913249092242826844131772279583452441107256795276300235962440882862372716809670848942857960849752716288664938687407337758138809623568050764006544116647962367603748828450631893199942421466584622998011113512629189420198245128339240608021307994628165505043268587990863489417493917101086544039218204174241023640946501941031227892971012820403277352010062885613635102668917610990365028381272680869443171163036122585671405045493642845586699446797715328567690138397910622518789250989009926305321724434800869884269436819034996580346199283261459710087000776675351622635036202270114092989870613559596154411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45f0684e33cf3c9e8689885f25b5083c90e9069e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apiforfait.gvq.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca4ab8430000040300483046022100a85376ec4f58ab64381c7feedc238288a0af7cf646e1e30c29e31b7ba3e0f28b022100ecd5244e59863bd19f138836bfadee199aa620829f533306e93d8deae0592f78007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aca4ab83f0000040300473045022100d6f04e5b48fd80e39351e629d0adb67fd8fc2c348a19ed1cc3f19f57e6464b46022009cc2c43a8219a92e3ebbd9916bcd11d23599a6771a67630bbac5d547d6dd963
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00763a4c1847a25ccd17e3362ccb8b76ccdc7e6f02fd4ade070f0c615441fba4bdb7e6a98f721a51683c57981d36ada48a24a3cd88300bdd6ec5c5bc9b8f2b55424524144ed05a69a79afd5c42bb38d8a0f2b15eef01d3b90d0bcc7d07c05345f51b3f96aebf575526159bde3d4db167312091eea14530c3a4aa9e7dc1d008302d1cb188f556f8a6df17a4d40c21b8033543ad4d46f3a0eb0c8d731e920357c2263ac7c932f4110ce3cb0e436b8a5b5a0333e45f6157b9ee84db570b317743a72071903c71992626c5a8f6c134d5462a9e4737558968b4728bb2a4eff9129fb25fcfd8311848f9502825bc57ea54ba0c910789a1e353e3679fe95571e9b6fff2b9