donations.yspi.ie

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 1d:b9:bc:fc:9c:5a:5f:0a:01:85:7e:6e:48:f7:b1:d0 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=donations.yspi.ie

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:b9:bc:fc:9c:5a:5f:0a:01:85:7e:6e:48:f7:b1:d0
Serial Number (int): 39512019903482857199429415703609323984
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 33:66:40:3f:bd:64:e0:04:e1:0f:4e:63:6c:16:a5:fb:2b:df:af:c1
Fingerprint (sha256): 10:eb:99:1e:f1:ad:46:bc:97:d4:82:39:61:57:b6:c4:28:2b:f4:57:18:63:96:e2:b1:8e:65:11:51:7b:0e:9c

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate donations.yspi.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for donations.yspi.ie

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

donations.yspi.ie

Other certificates including the domain name yspi.ie

(limited to 100 certificates)
students.yspi.ie
*.yspi.ie
m.skydive.yspi.ie
camino.yspi.ie
yspi.ie
data.yspi.ie
media.hirschmann-automotive.com
students.yspi.ie
downloads.yspi.ie
donations.yspi.ie
skydive.yspi.ie
camino.yspi.ie
ucdsu.yspi.ie
www.digital.britishtraveljournal.com
m.yspi.ie
fundraiser.yspi.ie
skytest.yspi.ie
bingo.yspi.ie
data.yspi.ie
ucdsu.yspi.ie
data.yspi.ie
events.yspi.ie
fundraising.yspi.ie
m.skydive.yspi.ie
services.yspi.ie
m.skydive.yspi.ie
fundraising.yspi.ie
publikationen.contipark.de
fasts.yspi.ie
yspi.ie
magazine.elektropraktiker.de
backup.yspi.ie
skydive.yspi.ie
skydive.yspi.ie
*.yspi.ie
ethan.yspi.ie
fundraising.yspi.ie
camino.yspi.ie
bingo.yspi.ie
skydive.yspi.ie
toughmudder.yspi.ie
skydive.yspi.ie
downloads.yspi.ie
bingo.yspi.ie
bingo.yspi.ie
skydive.yspi.ie
m.yspi.ie
data.yspi.ie
corporate.yspi.ie
fundraising.yspi.ie
data.yspi.ie
donations.yspi.ie
fundraising.yspi.ie
rtp01.yspi.ie
school.yspi.ie
sleighrace.yspi.ie
donations.yspi.ie
shop.yspi.ie
assets.yspi.ie
bingo.yspi.ie
m.yspi.ie
camino.yspi.ie
sleighrace.yspi.ie
bingo.yspi.ie
*.yspi.ie
xmas.yspi.ie
m.yspi.ie
m.skydive.yspi.ie
fundraising.yspi.ie
m.yspi.ie
twoeuro.yspi.ie
wirbeicontipark.contipark.de
events.yspi.ie
magazine.elektropraktiker.de
skydive.yspi.ie
magazine.ausemergencyservices.com.au
www.yspi.ie
toughmudder.yspi.ie
m.skydive.yspi.ie
fundraising.yspi.ie
campaigns.yspi.ie
skydive.yspi.ie
fasts.yspi.ie
bingo.yspi.ie
sanda.yspi.ie
donations.yspi.ie
data.yspi.ie
tagesspiegel.kiosk.plus
information.yspi.ie
m.skydive.yspi.ie
downloads.yspi.ie
*.yspi.ie
fasts.yspi.ie
wirbeicontipark.contipark.de
m.yspi.ie
info.independenceaustralia.com.au
data.yspi.ie
www.yspi.ie
appeal.yspi.ie
events.yspi.ie

Certificate

The complete raw certificate details for donations.yspi.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39512019903482857199429415703609323984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'donations.yspi.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651727315282055819808345241960369517929344543050050811914384776731040233810209558095661224794078839574494193548057059158850796231754272117883394246797184395092894887423164719554142127443674148457223291984109335507969165907779166341272966432506914580299002306674171614267078392942637615666615686953047287920484049106659501160214299848169942415474143330477281724608602025192927702321670826786833846415149967485051497242847397832040094257289670152779833479711396494895427874526708828996509277143432154176934175992696644555278426167555798826830680302488145852846741048225525439573454310444731622761611234481980536234576306182248947818010943780300063620364164407977536047455632534031234933113811549651994168539647509329212475990320755403037439230751546784495100971590195042892241346009437322189416134012126830112400514715146337585896654634007923260980509212726182201253050779120996268020878542307139911099053368521371170013153595874840687630834222747710248035510530433424063070412189505571943702805681089044472407051761741223876157817523189350704524385790615540872606782354682094865389281609463389932991845986239798078634878742858372510827400929508436263213031624301677817329995705111401793368822129082976279200760147072858155280390862587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donations.yspi.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d0dd154370000040300473045022060106cc6d06868536c0d8f68a67ac54247d1ea74532da470a39c5bb7e225984a022100c6f024d5afbceeff5c150171d2bec198354c2a1df7635419aeab7617a5035484007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d0dd1546a0000040300463044021f707b79390b463838e18e267a8e9c24963c75c12da0d6a9acaf44bed0e854a5022100fb31861edcfd178b72fe0ce31f2000164ee8ace918743eb6ba916f7cf893cb65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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