portal.gets.georgia.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:e9:cb:fe:5c:0b:b9:14:4a:d2:44:e1:74:21:f2:25:3c:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.gets.georgia.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:cb:fe:5c:0b:b9:14:4a:d2:44:e1:74:21:f2:25:3c:ae
Serial Number (int): 428006089213076526924156828331797089959086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:51:67:90:60:8c:d2:9f:44:5e:f6:87:73:18:53:33:21:81:95:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:95:7e:ef:33:10:9d:fd:3e:0d:27:3e:f3:4e:98:05:4a:3d:05:7b
Fingerprint (sha256): 18:fb:38:6b:77:f0:0b:89:05:b1:3d:2a:81:f5:65:d0:06:1c:f3:83:82:de:07:6b:60:af:68:aa:65:46:b7:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate portal.gets.georgia.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.gets.georgia.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.gets.georgia.gov

Other certificates including the domain name georgia.gov

(limited to 100 certificates)
ada.georgia.gov
atl-expe-01.agr.state.ga.us
data-hub.gio.georgia.gov
dhs.georgia.gov
*.teamworks.georgia.gov
cjcc.georgia.gov
ready.ga.gov
oci.georgia.gov
testservices.georgia.gov
ipas.otfs.georgia.gov
gsfc.georgia.gov
opb.georgia.gov
*.georgia.gov
gateway.ga.gov
*.teamworks.georgia.gov
georgia.gov
gbd.georgia.gov
gsfc.georgia.gov
ipas.otfs.georgia.gov
ipas.otfs.georgia.gov
ssl.smugmug.com
*.mmis.georgia.gov
ipas.otfs.georgia.gov
www.cybercenter.georgia.gov
www.mmis.georgia.gov
portal.gio.georgia.gov
dev.insights.georgia.gov
gosa.georgia.gov
ssl.smugmug.com
adoptastream.georgia.gov
*.sos.ga.gov
*.mmis.georgia.gov
versa.medicalboard.georgia.gov
poab.georgia.gov
*.georgia.gov
gceo.georgia.gov
gvs.georgia.gov
*.sos.ga.gov
digital.georgia.gov
gvs.georgia.gov
testservices.georgia.gov
portal.georgia.gov
ready.ga.gov
dfcs.georgia.gov
mail1.sog.ga.gov
orchard.georgia.gov
law.georgia.gov
services.georgia.gov
gema.georgia.gov
qportal.gets.georgia.gov
hts.betammis.georgia.gov
mrf.georgia.gov
dfcs.georgia.gov
riversalive.georgia.gov
*.opb.georgia.gov
ready.ga.gov
*.betammis.georgia.gov
devdocs.teamworks.georgia.gov
broadband.georgia.gov
portal.gets.georgia.gov
opb.georgia.gov
gsba.georgia.gov
cybercenter.ga.gov
*.opb.georgia.gov
sao.georgia.gov
dbf.georgia.gov
ssl.smugmug.com
medicaid.georgia.gov
medicalboard.georgia.gov
gataxtribunal.georgia.gov
testdocs.teamworks.georgia.gov
gateway.ga.gov
gta.georgia.gov
*.georgia.gov
ssl.smugmug.com
*.georgia.gov
ipas.otfs.georgia.gov
*.georgia.gov
georgia.gov
consumered.georgia.gov
gacc.georgia.gov
gsfic.georgia.gov
sitf.georgia.gov
ng911-hub.gio.georgia.gov
*.georgia.gov
dch.georgia.gov
rules.sos.ga.gov
gsdf.georgia.gov
*.teamworks.georgia.gov
*.sos.ga.gov
ssl.smugmug.com
www.ghp.georgia.gov
ready.ga.gov
holocaust.georgia.gov
consumer.georgia.gov
*.teamworks.georgia.gov
ready.ga.gov
sao.georgia.gov
*.mmis.georgia.gov
sitf.georgia.gov

Certificate

The complete raw certificate details for portal.gets.georgia.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428006089213076526924156828331797089959086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 20:33:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 20:33:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.gets.georgia.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747274750683454976630099802745511871177626877669153326558133514305300192161920616978901620147178480338494946789021400941281382744981220265739499639700129668776377258526701341138365173530993673689518776822100547039910561085838124819709687784399927047503967350799599007410312942939722943816324361760465295069064819372368303119855056489764210893868586190340045864134200648379282091758142363799470137716999575548543969142294264770390703848245276290396804725025072970222835212180643281152672270887881326185395758925775615995119470663041168226097411160569951590215160367017878514908244463919277580421479711354890568102284656266455514809569044278003086471785141202946802503821031550994732430858351054632899442367362053728073088355118211083471650108751816344904844307343988341996180565757958653506091475634485317832260740121899322569894223653444148347412894528295017164832794974697224449075823924397315043031300729805751703608608978798134428623944274009064239435509877182795125933847291802034576236115078943656337562790795756514880575440569871104197572035851479419139578019700333666331333512078013671370761153181946520820503721515256321999386066401732911011449400349811955487976727662593787721273675670953140565161748237247877857798971615003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22516790608cd29f445ef687731853332181952f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gets.georgia.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187c9c939c3000004030046304402203397ba81348d061718502cff29c2a790b3c3b30e90001ca6593e352147f3996102203759ca333059a267896087bbe2f9f240c831af3c6d01ed1fa634c9e84634bc1c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187c9c93a0100000403004730450220216cabb8d9bd5621a52b3a3c5bfab5e1c6e228aa6965138b501b10e6017a1825022100c8e1052e3c8049f81989e508030568c53d5ee00ef6989e335a9d7f9f939189c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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