gctc.org
Issued by R3
About this certificate
This digital certificate with serial number 04:c6:2a:a3:d7:31:07:35:fe:2f:d5:ea:39:09:0b:11:40:d4 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gctc.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c6:2a:a3:d7:31:07:35:fe:2f:d5:ea:39:09:0b:11:40:d4Serial Number (int): 415881730662200186412617961146364070019284
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ab:03:5f:d6:3e:0c:f4:2b:82:dd:34:f9:a6:83:e4:ee:71:af:5e:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8a:76:ec:17:f4:ac:03:93:a0:96:bf:d0:3c:2e:ca:27:be:ad:3e:70
Fingerprint (sha256): fd:85:be:91:c1:a8:64:34:86:1b:1b:87:b1:d7:e0:6b:44:54:2d:bf:ea:40:30:58:ac:d0:90:c8:cf:fe:8e:04
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate gctc.org
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gctc.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aichristos.com
gctc.org
gvssanga.net.boardercross.com.nationalchristianhomeschoolleaders.org
lindellevents.com.wpvps.in
liveforvip.com
mobilerobotics.net.talkov.com
rasselas.com
selectioncodes.org
gctc.org
gvssanga.net.boardercross.com.nationalchristianhomeschoolleaders.org
lindellevents.com.wpvps.in
liveforvip.com
mobilerobotics.net.talkov.com
rasselas.com
selectioncodes.org
Other certificates including the domain name gctc.org
(limited to 100 certificates)
happyeveryday.ca
caribooranch.ca
sportsbetting.nyc
daddy.vc
34755625397.ca
34755625397.ca
gctc.org
gctc.org
justwanna.world
sportsbetting.nyc
gctc.org
maxler.world
www.gctc.org
34755625397.ca
exoniaconsulting.ca
www.gctc.org
34755625397.ca
middleeast.vc
www.gctc.org
gctc.org
34755625397.ca
34755625397.ca
caribooranch.ca
usc.college
justwanna.world
www.gctc.org
gctc.org
diy.lease
justwanna.world
34755625397.ca
t-t.co.za
diy.lease
gctc.org
34755625397.ca
www.gctc.org
34755625397.ca
justwanna.world
ipv4.exchange
pij.co.in.gctc.org
gctc.org
www.gctc.org
www.gctc.org
www.gctc.org
www.gctc.org
exoniaconsulting.ca
sportsbetting.nyc
www.gctc.org
diy.lease
34755625397.ca
exoniaconsulting.ca
gctc.org
cbikes.ca
gctc.org
caribooranch.ca
sportsbetting.nyc
daddy.vc
34755625397.ca
34755625397.ca
gctc.org
gctc.org
justwanna.world
sportsbetting.nyc
gctc.org
maxler.world
www.gctc.org
34755625397.ca
exoniaconsulting.ca
www.gctc.org
34755625397.ca
middleeast.vc
www.gctc.org
gctc.org
34755625397.ca
34755625397.ca
caribooranch.ca
usc.college
justwanna.world
www.gctc.org
gctc.org
diy.lease
justwanna.world
34755625397.ca
t-t.co.za
diy.lease
gctc.org
34755625397.ca
www.gctc.org
34755625397.ca
justwanna.world
ipv4.exchange
pij.co.in.gctc.org
gctc.org
www.gctc.org
www.gctc.org
www.gctc.org
www.gctc.org
exoniaconsulting.ca
sportsbetting.nyc
www.gctc.org
diy.lease
34755625397.ca
exoniaconsulting.ca
gctc.org
cbikes.ca
gctc.org
Certificate
The complete raw certificate details for gctc.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISBMYqo9cxBzX+L9XqOQkLEUDUMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDkxNzAzMDNaFw0yNDAzMDgxNzAzMDJaMBMxETAPBgNVBAMT CGdjdGMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bdbA2FB fJzjnl/zABeJE96e5PC2555r7KcfR6UrNFbDFagoHR8tirmePuv1zYVZmruOw8zC fGVZS9w2Yq5xtyTH/uyC6b6kBX6WW5EESwB1NNoReU/rR6Npz35rUcD+Uj2ieeMb dfbUKG/zeHlz1n3cZxoDWnU8wGYJrwkVUfOOYAT5y0oGbVdWZjCG2gHx3p1h3vha h7PZmYz4O3M2cB+U+Kzk+zVr5cWYsOnKtwePmhxA2EFrvEAQeFl+xK+RbqXrE9iQ jk3fJANfcox11qQG0i0861LbtQ1kKjSrHYey6Nyg8btg95z5UKZorE1gEEI+p2Bw Nr5PONDPALZLcwIDAQABo4IC0TCCAs0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSr A1/WPgz0K4LdNPmmg+Tuca9eNzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCB2AYD