grandronde.org

- Confederated Tribes of the Grand Ronde Community -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number f1:c0 was issued on by GeoTrust, Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Confederated Tribes of the Grand Ronde Community

Company registration number: tba7SK7BMnF8XtJHeStz5nuoRXYxDB-1
Organization: Confederated Tribes of the Grand Ronde Community
Organization unit: Information Systems
State / Province: Oregon
Locality: Grand Ronde
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f1:c0
Serial Number (int): 61888
Serial Number lenght: 16 bits, 2 octets

SubjectKeyId: 7e:4f:c6:b6:43:23:2e:3a:73:8b:62:b9:52:3f:31:97:b8:f2:8e:1b
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): bd:d2:9c:b5:9c:61:d3:f9:15:1c:db:19:06:3e:5d:63:54:be:6b:da
Fingerprint (sha256): 35:2d:62:42:82:73:c8:6f:ec:f5:0f:8d:ad:53:f8:7e:30:24:b1:0f:f4:fe:43:79:81:09:51:9e:9d:bd:6f:99

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate grandronde.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandronde.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.grandronde.org
email.grandronde.org
autodiscover.grandronde.org
autodiscover.thecommunityfund.com
exhub.grandronde.org
exmb1.grandronde.org
thecommunityfund.com
www.grandronde.org
grandronde.org

Other certificates including the domain name grandronde.org

(limited to 100 certificates)
*.grandronde.org
techstop.ats-inc.com
helpdesk.edmontonstatebank.com
*.grandronde.org
helpdesk.grandronde.org
helpdesk.edmontonstatebank.com
email.grandronde.org
grandronde.org
help.yonkerscontractingco.com
techstop.ats-inc.com
service.upperlinehealth.com
*.grandronde.org
grandronde.org
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
grandronde.org
grandronde.org
help.yonkerscontractingco.com
*.grandronde.org
service.upperlinehealth.com
*.grandronde.org
helpdesk.edmontonstatebank.com
mobile.grandronde.org
helpdesk.grandronde.org
service.upperlinehealth.com
*.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
grandronde.org
helpdesk.grandronde.org
*.grandronde.org
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
weblink.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
email.grandronde.org
helpdesk.edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
grandronde.org
service.upperlinehealth.com
help.yonkerscontractingco.com
grandronde.org
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
weblink.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
grandronde.org
service.upperlinehealth.com

Certificate

The complete raw certificate details for grandronde.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6VyucHvb/3JeoI/cGjJ
W2sAvFIpXhv4mKkaB5OAkkqk0F64BXQDIiWXzQQ8DyK62zBEAXZklsHn4/VNbisp
dSOdIpWf5xoQuwx70sUxEi9PgJtfem4v0xdhRboK4UM4vVZ8Ztl3SY2wuYwqg02t
n8z95m2J4nhuihKjBRIUwaVxwa1u8okrQMuzPZyKfdiwbPKnb53iIRSUVi4cHaDZ
i8s7ycB1c1Rrc5ZJdLKGW34fYdWzdaLn0Ud9XJaIS6XEDCmpHVdrzq1Fu6hDeZvD
zTn197qhqVfR8S26eSl8/bmXMjWTeVJH52aVK94Ksz8Xu94Jy+a5sUqw9Op3y4XK
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-13 23:08:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-14 14:13:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tba7SK7BMnF8XtJHeStz5nuoRXYxDB-1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Ronde'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Confederated Tribes of the Grand Ronde Community'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandronde.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19143569571862754313574905114890467343339156462849335186109877106813366859229818857465663615135631503288166628093838605191805602106054983817932654532236182263599797649859467119485382684611499720549415831701698375123072761960392698540415266132959326607195143235579667357708780387964186035735619767403017007168502136422091188896822049981463748479237053603981619583136016969780953114389561447478844964554445727964258679657917324185569322525851060250739051842442455890578791731619164118228560935314823776521916449253765144861571267161095810759454556072037305350439308329542375301538721813062448434793013528765497967233617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (216 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thecommunityfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exhub.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exmb1.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecommunityfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandronde.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e4fc6b643232e3a738b62b9523f3197b8f28e1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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