gtcore.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:65:0a:39:aa:ec:ad:35:6a:fe:26:24:5f:4e:9a:0e:25:74 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gtcore.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:0a:39:aa:ec:ad:35:6a:fe:26:24:5f:4e:9a:0e:25:74
Serial Number (int): 382831254493695641499377254290345962644852
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:88:68:1d:27:ec:5c:db:24:4d:5c:b6:78:72:e1:7e:1d:13:e7:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:12:91:91:cc:19:62:26:41:2a:2e:e3:73:9e:60:57:b3:6c:92:75
Fingerprint (sha256): 73:d5:05:9d:f4:56:3f:e1:0a:5b:3a:54:15:42:5e:9f:98:37:44:f8:d1:77:f0:46:55:36:91:f1:99:00:64:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate gtcore.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtcore.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtcore.ca
www.gtcore.ca

Other certificates including the domain name gtcore.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for gtcore.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382831254493695641499377254290345962644852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-07 11:51:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-05 11:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtcore.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788194122455738312290253899632278222566807703441024499998905747875374457827558680529301253612121681073396266488003065709223287576330530587422000734509099068861883808101320923608282126557065195709155453041534166460007416984176985671048045622858203042895047117179541329223324883364244360078992271988864635822074736694402004617033075884868402655192041766172915099111339964106415763050269190308949457234191847122098606897453709528856336303736550139276403504278463915430518206551568566897551817924480761120115465432512901511769927978437010121989955606505510058720308447572866705574092168225459656498107711277758262389918119237440585667369700736970860864667389633647323454029884190448140124140823850461773537898615301427010424544764095385978185589054915355512964523908834025529192821786139639973647295935458322928721345953523864189546973647246154293657570620430636159040573006786766880840750916334261889698327029300041858721906628632957183046537739455624752602191066879015935199814946618641606505474223804747934244082747865280835887627346841622746451765445067216817027085654976477828684710683680752954594508778862056860946531329147680294057436578730289408908353177979913611340096578136300304781127189752469053504346362540257107620255225259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c288681d27ec5cdb244d5cb67872e17e1d13e7a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtcore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtcore.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003cccbcd2ec76e1cfd6584fb097933965d1c232a84834de4c4ffb3733b3337e3fffca46124841e9b0fa912be7eb58a65f5fd6af2fe17f5916ffaa47f0fbdc16f7c2597e4b93c5034a2636771dfb30ebb04ee82f397ee68162cfb9899f1a98d9a6e757bcd5e7ea5444a1448caa69702a72dfc1b3e5547f6407e97662e581e38a9aa887d421f99e8f1b9fd1a45916b3bc54a4748e98220b9facaf86889d6f967490829fe4c7f780df64523c311eea6f2a62191e1b27c7d0a55886d1ca6a34ef3dc2874d209b8b91e217a5de9c34b399885d7ae7c195031276007feadd2966bffa1cf9e6a9dfc878e5cd8dabf721c349a1619e94980a2401751b59606e4d12f79c08