DV SSL/TLS Certificate for www.quesnelcommunityfoundation.ca

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R6 AlphaSSL CA 2023)

About the www.quesnelcommunityfoundation.ca DV SSL/TLS Certificate

This certificate with serial number 32:8d:55:88:d7:f8:e1:fa:9a:9f:5d:78 for www.quesnelcommunityfoundation.ca was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.quesnelcommunityfoundation.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 32:8d:55:88:d7:f8:e1:fa:9a:9f:5d:78
Serial Number (int): 15645112957103591073045765496
Serial Number Length: 94 bits, 12 octets

Subject Key Identifier: e2:f4:c0:50:db:ff:87:b8:1e:8d:77:18:7f:fb:7f:20:10:02:be:24
Authority Key Identifier: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (SHA-1): d3:c3:f2:08:46:8a:c5:ee:67:48:89:25:b7:a8:e6:9e:e2:0b:d8:cb
Fingerprint (SHA-256): 4f:80:ee:fb:ab:c7:3d:55:25:1b:6d:e0:4c:6b:82:13:22:d9:13:da:87:f2:cb:0a:79:d1:a5:af:d4:28:f3:1f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate www.quesnelcommunityfoundation.ca
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.quesnelcommunityfoundation.ca

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.quesnelcommunityfoundation.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15645112957103591073045765496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 07:33:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-16 07:33:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.quesnelcommunityfoundation.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805721059630708251401351925627692845442193535582067826316111015223980407394974553750608876901366954955377879472804068679442428877127259343768006609066198931501776801840295079007990788009045945529768218582926415553756218854105257716698297581798712005791419117803199985482879127207434886035630324816966617974554168355556538436791427235106424005246101164881349340244032407424123757405751024712679530933025079729998156021115585614171791331178749772361314214353347137494123070073933763400839578747776240230963669535948960744765217880408272440646137912037737297915935083686927947393747267056801207751128216405208692240243908742234087215623171431122648323132488393059747818568379269186475705027700201725281166403267334039197610431650177389701141157880107005763792600935809014997865532146390350028754320210304494568428258664171273834037307173135066155647793566474485168360955367306940648751503402920845772311430841224619658889813930523100233774415958330219246222877438433335895131394899013352810961115785996867835443901113849013296713794723772214935916930857304598389005607002665924546708099324587761379046594098764311740981453636097241534357339656775518154641822789977625033395615451639985836095309271461894794934182724185206658576944302933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quesnelcommunityfoundation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quesnelcommunityfoundation.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2f4c050dbff87b81e8d77187ffb7f201002be24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001159b00f83a7995bb517463a9f0fb29dd418a98c340e4d09d357654667480c7cda793a6b91db7b4241e77b7d61d4626623899f9f4d1a8455e8addb3cb9cb1cd72b32089f3e75357e9749bf805027b0febda96c01714f4230b804ef9d08dc302703fef3e2d59d5d7cefbb5c90c4743bb8fe459e832ded84eab2d50ef3e290925325afe03350dad28de87f4dc148c63b0dce339df99c07b2c45f337230b56aface35bf34c079a0d03455e48ddc0fcf38f866a559000d4322b0a5c2524122126390ead547e10f71b7df8fc8db57822f9fdb9be4a73551a1d6c2a89de3828bce56b79b81efa180a3ed1c0d6e6469b2cfddd7813d861127af99d2fbf306cefe97b16d