gointegrations.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:4b:4f:7f:5f:2e:dd:85:11:06:64:9c:2a:76:4f:33:d2 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gointegrations.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:4b:4f:7f:5f:2e:dd:85:11:06:64:9c:2a:76:4f:33:d2
Serial Number (int): 265860633439795832120809977997522507871186
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:4a:39:0b:3f:74:e0:e2:8d:fc:f2:5c:b6:96:9c:01:cb:cc:42:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:59:82:41:30:15:68:d7:b6:af:b3:2b:a7:39:e6:d6:44:15:d4:61
Fingerprint (sha256): 60:83:87:d9:c8:fd:3a:ea:f9:52:a9:4b:45:7c:48:72:eb:5b:15:28:fa:37:82:6a:a0:b3:93:2b:2d:0a:32:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gointegrations.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gointegrations.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gointegration.ca
gointegrations.com
www.gointegration.ca
www.gointegrations.ca
www.gointegrations.com

Other certificates including the domain name gointegrations.com

(limited to 100 certificates)
help.i9labsinc.com
staffing.abhith.in
gointegrations.com
techtalk.nulou.net
jobs.thegiant.group
hr.azlabs.sg
jobs.thegiant.group
jobs.alsayeghmedia.com
recruit.aiaustralia.tech
jobs.absoluterecruits.com
enhanced-checkout.gointegrations.com
jobs.avenata.com
shopify.gointegrations.com
training.clearlyip.com
support.atpenable.co.uk
hr.azlabs.sg
jobs.turbox.me
gointegrations.com
training.graffigna.agency
helpdesk.miotel.co.za
gointegrations.com
webinar.greenlyzard.com
www.gointegrations.com
www.dinorg.info
recruit.oprisync.com
jobs.arturo.ai
portal.pfirst.ca
training.textix.co
softwarerequest.rauschcoleman.com
www.gointegrations.com
jobs.zcrm.eu
webinar.zipi.app
careers.guardrails.io
careers.gointegrations.com
shopify.gointegrations.com
support.taureanpac.com
www.gointegrations.com
training.daydreamsecurity.com
support.kimblelabs.com
www.gointegrations.com
support.prolim.com
careers.pivotaltheory.com
jobs.turbox.me
connect.rapguru.in
jobs.gm2dev.com
support.optimalstation.com
support.taureanpac.com
help.inpath.com

Certificate

The complete raw certificate details for gointegrations.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgISAw1LT39fLt2FEQZknCp2TzPSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDkwNDE4MzBaFw0y
MDAxMDcwNDE4MzBaMB0xGzAZBgNVBAMTEmdvaW50ZWdyYXRpb25zLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZ6aa8U5YrMN+UK27ORu1MNdsSR
5FGls/eqhmjcZf87eOS5+lU0KkSKkmPuOhP4PJ/Fgn6y2RL/MaleaUHSwVHZE0mt
jELxe8j5qAJizl2Z1lNWHWoNFlQ+sAf+MXenJOhBdAytSlUl20E0Lt6osvWa8sZc
lwIJeabZY3gZSs07PPnViFDPkvAn7YPTHiq1/py5S0l5OCSeKGUR1fgCNzPBYEqU
vqoDocygz3ztUY+ITwGW4+/RuMSuf6owHiUQOfhqYt9eKq64z/IDiEFlNm5fNK01
KWZJFV2kciSJ95gcEsjcRJwn9EwiaGmZAROjxbvsOhkNFz5/6AZCIz5FXE0CAwEA
AaOCAr4wggK6MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU9ko5Cz904OKN/PJctpac
AcvMQscwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzB0BgNVHREEbTBrghBnb2ludGVncmF0aW9uLmNhghJnb2ludGVncmF0
aW9ucy5jb22CFHd3dy5nb2ludGVncmF0aW9uLmNhghV3d3cuZ29pbnRlZ3JhdGlv
bnMuY2GCFnd3dy5nb2ludGVncmF0aW9ucy5jb20wTAYDVR0gBEUwQzAIBgZngQwB
AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz
ZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwBep3P531bA57U2
SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW2u9FI9AAAEAwBIMEYCIQD4p6QLUryJ
hcEQrG27S/4jhvGTkl7mI5c4VlY98mRF0QIhAJWa1GF0/FeeuvWbBETW68YydGP8
LnFOdGx5qPvxyZNFAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A
AAFtrvRSLQAABAMARjBEAiAHE5nPX5Rs0MtUHiFuahqlexEvr/EbjFgpIYARNKXg
TwIgHnJ7MDuHJYvN4/Hf9//zUhr/QRlHpmCLqWeO+RKa7+EwDQYJKoZIhvcNAQEL
BQADggEBAEpOr43fQuXI3PFtLr+vDHDW5UqtdsfPcd2Exzi7Iqt72TP9dIP+5F4S
j+e6aECoAWrv4jIhdeao2AP+qTrDbb49ltyQhtyhjLv1e1aqzDZKaJ3J97yQG0Rw
t2xX4RfBPe58bmkWIgNg7vjHLXKsN0JCxhZVZQLhAl/WFQ6W/Kzkv2S/iVzhmXkF
Hzct7t190/QXkgriGE96xu4cLnbexTfo2ssY54EVCZTd9V/zVKBwg2dcjQYhEv/C
2uAnmX4ikXv0B5jtFJH7GeFqS9jPP5aczlVrWCWA2ft08yctWcVuONxkUd12unIL
iQSkr/po3+419N1AjNfI6WREZHPPIaU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnpprxTlisw35Qrbs5G7
Uw12xJHkUaWz96qGaNxl/zt45Ln6VTQqRIqSY+46E/g8n8WCfrLZEv8xqV5pQdLB
UdkTSa2MQvF7yPmoAmLOXZnWU1Ydag0WVD6wB/4xd6ck6EF0DK1KVSXbQTQu3qiy
9ZryxlyXAgl5ptljeBlKzTs8+dWIUM+S8Cftg9MeKrX+nLlLSXk4JJ4oZRHV+AI3
M8FgSpS+qgOhzKDPfO1Rj4hPAZbj79G4xK5/qjAeJRA5+Gpi314qrrjP8gOIQWU2
bl80rTUpZkkVXaRyJIn3mBwSyNxEnCf0TCJoaZkBE6PFu+w6GQ0XPn/oBkIjPkVc
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265860633439795832120809977997522507871186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 04:18:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 04:18:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gointegrations.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21015922639543491649611056396915189924312835380543815169900619173663673354378245289948560326387829549182565651478461261684883157488195989507913034810977558162812785649424667832336911657443617291938616162016648482007459672281650964183752046212164142247082469684152416376983122107508743130237143556645167393004072559935290640558819260822960807055836962610120468729479392115476585245338202470991732505332587306765373697724487473791169749845677522369171273812518584767675905527260767656017627440295965507715617406273990562334663954369513691302174628320105901751903452704370052960484706599500490280737460529368829876591693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f64a390b3f74e0e28dfcf25cb6969c01cbcc42c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gointegration.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gointegrations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gointegration.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gointegrations.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gointegrations.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016daef4523d0000040300483046022100f8a7a40b52bc8985c110ac6dbb4bfe2386f193925ee623973856563df26445d1022100959ad46174fc579ebaf59b0444d6ebc6327463fc2e714e746c79a8fbf1c99345007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daef4522d00000403004630440220071399cf5f946cd0cb541e216e6a1aa57b112faff11b8c582921801134a5e04f02201e727b303b87258bcde3f1dff7fff3521aff411947a6608ba9678ef9129aefe1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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