VR0RBIHQMIHNgg5haWNocmlzdG9zLmNvbYIIZ2N0Yy5vcmeCRGd2c3NhbmdhLm5l dC5ib2FyZGVyY3Jvc3MuY29tLm5hdGlvbmFsY2hyaXN0aWFuaG9tZXNjaG9vbGxl YWRlcnMub3JnghpsaW5kZWxsZXZlbnRzLmNvbS53cHZwcy5pboIObGl2ZWZvcnZp cC5jb22CHW1vYmlsZXJvYm90aWNzLm5ldC50YWxrb3YuY29tggxyYXNzZWxhcy5j b22CEnNlbGVjdGlvbmNvZGVzLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUG CisGAQQB1nkCBAIEgfYEgfMA8QB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABjE+/QaQAAAQDAEgwRgIhAL74y3kBE2DGFCFB2f48+f80O+AKWp9m ulwcS5iidJcmAiEAph4443pYVG/kcQVrAtWVQjW5r8o+/+mlEEivJdxDJSYAdgAp 0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAAAYxPv0J3AAAEAwBHMEUC IQDTLsyGFBEr9Foyt/Gbsu10oBsZyedNmoe2EFaPybEd5QIgC/EHHXIkofl9N3HK tGHgU7uHH4Pfrvb5My6TmpPDCMcwDQYJKoZIhvcNAQELBQADggEBALibr+QG97/8 3+D3In4OyK03GKDyYwbT6rYZudf0mqpJ5geXwHh7woo4LWUTEeuF8Bf5UkDQfwAH 5I608aUJ3hALPpu4Hj3JJzlzQ6pTGvamybpqo+voMZB4bJJW86ZA8o61kLJc/bPa VLs6WPi+RpFbjH3AbtN4cReyirI9HpmXQLYvjTiEO85qs/6w2jCPWy0XccyhDmOY 1I5+1L1TUaHTT2p9MXqZPY8Gu5ZuMPda7WJDobah3VHqmzyrTGZRDx5OafNbL5GB x2G9c1uozT6mTA71/6AHOxoc22bLjER5i6GK0Sby473NwKO88ih+Ztw7IYIvLWUn opFDehMYynk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bdbA2FBfJzjnl/zABeJ E96e5PC2555r7KcfR6UrNFbDFagoHR8tirmePuv1zYVZmruOw8zCfGVZS9w2Yq5x tyTH/uyC6b6kBX6WW5EESwB1NNoReU/rR6Npz35rUcD+Uj2ieeMbdfbUKG/zeHlz 1n3cZxoDWnU8wGYJrwkVUfOOYAT5y0oGbVdWZjCG2gHx3p1h3vhah7PZmYz4O3M2 cB+U+Kzk+zVr5cWYsOnKtwePmhxA2EFrvEAQeFl+xK+RbqXrE9iQjk3fJANfcox1 1qQG0i0861LbtQ1kKjSrHYey6Nyg8btg95z5UKZorE1gEEI+p2BwNr5PONDPALZL cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415881730662200186412617961146364070019284 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 17:03:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 17:03:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gctc.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26979174934691497066304704078200170007555071128215681021378364690029989909814656060141118130346569223576373867276219259362378475326021236251207283241974639518908971717103347464672530979691496690639310681030932828765938594517443889549408201548639998488195906087958763356688475816363539910223187435501146058920834339645510795091549316442731856341255198900372572934859008925790691609118733323931080338807328675986706120512507443176457837366677298449770364615414445934088566744905613923559390943517337176361786970561363070911743564084431824230674374959873729563501871243951211444529347174268711723968093305916967076907891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab035fd63e0cf42b82dd34f9a683e4ee71af5e37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aichristos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvssanga.net.boardercross.com.nationalchristianhomeschoolleaders.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindellevents.com.wpvps.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilerobotics.net.talkov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasselas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectioncodes.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4fbf41a40000040300483046022100bef8cb79011360c6142141d9fe3cf9ff343be00a5a9f66ba5c1c4b98a2749726022100a61e38e37a58546fe471056b02d5954235b9afca3effe9a51048af25dc43252600760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c4fbf42770000040300473045022100d32ecc8614112bf45a32b7f19bb2ed74a01b19c9e74d9a87b610568fc9b11de502200bf1071d7224a1f97d3771cab461e053bb871f83dfaef6f9332e939a93c308c7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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