pts.gaa.ie

- Gaelic Athletic Association -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:d8:75:fb:74:0e:42:50:17:bf:1d:3c:41:37:1b:51 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Gaelic Athletic Association

Organization: Gaelic Athletic Association
Organization unit: IT
Locality: Dublin
Country: IE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:d8:75:fb:74:0e:42:50:17:bf:1d:3c:41:37:1b:51
Serial Number (int): 9099297060262935585362913978647780177
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7d:de:2b:04:26:ef:b4:09:66:85:f7:6b:63:da:f5:ef:77:1b:67:52
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 40:4f:19:ab:3b:a4:d9:c7:71:c2:50:e6:dd:de:72:6b:f9:3b:3d:36
Fingerprint (sha256): 16:0d:39:e9:aa:c3:86:80:e4:9a:3d:90:3a:bf:24:a9:d2:53:f3:ba:72:1c:30:ba:b9:98:22:5d:ff:8a:36:22

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate pts.gaa.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pts.gaa.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pts.gaa.ie

Other certificates including the domain name gaa.ie

(limited to 100 certificates)
castleconnor.sligo.gaa.ie
europe.gaa.ie
britain.gaa.ie
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
antrim.gaa.ie
canada.gaa.ie
rathdowneyerrill.gaa.ie
people.gaa.ie
www.stmartins.gaa.ie
tipperary.gaa.ie
warwickshire.gaa.ie
gaa.ie
tickets.gaa.ie
ancharraigmhor.gaa.ie
tls.automattic.com
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
tipperary.gaa.ie
antrim.gaa.ie
www.kelloggsculcamps.gaa.ie
antrim.gaa.ie
people.gaa.ie
pts.gaa.ie
cc.clubandcounty.com
mdm.gaa.ie
tipperary.gaa.ie
supergamescentres.gaa.ie
www.britain.gaa.ie
www.rathdowneyerrill.gaa.ie
www.kelloggsculcamps.gaa.ie
gaa.ie
cc.clubandcounty.com
gaa.ie
cc.clubandcounty.com
gaa.ie
lenovoskillshub.gaa.ie
brand.gaa.ie
brand.gaa.ie
gaatvaupload.gaa.ie
tipperary.gaa.ie
tls.automattic.com
mdm.gaa.ie
clare.gaa.ie
antrim.gaa.ie
gaa.ie
learning.gaa.ie
gaa.ie
europe.gaa.ie
ancharraigmhor.gaa.ie
www.castleconnor.sligo.gaa.ie
meath.gaa.ie
countyfinance.gaa.ie
gaa.ie
gaa.ie
www.castleconnor.sligo.gaa.ie
www.gaa.ie
ancharraigmhor.gaa.ie
www.kelloggsculcamps.gaa.ie
secure.kelloggsculcamps.gaa.ie
tls.automattic.com
gaa.ie
tipperary.gaa.ie
grma.gaa.ie
supergamescenters.gaa.ie
ulster.gaa.ie
sni.cloudflaressl.com
antrim.gaa.ie
people.gaa.ie
gaa.ie
castleconnor.sligo.gaa.ie
www.stmartins.gaa.ie
antrim.gaa.ie
britain.gaa.ie
www.castleconnor.sligo.gaa.ie
gaa.ie
canada.gaa.ie
grma.gaa.ie
brand.gaa.ie
www.kelloggsculcamps.gaa.ie
britain.gaa.ie
gaa.ie
gaa.ie
nrg.gaa.ie
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
gaa.ie
www.rathdowneyerrill.gaa.ie
learning.gaa.ie
canada.gaa.ie
canada.gaa.ie
tls.automattic.com
castleconnor.sligo.gaa.ie
canada.gaa.ie
castleconnor.sligo.gaa.ie
canada.gaa.ie
www.kelloggsculcamps.gaa.ie
people.gaa.ie
canada.gaa.ie
offaly.gaa.ie

Certificate

The complete raw certificate details for pts.gaa.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLiG8BVmvfk86a1xF+CN
ce8f9PIpgjt6/do1W+aymg5fyxSyoBI+oiLKyLyGvXjCzZx4Osb3KXBFlTracCph
mm8XVy0qWdiYJzNmkVYrTiVVOATv/1iZ7lf4TSU/BRuKUx2ouEkxxIJaMqZ/EjHX
wRTj32kT5o46m8w5DM/k/lRSKWKzlHVonHkvYkEBpRwkJ34feMN315GYf39zuSbr
29Cdvs34BibVccpGq+yWe3YlykjsNHMFafnEDhhOYNymyrC3MQM+FckFr35L928g
BNxGAElEDxVP2noNsjAvfb1NqF/zLGQwDX+RQzppqr04jtBU1bmdymfjmshGSldQ
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9099297060262935585362913978647780177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gaelic Athletic Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pts.gaa.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23823795038447234049967801710309683182414533442977062630509097598813845978505582063054826293598104706251253741261476118487677070820584873721775894326982276520365488891862090158057189235405501154727821876266970060969805321350010427668099961936427555327023925101236078433457897808134857468096528559211153171755252499592057899247914046912462806337722300606029646327634222712367173686529895764464462463835706503803500172652968802494948618816119751855623389318252236416816172918926534717081583633081487633773248658710268914669898002953022531668944035150747535041997266442211028872948323927505243407273062165948911628800139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7dde2b0426efb4096685f76b63daf5ef771b6752
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pts.gaa.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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