www.psc-gpc.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:58:bb:9c:3e:9c:34:12:89:6e:18:54:10:af:4b:ec:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.psc-gpc.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:58:bb:9c:3e:9c:34:12:89:6e:18:54:10:af:4b:ec:81
Serial Number (int): 330872406839310191954739647318732084866177
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:2a:6d:68:ba:84:04:e7:72:1b:b2:50:4a:8d:c1:27:b1:18:c7:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cc:18:8c:bb:e7:0c:e4:78:3e:80:ff:62:53:60:f8:f1:7c:27:18:8a
Fingerprint (sha256): 72:b7:cb:31:e7:cf:da:c8:13:12:5f:1a:4b:cd:95:f5:d1:7f:bd:75:ac:43:05:3f:4b:71:63:c9:15:78:41:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.psc-gpc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.psc-gpc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.psc-gpc.ca

Other certificates including the domain name psc-gpc.ca

(limited to 100 certificates)
*.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
*.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
www.psc-gpc.ca
www.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
cpcalendars.psc-gpc.ca
psc-gpc.ca
webmail.psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
*.psc-gpc.ca
*.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
alternc.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca

Certificate

The complete raw certificate details for www.psc-gpc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330872406839310191954739647318732084866177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 23:08:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 23:08:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.psc-gpc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809856436848189461826926174260574850332870323072327050021315356438353966969998421221879534757780796524696412594265837449470626319507372206260941927338474626868869933106732031454711844231842231650336941973439103354829981685032928973204165314229046392183241022457290173097567237723234381775731171402704004611537349692259395421713986453042551557132644105759250720217514920242387343097381864239799310785368637676505182243063132163877148059143374449904765962496170928699743252245456301830807772395733901015580987072394826028505703106401532532168596767047354535817201666160520032550439318568370578224325747433358423842055260566716671618455187264309635022883989190253242114085704729555170351902347142091901817798054584588006827094426893262395419885681919700014185192059385466199550840338359810841214994695156826786331356309105938217881702287460860447290050732560335866645095743222039787352959299369671644465198495450094791859088377357763106057104988277848814738152752680325417673032817758474503905167569615712340608599122685119280964928904569957574672848668943456682610819387851252625676943380854707502881718108927977198258609716815380283394123984267182372925351978967939281086876459181534164656009468810048156739399982496857918649625703821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e2a6d68ba8404e7721bb2504a8dc127b118c772
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psc-gpc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab3ab6bdc000004030046304402202fbc1ba7f594d289524020279213d43551eaf5ef3f4bd66579da9f6cdc4bb137022026e4202b3d340d096c7d77f60cf7884a808e73ed1753f0febfbb0669f0c86a3b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ab3ab6be000000403004730450221008fee4b0cdf062b38bde62ae6a4fa6d7f58bf3216d04982e08d6a870d46fae406022068d92e42ff389a2ccab5997256e4925933adaa31325ec7d12113414343ef94f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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