sunguide-stage.gtntechsol.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:a1:49:cf:76:70:31:d0:ed:10:03:01:73:a4:8c:69:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sunguide-stage.gtntechsol.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:a1:49:cf:76:70:31:d0:ed:10:03:01:73:a4:8c:69:da
Serial Number (int): 274141694324189941263640336553037615884762
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:6b:96:ff:45:49:8f:96:b0:4e:d7:c3:ff:37:29:72:5f:a1:6a:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:83:fc:9c:0c:19:be:01:5e:a9:05:4d:bd:db:48:29:16:77:8e:1a
Fingerprint (sha256): c1:bf:2a:be:0b:5a:fa:84:b6:61:8b:13:5a:17:75:05:d0:2a:0f:df:d1:3c:63:7c:15:27:6b:a1:36:7a:fd:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sunguide-stage.gtntechsol.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sunguide-stage.gtntechsol.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sunguide-stage.gtntechsol.com

Other certificates including the domain name gtntechsol.com

(limited to 100 certificates)
*.gtntechsol.com
clubride-ws.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
mitigationdashboard.gtntechsol.com
dcwprecon.gtntechsol.com
usace-wordpress-stage.gtntechsol.com
files.gtntechsol.com
ftpmccln.gtntechsol.com
damsafetyresources.gtntechsol.com
mccln.gtntechsol.com
mitigationdashboard.gtntechsol.com
ftoutreach.gtntechsol.com
commute-rebuild.gtntechsol.com
fltpkprod.gtntechsol.com
fltpkprod.gtntechsol.com
clubride.gtntechsol.com
aecomrebuild.gtntechsol.com
xeroxpalit.gtntechsol.com
fltpkprod.gtntechsol.com
*.gtntechsol.com
fltpkprod.gtntechsol.com
mitigationdashboard.gtntechsol.com
usace-wordpress-stage.gtntechsol.com
gategourmet.gtntechsol.com
fltpkprod.gtntechsol.com
ftbrdev.gtntechsol.com
urshelpline.gtntechsol.com
mitigationdashboard.gtntechsol.com
aecomrebuild.gtntechsol.com
urshelpline.gtntechsol.com
gategourmet.gtntechsol.com
ramppdashboard.gtntechsol.com
clubride.gtntechsol.com
ftpmccln.gtntechsol.com
urshelpline.gtntechsol.com
aecomrebuild.gtntechsol.com
*.gtntechsol.com
fltpkprod.gtntechsol.com
urshelpline.gtntechsol.com
ftoutreach.gtntechsol.com
fltpkprod.gtntechsol.com
ftoutreach.gtntechsol.com
aecomrebuild.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
*.gtntechsol.com
files.gtntechsol.com
ftpmccln.gtntechsol.com
aecomrebuild.gtntechsol.com
*.gtntechsol.com
aecomrebuild.gtntechsol.com
ramppdashboard.gtntechsol.com
mccln.gtntechsol.com
metrobus-stage.gtntechsol.com
aecomrebuild.gtntechsol.com
aecomrebuild.gtntechsol.com
clubride-site.gtntechsol.com
*.gtntechsol.com
clubride.gtntechsol.com
sunguide-stage.gtntechsol.com
clubride-site.gtntechsol.com
urshelpline.gtntechsol.com
mccln.gtntechsol.com
ramppdashboard.gtntechsol.com
*.gtntechsol.com
sunguide-stage.gtntechsol.com
fltpkprod.gtntechsol.com
gategourmet.gtntechsol.com
mccln.gtntechsol.com
sunguide-stage.gtntechsol.com
metrobus-stage.gtntechsol.com
amsstage.gtntechsol.com
*.gtntechsol.com
ramppdashboard.gtntechsol.com
aecomrebuild.gtntechsol.com
ftpmccln.gtntechsol.com
clubride-site.gtntechsol.com
fltpkprod.gtntechsol.com
ftoutreach.gtntechsol.com
ftpmccln.gtntechsol.com
commute-rebuild.gtntechsol.com
ams.gtntechsol.com
mitigationdashboard.gtntechsol.com
sunguide-stage.gtntechsol.com
ftpmccln.gtntechsol.com
*.gtntechsol.com
mccln.gtntechsol.com
ftoutreach.gtntechsol.com
xeroxpalit.gtntechsol.com
clubride.gtntechsol.com
mccln.gtntechsol.com
fltpkprod.gtntechsol.com
fltpkprod.gtntechsol.com
clubride.gtntechsol.com
ramppdashboard.gtntechsol.com
ftoutreach.gtntechsol.com
ftpmccln.gtntechsol.com

Certificate

The complete raw certificate details for sunguide-stage.gtntechsol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxLWXBTENC8yog8Jgda5
yDLEpaUuxzIrD5z0RBMIYPzd/dRpEHBmhJVHwbT+Ot9eca/tF8WFwpNTExdPotp1
GNIR//l5EnK0ZO7JzQEE/wRp2RtVZMj4wldjx/dDyQ8rUpLeg5xi6uf259ae7dA4
qISOVSWu9gdX43nAOd7bb9IseqZW4AdczIBIUm2ySbsPv+NHwWkEXtA7aebnGnU3
zAgJFqs9aqwkBMlWdX659jwLI/ABUPIAINy9a9MDzNRVQRsTI/VYGiQ4vlvghu1T
1riiPdmF8nsiQ749giD1hiYrS2oG1Bc4wmupgqZqEFeEcB1qShHnj6hqjXEVtXN4
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274141694324189941263640336553037615884762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 02:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 02:15:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sunguide-stage.gtntechsol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21091085969148659567777505796379305534701912989480356031799720072470855539358111190023132213321555828363438504121347073647084578889941855083139934134323811767231445935873635376300445956182255230128605331222487963166912864794659830278726102322465954727117790631424292426461858585972516877268136169435044738512153486264944869196108642010622721869266631407915116071341378080475915396798309625174864070569641959838713598357157544832880696473024879677563386449249967144528860575879547944936473209142716814336883505241088112760326153274945461166622420526572310034135122686695097175046959219535781353791543686011822753937637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							546b96ff45498f96b04ed7c3ff3729725fa16ad2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunguide-stage.gtntechsol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fbbcc6bd80000040300473045022100a84229aa24fff937bb8c213fb015614a0b0e2f8a299379d403bd0a5d6b150c0702201b7dc5a1a5c90092de23141a9f4d0e930750499e78c51745f0584a5dd348d0730076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fbbcc6c1000000403004730450220424068bbec04d225f80153ab05a834e56cf43d81913591ccc2a39c02c9ea35e5022100fb2151766990f58810adcab278a883859bb22e8a8bf37bfeab4975b2d6002ba1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0071f2755ce409ca362f94cad7e333a545d73fc5d2f4521559b3a49c057de8b513d2a24db1d0d0d47c1717dac1704a073e00aabaf154252b522f0fa3d6a795b7a8787274ecc9b6e191faddcd2229bd1d5780876c5db480c9e896e5762b081f16bd403ae323fa79a2015147227ec441abd2f01e4f6c40a3de50cd7ef7bcc5303669252b2198bb6467e6b410336515c5fa9307054eafe5d6e8a0feb8d84405cde1f03909e83c703364be6d0f639beb872314466d1c335b1068c7bc0bf2e772621817e51eb24c00f94627c57e3016dd389bc53aead40819dac684b71f10b60bdc1d992d0ec1cd6bef9b3c2ca26efff820a2c892921acb219665cf29ece39d7bd8939a