gaa.ie

Issued by R3

About this certificate

This digital certificate with serial number 04:fe:b2:23:db:62:50:e9:d7:eb:84:22:76:0a:05:08:c1:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gaa.ie

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fe:b2:23:db:62:50:e9:d7:eb:84:22:76:0a:05:08:c1:06
Serial Number (int): 435117653688236224676805330241255312507142
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:77:aa:26:94:91:21:67:66:fa:1a:1f:bd:0d:97:3f:bb:43:62:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 26:63:05:42:14:fd:15:64:ee:ac:f7:34:6d:2f:ef:6d:c8:ff:62:f1
Fingerprint (sha256): 3e:77:8c:29:f9:20:e3:ba:f9:79:ce:05:e0:ea:6a:05:99:dd:ee:97:02:9f:8e:64:8e:23:3f:96:65:4c:a1:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gaa.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaa.ie

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gaa.ie

Other certificates including the domain name gaa.ie

(limited to 100 certificates)
castleconnor.sligo.gaa.ie
europe.gaa.ie
britain.gaa.ie
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
antrim.gaa.ie
canada.gaa.ie
rathdowneyerrill.gaa.ie
people.gaa.ie
www.stmartins.gaa.ie
tipperary.gaa.ie
warwickshire.gaa.ie
gaa.ie
tickets.gaa.ie
ancharraigmhor.gaa.ie
tls.automattic.com
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
tipperary.gaa.ie
antrim.gaa.ie
www.kelloggsculcamps.gaa.ie
antrim.gaa.ie
people.gaa.ie
pts.gaa.ie
cc.clubandcounty.com
mdm.gaa.ie
tipperary.gaa.ie
supergamescentres.gaa.ie
www.britain.gaa.ie
www.rathdowneyerrill.gaa.ie
www.kelloggsculcamps.gaa.ie
gaa.ie
cc.clubandcounty.com
gaa.ie
cc.clubandcounty.com
gaa.ie
lenovoskillshub.gaa.ie
brand.gaa.ie
brand.gaa.ie
gaatvaupload.gaa.ie
tipperary.gaa.ie
tls.automattic.com
mdm.gaa.ie
clare.gaa.ie
antrim.gaa.ie
gaa.ie
learning.gaa.ie
gaa.ie
europe.gaa.ie
ancharraigmhor.gaa.ie
www.castleconnor.sligo.gaa.ie
meath.gaa.ie
countyfinance.gaa.ie
gaa.ie
gaa.ie
www.castleconnor.sligo.gaa.ie
www.gaa.ie
ancharraigmhor.gaa.ie
www.kelloggsculcamps.gaa.ie
secure.kelloggsculcamps.gaa.ie
tls.automattic.com
gaa.ie
tipperary.gaa.ie
grma.gaa.ie
supergamescenters.gaa.ie
ulster.gaa.ie
sni.cloudflaressl.com
antrim.gaa.ie
people.gaa.ie
gaa.ie
castleconnor.sligo.gaa.ie
www.stmartins.gaa.ie
antrim.gaa.ie
britain.gaa.ie
www.castleconnor.sligo.gaa.ie
gaa.ie
canada.gaa.ie
grma.gaa.ie
brand.gaa.ie
www.kelloggsculcamps.gaa.ie
britain.gaa.ie
gaa.ie
gaa.ie
nrg.gaa.ie
www.kelloggsculcamps.gaa.ie
canada.gaa.ie
gaa.ie
www.rathdowneyerrill.gaa.ie
learning.gaa.ie
canada.gaa.ie
canada.gaa.ie
tls.automattic.com
castleconnor.sligo.gaa.ie
canada.gaa.ie
castleconnor.sligo.gaa.ie
canada.gaa.ie
www.kelloggsculcamps.gaa.ie
people.gaa.ie
canada.gaa.ie
offaly.gaa.ie

Certificate

The complete raw certificate details for gaa.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmzhIAYKfKTo4lT348mkM
aVgSD7BzNMoQ2UUAQdRAwS8ePAc4KdkEKjLziBozxyzfs+H9ZvehzQ+YxryMbtSQ
oJg1f0xYctIGep68e5RW+rCKQAgV6vnz4psSLJCHAxomR8QywP5hIoQVwHeqcPoI
QFrqHQjbnxjDHuIEdLyjKGr8iY/Sb4JdnzAr4g/2QhdgdczgA60+aEnbuk4Vrglp
KI9EALv+oBkdIl9M6G5NdsuWm8611al+jnEu7TUMj+4i3cHkC1oUWudJkMH8F5u0
WDsJogdezJNzoRzk+o+POWRM68fAxqUEWe+JX8s03fLEC0C7AaGomVl0Y02+8PyT
vKZJsRN3bJqR7bA1C5XLMcltF44Bspn48NFMLOeIw7vFBjPGE5UClFTSItbqhPqs
b0+9+eELErf6XFmDF2BvcPOS+YTMruPWmcGEYqiuRiBOGeVBkhcxdU1+TtMN6xSL
ggkOvY7lewOIVck4+yF6VwE19kr3oHi63Za8rg0JHQ85AgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435117653688236224676805330241255312507142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 09:18:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 09:18:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaa.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3522524077111603224046063204374694773068099011446698480219796206555067613446853832478292522030449434328384321719910036793858537718068639329900828202042562512628085952366914262708121058605470531701340747546131299538454416293326211116775013897860271279432757718620142071285223233399637441605182893360495645740855931578560291258324293096020982340608927202494262466404074522335374998681946418244812527064602888029757642045126013989017957450468479266767946177329723329252064344925501962908516574454424955022203303527162187695798659377918373321145098609279712891661271279436199491602526629713654249432386688194524568600216042778753371030095715144172148008857588433761018365597139409207278626466259454840363591869871348035383927835343298854141785035947713213262287663905914979196338886484522356337058415875327147303694256813335090104582939531158283517837065441581760415166381657277820303712971341757009144521618068978806329593106233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b377aa269491216766fa1a1fbd0d973fbb4362ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaa.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6a0097f2000004030046304402202ebb0247ca373b6b150c4ca5c7832e53deef1b32f39425380d2fa31ca880606302200456f0531c0111b4ebe16a6088c4f59a0dc10bb250156df26ec644795a50cba2007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a6a0097a40000040300473045022100f6056fcaff58ed0a8feeb8e627e905afb5adff4bfdd7f762e3cc598b5b0ca3fe02202ba06f1c7c9f37a3e08fcb24a96c6867ced87d83d17312f553d4ce359b662eae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00323d4060e695c7a674f7dbdbf8b38294537b6826f1a21344c1d1b277bca1ef7244d31354baf9d50301e1ab9608f016807cb8629fc77528d3cf2dd91082cb5fff41bb85dfb7f07ab43637dfac18ab7b2e7b66f8f8dcceacae42033ebf0f9b7bd7e097bc552d89ade463f2abe77298b035681911b4f2ab61b684c52b05c265b1e0bb27f61625ddf616b81b5f8ffc65bb4e991c7da666706bfbd23ba410dff017c8e69891cbc0a7b917e9c310eea21ebb5a2522a2f13c64ff185331541fddd4aa3279ccc65322c473157a2dd8b7a99aac90a46010f2276c8513113f9fe24e3f63c895a5d2a695bdbf86cbb882ead28124d14da52b9a0cbe79a4a1abd9966fcf0627