www.castleconnor.sligo.gaa.ie

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:4c:3c:90:57:24:f5:32:b0:ec:27:4d:3b:15:f1:d7:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.castleconnor.sligo.gaa.ie

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:4c:3c:90:57:24:f5:32:b0:ec:27:4d:3b:15:f1:d7:45
Serial Number (int): 341064267447842777037442637993745562326853
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:2c:b5:a5:2d:ac:b1:10:ea:1c:cd:20:56:cd:5f:81:17:3a:78:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:fb:4a:f9:fa:14:b8:9e:83:5b:f3:eb:c4:c3:c1:bc:01:9b:51:a6
Fingerprint (sha256): 37:af:20:a5:13:65:95:cd:9b:24:bf:a7:22:db:77:38:7b:2e:1e:b6:b5:c7:b2:e7:64:57:8a:e2:05:60:25:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.castleconnor.sligo.gaa.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.castleconnor.sligo.gaa.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.castleconnor.sligo.gaa.ie

Other certificates including the domain name gaa.ie

(limited to 100 certificates)
castleconnor.sligo.gaa.ie
europe.gaa.ie
britain.gaa.ie
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
antrim.gaa.ie
canada.gaa.ie
rathdowneyerrill.gaa.ie
people.gaa.ie
www.stmartins.gaa.ie
tipperary.gaa.ie
warwickshire.gaa.ie
gaa.ie
tickets.gaa.ie
ancharraigmhor.gaa.ie
tls.automattic.com
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
tipperary.gaa.ie
antrim.gaa.ie
www.kelloggsculcamps.gaa.ie
antrim.gaa.ie
people.gaa.ie
pts.gaa.ie
cc.clubandcounty.com
mdm.gaa.ie
tipperary.gaa.ie
supergamescentres.gaa.ie
www.britain.gaa.ie
www.rathdowneyerrill.gaa.ie
www.kelloggsculcamps.gaa.ie
gaa.ie
cc.clubandcounty.com
gaa.ie
cc.clubandcounty.com
gaa.ie
lenovoskillshub.gaa.ie
brand.gaa.ie
brand.gaa.ie
gaatvaupload.gaa.ie
tipperary.gaa.ie
tls.automattic.com
mdm.gaa.ie
clare.gaa.ie
antrim.gaa.ie
gaa.ie
learning.gaa.ie
gaa.ie
europe.gaa.ie
ancharraigmhor.gaa.ie
www.castleconnor.sligo.gaa.ie
meath.gaa.ie
countyfinance.gaa.ie
gaa.ie
gaa.ie
www.castleconnor.sligo.gaa.ie
www.gaa.ie
ancharraigmhor.gaa.ie
www.kelloggsculcamps.gaa.ie
secure.kelloggsculcamps.gaa.ie
tls.automattic.com
gaa.ie
tipperary.gaa.ie
grma.gaa.ie
supergamescenters.gaa.ie
ulster.gaa.ie
sni.cloudflaressl.com
antrim.gaa.ie
people.gaa.ie
gaa.ie
castleconnor.sligo.gaa.ie
www.stmartins.gaa.ie
antrim.gaa.ie
britain.gaa.ie
www.castleconnor.sligo.gaa.ie
gaa.ie
canada.gaa.ie
grma.gaa.ie
brand.gaa.ie
www.kelloggsculcamps.gaa.ie
britain.gaa.ie
gaa.ie
gaa.ie
nrg.gaa.ie
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
gaa.ie
www.rathdowneyerrill.gaa.ie
learning.gaa.ie
canada.gaa.ie
canada.gaa.ie
tls.automattic.com
castleconnor.sligo.gaa.ie
canada.gaa.ie
castleconnor.sligo.gaa.ie
canada.gaa.ie
www.kelloggsculcamps.gaa.ie
people.gaa.ie
canada.gaa.ie
offaly.gaa.ie

Certificate

The complete raw certificate details for www.castleconnor.sligo.gaa.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdbaW2DO5i5/hKh1/fXn
rA8RtNY26AUlAyw06SuxRuBx4puOu9tqx+hdQicpg57yQnnP25x8/kB7/GJPU287
y6fFfAuvVbDxaOeftsZVgiY5ubf6+iQL/jscD20JPKpEF3oHWwo+p8igq0oTsTiR
y43AiiEZ4k8cq8vw/Ne9LFK8dRrbV1y70FE1t1RyqSo1CgxDo0n5RICAw3N2x2hx
XFl+6K8AM/uJDjy5k7bRjOVnnD4e394PhGUvUEYIOA3ZTIjzJ+75jxxgSDcYOBVy
bDK8d5VdPcs6X2SAm2lkzifC+Y1Vq6oRghqRkb8OSlTqwGo23OVOJZw/vkr7PHM3
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341064267447842777037442637993745562326853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 08:23:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-06 08:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.castleconnor.sligo.gaa.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21440221481005725500135716769044528204053425253718437221926892090918701539635063553580831011825280422493169378518659423339346474939438165953298519559482524408647050543724290596147157823657725081540285013511724712551866423094230516985606375932792057746172657945027545915683705150757262466382531809219254645858859938615491535198032217730053911604330744144015773034084982461306262984973855939851003768030271313763137425747761269351349821993153011727157759257039462458885340635497239792924039923797010557826175807124357652488806391539051812996891646702444318427564161564908419495085155730480238179091711472632752329930741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae2cb5a52dacb110ea1ccd2056cd5f81173a78dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.castleconnor.sligo.gaa.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169f71bf2e8000004030046304402204d32c6e8eb116f0691e463a29c2dc2d697f2aaabc038c4f84c2f1cd9bbe0bec102202136e79e1d92e6564879626f47ba78b856c1b0ed1ee61bb90122b4651a125f45007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169f71bf2ed0000040300463044022069c809d0b47bab0424de5fb4fc0466c6d749ac00023a961beb88887afb9651c002207d09108a32d19e61842c66460797b5e33e7e3b3aa3227c55f0b23bbc15961fe1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012f09eaa682efe67f0e9eea23b6244cc4a3caf8aea7919f6dd4830bea3cfe2b86f7bd07d775dcd3182ccf0109d8f8ea6227d0ea5f99bf515f0ca4afabe0f42eddd8a94b5b69fdbb033962e004dd4e1b4082ec47a572405a1f02f5a591239c033c947c505fbc3aaa78378ab82f5faaaa7311ffaf2f3da5392990941dc4a28c9230ca2351ff5f3b3eb97c590b701eb9c097d13546bb9afc3297426c4cb4f2e8e58022d61bec104f4ab7a3b89993c0e2584472b6049c0620d6c6e3d8cb7572ac371912f9045702d206a435d94fa133b4a260543cd613396eca72391e953f89476d42a1c7409d06dd88fa7c51a57869715efcce2dae2c1eaf8d9059ba19552cf1323