webmail.psc-gpc.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:d1:b8:d2:3f:73:de:11:7a:a7:db:00:60:5b:61:f2:5d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.psc-gpc.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:d1:b8:d2:3f:73:de:11:7a:a7:db:00:60:5b:61:f2:5d
Serial Number (int): 327290122909096131459477222704163210785373
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:dd:ff:99:e9:27:95:d3:73:a3:12:a6:26:92:5e:be:5e:2b:2e:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:4f:0f:f6:ef:05:74:5f:4b:9e:13:4c:55:97:13:a2:d4:88:f3:0e
Fingerprint (sha256): 81:cc:e5:0b:d9:d7:2d:f0:6b:a1:cb:7b:b1:8d:69:27:a7:c4:d5:63:f2:1a:ab:61:ce:b5:52:d5:a6:3e:60:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate webmail.psc-gpc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.psc-gpc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.psc-gpc.ca

Other certificates including the domain name psc-gpc.ca

(limited to 100 certificates)
*.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
*.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
www.psc-gpc.ca
www.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
crm.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
*.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca
webmail.psc-gpc.ca
psc-gpc.ca
cpcalendars.psc-gpc.ca
psc-gpc.ca
webmail.psc-gpc.ca
crm.psc-gpc.ca
alternc.psc-gpc.ca
*.psc-gpc.ca
*.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
webmail.psc-gpc.ca
alternc.psc-gpc.ca
psc-gpc.ca
*.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
crm.psc-gpc.ca
www.psc-gpc.ca
psc-gpc.ca
alternc.psc-gpc.ca
www.psc-gpc.ca
webmail.psc-gpc.ca

Certificate

The complete raw certificate details for webmail.psc-gpc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327290122909096131459477222704163210785373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 16:00:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 16:00:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.psc-gpc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695063113029854134334612928150715505584344225956594538249766078449238938006471186918919546228042355875230419095973404318824424869074407425740691714631798834621801014315222667456231331862660295351489390410037687969589764696447535230073054128505280775931188950141583222408931685285015965646746959813491131287007382823264034545243873318090560111159275565995576134115661592008088239686349565611410688015908141219113213786832997135988990404382046278309800582129391839266367684826871833862967013582482722054848277275870271604807103079213767052244444985248198248105120459990396004175450692822997582233543648927556957167181996447704136945732376684150105944715444850972094295421149451245987304841152506837033370288676156118738251447743210223315698541617970860474926945238673941014054184293204464530345964751263895228832635593951537826262899671608151552353371544353744622929006182375334375887656653701501427827550792601997548787709770780195796291555551371984456868950552062171859017896859343627874910973658015508628306615193146920317282268990293515422598494003390621330997496799465768649356554032222204654184205365080776488537007773759151737599234896709728167630577110819745738843530323309957733709985508426674867124620996091702248560499013429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbddff99e92795d373a312a626925ebe5e2b2e79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.psc-gpc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168482869a6000004030047304502201b8358938cce719a87534ed832021c2d16e5e1d0ed67602ddf5a2e94da68cfe002210096202380a84052532d77a498cccf73d4d732f870a705b24cdc25c7577815fc26007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016848286b98000004030046304402203a8db03dde3f523d187d79a07c31931d65e27076b0b7a5e95453ebc8d724693c02201dddab358b68ba03b0e3cf234a8c60da3212b5c8f83eeca9ae1a6cb0d4c4650e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030911002a560af0961244a4476cba4ce0c44863e4117ee31667660e6abc5e47fbf543a6a36e5ce431d6a3e9ec9b9537683d0ef23ee22b6eb084628d76b94566ab88edff4d28e3f995d8fd9dba6924d75b271097418c0cb2dd1694e834600019701ac02edfe4352fbf54c537403f56b7033b7fa401a649fc2b152045f0bdc8bcc50640b2f3d0da6a915b9397525bcea3d08cf85a36068c5ef6bfbec98b48de17143d2fdd6aa3f52ab71ae9a8bccadae2c7d3f71848a7384093500eb000cba0582e36d4a1422cc8db4b2453588227809d023a4d383d2d44edac8e4ea2896d3f27dbc271506bd797be7dd8f027d6ff9d0432bc1ec40b37d0e9188631861094095d9