gtcore.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cd:21:68:1f:82:e5:a5:b1:78:58:1e:2c:03:c0:4d:9d:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gtcore.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:21:68:1f:82:e5:a5:b1:78:58:1e:2c:03:c0:4d:9d:3e
Serial Number (int): 418251434107692992660510883120019537763646
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:13:0e:32:84:a5:7c:c5:69:6a:d6:1a:42:01:fd:89:7c:4d:fe:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:e0:ce:7e:ce:ad:f9:25:22:62:e1:ef:0c:96:2a:a1:ea:30:e6:ca
Fingerprint (sha256): b4:99:4c:21:f6:05:6d:e6:78:44:82:a7:7c:30:ff:5b:07:38:68:ba:82:3a:38:fc:03:3a:8c:f8:b6:13:7a:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gtcore.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtcore.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gtcore.ca
www.gtcore.ca

Other certificates including the domain name gtcore.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for gtcore.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISBM0haB+C5aWxeFgeLAPATZ0+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMTUxMTUxMTVaFw0x
ODAxMTMxMTUxMTVaMBQxEjAQBgNVBAMTCWd0Y29yZS5jYTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKvPY2IKZKgPek+1wYjOwbVv3uM+KfnzYuQcjL1B
AiTw4701YbZF3VYhRZeiGQBtBxlJtN52O1piI3KWQTMQd8IlD9+MSforITTReTG1
VSTpyIQ9PIlHfUM8YZodrnmPL/smITyMg8FblYbSS1i2SMQ3l+f+4nioveYmjdCh
OtVt6LRytcJrNn2tEaQBOXASiYSJ5BFx1y8IVjpLMmrbUOjaQD58DvsRxlLaSE5I
LxIRyKItv+SdUws2D8v4DxtF+uRVgT2NlmAxoeoOhvh9NXCQkuoCJv+R7c1q1E+X
pf3/Vl1TiOqY9yWUJ2CMdboMa4ut6DJse3UwgAchpUbg/DZWZXxUlnfxa9YlfZFm
k6Uqv3SUpaPOSXbiqj7Fmsc7u6uu8pIepxNZ4B9C0ki8K7qIMCwzXe+9syvCcdhs
maEFC/IOScEbEdovwg3FpJ+xgkPktHyvgvmb3KRRON5Fy1yx0dDQZSpMsVT959tC
MIBmzZWtY5Hc5SmdRJ+cJ83q1PJwqu20lc6xTfoN90Gcivz/ci7sqNXUoUwk6ACV
FVhnhXDfclAv2yR1DhHwOjPaeD6g5yH503+qT0zfZMjtXoWs2K2HXWbR3IP0+3NS
DNx+pG0YKsq/xx+G1uUkZr454Qc1fV6IMMd60W7QggWWv+YbPOFjRHJTD+1HyGVO
0irFAgMBAAGjggIYMIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFL8TDjKEpXzF
aWrWGkIB/Yl8Tf55MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJZ3Rjb3JlLmNhgg13d3cuZ3Rjb3Jl
LmNhMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF
BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv
biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo
IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j
cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAI6Y67lbV4Fa
BIbI0SGdE+sapuryzqnwhJdlcdHQ3aXPWIbKnYbGiyz+lFtr5A5o47psDP/O6r1a
kvEcCmYygt/WxpOr7MTA+Yk6Yv+gRqubLsGrTNnM7WVCUaQc8MGCV1Gv46tr/iMR
//dBzYjHX3e6EbfK2OLymCs0g2J/HbycMcnDt0tl2e/pcDCmuk27JWx7hMyDaef7
otYsJfmDu4rV9wREjq9+b8sj2UraLNf9obILCJ0vo7I2iYbMbk/kR4ufpZWikr3y
jp9t/gJy7gPKiOt6Wwb583BgfPa5OcZopUNBtlnVqwMwK8SPw6fiJLp3Ja6SaCa2
4LpyHxRcGgg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418251434107692992660510883120019537763646
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-15 11:51:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-13 11:51:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtcore.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700924096959581695170295364683938788158656808355522291519253167240686519320881357258717101797770899558681841904509514077572576054358145973483145051325271408817929308913086118734411959432510589109567958193449291946202721670898172442415070678844439065902043998646874101376724376174374520354768026426950893485215991653987649934729400799635662135051973601410222446060733231089479459302637645828338389677808305920910443827009174219752140457018589308767013453719734227473520450711452966644998489215526100852392737754420196412450089728429732807882646957651786584305040528044325279220000810907002045180898146938612872665926601522468370012364766963375424894314414968964897898825809980996821613286702490543919012927107509148192568010916276962105989604743765005325458497621011031461475263608606155675189246835542736466023501481855816797501857989814555473653130514606577328077377309234221664593689977471888162955107382101888199617303527766653592844976909499635664473420418495605048551698696002041014975785884194769351711501199486388017777549756067956366733402859725603600077926946437153950749388801868575244852972626628628145364714215417758138512473085142768205306714679557142405847749913982348531272898193672737497784566523937550487672472087237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf130e3284a57cc5696ad61a4201fd897c4dfe79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtcore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gtcore.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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