www.cypc-ccjc.phac-aspc.gc.ca

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0f:16:b3 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=T5R5z7D/LOc3TQEfBEnwlU3umh77KM3O,CN=www.cypc-ccjc.phac-aspc.gc.ca,OU=GT07279827+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:16:b3
Serial Number (int): 988851
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: b0:78:20:38:66:7e:06:c4:67:86:50:07:2e:78:46:e8:d0:f3:8b:f3
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): f8:c1:12:8d:7d:b2:8f:8d:e5:a5:e0:6e:79:d8:f9:8b:56:bb:45:a7
Fingerprint (sha256): 53:d0:35:9a:ec:6e:66:e9:ec:5b:50:43:24:db:2d:50:1a:ce:99:b1:f0:cc:36:51:d5:24:11:0f:48:89:f5:bd

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.cypc-ccjc.phac-aspc.gc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cypc-ccjc.phac-aspc.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cypc-ccjc.phac-aspc.gc.ca

Other certificates including the domain name phac-aspc.gc.ca

(limited to 100 certificates)
health-infobase.canada.ca
phac-aspc.gc.ca
www.cypc-ccjc.phac-aspc.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
health-infobase.canada.ca
infobase.phac-aspc.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
cbpp-pcpe.phac-aspc.gc.ca
php-psp.phac-aspc.gc.ca
health-infobase.canada.ca
php-psp.phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
dev.mg-dsol.mapgears.com
phac-aspc.gc.ca
www.contracts-contrats.phac-aspc.gc.ca
aero-oitc.phac-aspc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
form-formulaire.phac-aspc.gc.ca
php-psp.phac-aspc.gc.ca
aids.gc.ca
infobase.phac-aspc.gc.ca
www.contracts-contrats.phac-aspc.gc.ca
dev.mg-dsol.mapgears.com
dev.mg-dsol.mapgears.com
lap-dmz-p01.hc-sc.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
www.gcdisclosure-divulgationsc.phac-aspc.gc.ca
connect.nml-lmn.phac-aspc.gc.ca
cbpp-pcpe.phac-aspc.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
tmate-devdbp1.phac-aspc.gc.ca
skills.phac-aspc.gc.ca
cbpp-pcpe.phac-aspc.gc.ca
was855-ihs-prod.hc-sc.gc.ca
www.thexpenses-fraisva.phac-aspc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
aids.gc.ca
www.reclassification.phac-aspc.gc.ca
chnintranetrcs.phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
spupprxweb1.hc-sc.gc.ca
aids.gc.ca
infobase.phac-aspc.gc.ca
www.cypc-ccjc.phac-aspc.gc.ca
connect.nml-lmn.phac-aspc.gc.ca
cbpp-pcpe.phac-aspc.gc.ca
vids-siv.phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
cpnp-pcnp.phac-aspc.gc.ca
cpnp-pcnp.phac-aspc.gc.ca
thosss-sssosv.phac-aspc.gc.ca
ttiss-ssit.phac-aspc.gc.ca
phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
popsl15.phac-aspc.gc.ca
phac-aspc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
popsl15.phac-aspc.gc.ca
popsl15.phac-aspc.gc.ca
cphs-sspc.phac-aspc.gc.ca
thcd-dcsv.phac-aspc.gc.ca
phac-aspc.gc.ca
aids.gc.ca
cbpp-pcpe.phac-aspc.gc.ca
phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
cphs-sspc.phac-aspc.gc.ca
php-psp.phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
www.thexpenses-fraisva.phac-aspc.gc.ca
training-formation.phac-aspc.gc.ca
dexa-exad.phac-aspc.gc.ca
www.contracts-contrats.phac-aspc.gc.ca
tmate-devdbp1.phac-aspc.gc.ca
health-infobase.canada.ca
chnintranetrcs.phac-aspc.gc.ca
dev.mg-dsol.mapgears.com
traveller-form.phac-aspc.gc.ca
aids.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
aids.gc.ca
ccdr-rmtc.phac-aspc.gc.ca
aids.gc.ca
training-formation.phac-aspc.gc.ca
infobase.phac-aspc.gc.ca
capc-pace.phac-aspc.gc.ca
vids-siv.phac-aspc.gc.ca
cbpp-pcpe.phac-aspc.gc.ca
www.reclassification.phac-aspc.gc.ca
aids.gc.ca
form-formulaire.phac-aspc.gc.ca
dev.mg-dsol.mapgears.com
dev.mg-dsol.mapgears.com
dev.mg-dsol.mapgears.com
dev.mg-dsol.mapgears.com
training-formation.phac-aspc.gc.ca
www.cypc-ccjc.phac-aspc.gc.ca

Certificate

The complete raw certificate details for www.cypc-ccjc.phac-aspc.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7XMnBDLoFZ3jFQVEhIn
VyQvBJ4THittym3pD9HOmnMMKntBaeM45aPgy/bG2jQAk+bQzoKwtoMMETPF5TOD
Ie/AQx80e5Kp7WbXpc+mrtQMFGk8vUtt9NE/O/wxfpRjiVeGUHcbogjMThL5b9SR
ZnJvJeWHqFErnHowYAWkG5fQgvswoe1Iw/glSC+wKuc0m4TZ/XsPv/iXMLwZ82D8
Ff7vR4Ijj1R3bOoPedMLXcceuZKOc2tHtki4LLJo0TUSimtmN5EPO+UPKGbUztGr
+EqA2DiNVc+j74WlukNLKC5Idwg9X2jjoQNCauNLL4GDSy2Uj05XN07TfFNB4EdB
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 988851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-14 06:46:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-17 20:12:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T5R5z7D/LOc3TQEfBEnwlU3umh77KM3O'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT07279827'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cypc-ccjc.phac-aspc.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22686305143489000212057633696074400318998512441036298968785311880980867071376778866217333785141641575516303641005616935476598340992672747306394482513968497251661399871365850133460933597681605711349281026493926664071127325501927926919375955925326874237311413560372079770158299557449418488996387900680419642187991040934373460424683001513960023777782653638066462932587489134372461429552458019622768976426624645933430964792245783647718114286866153247851070677686424015916094760377771838498907778541215444535679578379679532189056933938166241012005748914340359292810430271343963204957575968432178652127860985541160497267149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypc-ccjc.phac-aspc.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0782038667e06c4678650072e7846e8d0f38bf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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