secure.atlantamission.org

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 3b:ee:94:c8:90:55:d5:1d:37:fa:b3:d4:c0:cd:ff:87 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=secure.atlantamission.org

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:ee:94:c8:90:55:d5:1d:37:fa:b3:d4:c0:cd:ff:87
Serial Number (int): 79663236090564775288996234475713986439
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 03:da:f0:7b:d2:a8:02:46:47:09:e4:68:9c:dc:10:46:7d:aa:20:24
Fingerprint (sha256): 2c:10:84:bf:d5:30:fc:76:53:31:85:fd:5e:e5:aa:3a:ba:78:9e:1a:60:6b:ed:e2:ec:25:a3:21:b8:9c:84:a3

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate secure.atlantamission.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.atlantamission.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.atlantamission.org

Other certificates including the domain name atlantamission.org

(limited to 100 certificates)
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
securedns4.planmygift.org
sni20986.cloudflaressl.com
give.atlantamission.org
sni150900.cloudflaressl.com
securedns4.planmygift.org
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
volunteer.atlantamission.org
sni20986.cloudflaressl.com
prod.48.slot.cdn.salesforce-communities.com
atlantamission.org
sni152918.cloudflaressl.com
securedns4.planmygift.org
sni20986.cloudflaressl.com
www.atlantamission.org
sni152918.cloudflaressl.com
sni150900.cloudflaressl.com
securedns4.planmygift.org
securedns4.planmygift.org
securedns4.planmygift.org
securedns4.planmygift.org
sni20986.cloudflaressl.com
secure.atlantamission.org
sni20986.cloudflaressl.com
give.atlantamission.org
impactgiving.atlantamission.org
atlantamission.org
legacygiving.atlantamission.org
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
sni150900.cloudflaressl.com
sni20986.cloudflaressl.com
securedns4.planmygift.org
give.atlantamission.org
impactgiving.atlantamission.org
atlantamission.org
securedns4.planmygift.org
sni152918.cloudflaressl.com
securedns4.planmygift.org
sni150900.cloudflaressl.com
sni20986.cloudflaressl.com
securedns4.planmygift.org
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
sni150900.cloudflaressl.com
prod.48.slot.cdn.salesforce-communities.com
sni150900.cloudflaressl.com
atlantamission.org
securedns4.planmygift.org
atlantamission.org
volunteer.atlantamission.org
sni150900.cloudflaressl.com
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
sni20986.cloudflaressl.com
secure.atlantamission.org
sni.cloudflaressl.com
sni20986.cloudflaressl.com
prod.48.slot.cdn.salesforce-communities.com
sni20986.cloudflaressl.com
sni150900.cloudflaressl.com
give.atlantamission.org
prod.48.slot.cdn.salesforce-communities.com
give.atlantamission.org
atlantamission.org
www.atlantamission.org
sni20986.cloudflaressl.com
sni.cloudflaressl.com
sni20986.cloudflaressl.com
securedns4.planmygift.org
sni20986.cloudflaressl.com
atlantamission.org
secure.atlantamission.org
adfs.atlantamission.org
sni20986.cloudflaressl.com
securedns4.planmygift.org
sni20986.cloudflaressl.com
give.atlantamission.org
sni150900.cloudflaressl.com
give.atlantamission.org
securedns4.planmygift.org
sni150900.cloudflaressl.com
securedns4.planmygift.org
securedns4.planmygift.org
sni20986.cloudflaressl.com
atlantamission.org
sni150900.cloudflaressl.com
atlantamission.org
prod.48.slot.cdn.salesforce-communities.com
secure.atlantamission.org
securedns4.planmygift.org
sni152918.cloudflaressl.com
sni20986.cloudflaressl.com
atlantamission.org
sni20986.cloudflaressl.com
sni150900.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for secure.atlantamission.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2pw8ViFAKOSPXYCT/Ei
rDgUsYe+MN8ThKdLEv6GYz0pvOPMwYDIF4E8b4KYWuxhUjOXan2jHCJSiCRApmrO
7qH699zoIlngHUAnVziMtiul7koTj5gsTjoelkRnzc5gmyjfi5/+ly03wGxMdeYB
xFMnf0Dvi8xCxei8KJG0NMqOALA2zOgnrGLEoKL7bUsBJkSRfDaa4ItbNowiLsm0
upSNn+xFO3GJmvkWGmeAxzPH8AVfUjwbEvKTzaxm3qqlj3DGN3mY0eEbki0GpFXt
1seA90nyzoKmADhediDCT141tZUzSMPrdvPTV0vsWDmsi23u9M9DhMMkvYokpIZw
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79663236090564775288996234475713986439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure.atlantamission.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24164004351937525452158807022188864010049101317778010389274573412830323975827842059028533640809403469452560347537852166059674874845572082205987412474628483391212967578901881325486408484652963610138905512495001037814481029584419904270490940981670714971447992578443550508493072899248395779258780496260253673659966674145071363678004155827414224975112580249016268556706830855719529025541708517582247789600469330882056006117116658093872515115139008425062426771475964822326312887092978391370109213038346999447391862431965460621564450797443315673997848697285385841094887798563315484429090461783161191589349380178975002095667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.atlantamission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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