gotet.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:b1:39:c9:32:96:e4:18:3f:91:43:5a:a7:30:28:60:aa was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gotet.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:b1:39:c9:32:96:e4:18:3f:91:43:5a:a7:30:28:60:aa
Serial Number (int): 270419772732172443545366692152767842640042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:be:72:02:f0:3e:a5:9b:13:b3:0e:df:ba:c6:24:dc:2d:4a:7d:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:db:62:78:8e:29:8d:9d:1e:b7:38:68:7f:f6:75:67:0f:e4:bf:66
Fingerprint (sha256): 66:9a:6c:ce:16:77:57:6a:f0:b9:19:90:ee:4e:e6:70:21:70:29:97:7c:35:73:79:4d:92:2d:e7:50:62:fe:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gotet.ca

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gotet.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gotet-ca.urated.com
gotet.ca
mail.gotet.ca
mail.wehelpyourback.com
wehelpyourback.com
wehelpyourback.urated.com
www.gotet-ca.urated.com
www.gotet.ca
www.wehelpyourback.com
www.wehelpyourback.urated.com

Other certificates including the domain name gotet.ca

(limited to 100 certificates)
gotet-ca.urated.com
gotet.ca
gotet.ca
sni.cloudflaressl.com
mail.gotet.ca
gotet.ca
sni.cloudflaressl.com
gotet.ca
gotet.ca
sni.cloudflaressl.com
gotet.ca
sni.cloudflaressl.com
gotet.ca

Certificate

The complete raw certificate details for gotet.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6EAHeTZs95kwXZWPFgy
dSegEssVNiMHZndrvSf2H4vRX9bJIj34LCQ3p4EmXlEyMXjAJ0m7UUXgya+IDvTB
eWU6So9i+U3xavkAN1Tb4kWcpXKv1hhtTqP3fR2YD1noU1qqH4OiRxL99Ls7oj8f
TTo1qOzu9Se+XYII/VG0sQijOGXhp4HEdGV0vc3QiRNPmXwR25CGiLI8+c7brYtB
ZMzhtB8UKNKWtrc5oM+xLOcqZBWITAXxXlP4WX9zH1MzxLSEQ1nZKqOlP8piArvY
iwJGSwnLAgR8+QQMy2XjEvnqrHpyEjm9cavMrfvCg554yINw77cH6g4ncny2q0qY
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270419772732172443545366692152767842640042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 07:52:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 07:52:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gotet.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24190908532433451917938372547597198981864170339869755283184349792562247350698477031159319591244704267113344103353390464434438022702700619342525242250153230370407407930808412907067361200780029778586771717712657230316700605409982036546909869299754932614683369096329808596013558502950245518111839436245299202091697995724772206251063516200507777392307592080800974513250312386919909474214282862901473892290839405096556943465808441188738677433458185535188695787274497763978893872461529914075278513329506890413124335525820779581430082493323021413622586215582583664266934815224397807005425732414492880411202412854407173150951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9abe7202f03ea59b13b30edfbac624dc2d4a7d43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotet-ca.urated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gotet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wehelpyourback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wehelpyourback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wehelpyourback.urated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotet-ca.urated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wehelpyourback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wehelpyourback.urated.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001684669ca110000040300473045022100a6399be58827b520dd5ace7f53a312d7f6a231485a7d44799f89dac476a648b0022028b45c42b2806bf0a10193f210ede1d0ef1b108174c727355252782914376fee00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001684669cc550000040300483046022100ec4ee1795f4952277a08ad4af3a944e5136d015b5d36349c47aa774413c4823f022100b3c7f72c738a00cdb3ef1d2b7ee2b6b1e16d7f109387de1ea103cf4bc2c995cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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