portal.yes4youth.co.za

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:37:0c:32:83:8e:5b:b3:6a:05:be:bf:8a:90:33:86 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.yes4youth.co.za

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:37:0c:32:83:8e:5b:b3:6a:05:be:bf:8a:90:33:86
Serial Number (int): 5602735701397085342384706333696865158
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2e:29:29:ef:05:12:99:f9:6f:de:06:a1:d6:2f:b7:3c:46:ca:ee:72
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 1d:6b:3b:dc:5c:c0:3e:9b:ce:21:34:50:75:4f:04:44:54:4a:b2:75
Fingerprint (sha256): 45:62:78:3a:12:0a:36:dc:33:49:6f:5c:72:6d:cc:70:10:d5:26:aa:6e:89:61:90:50:cb:ff:41:cd:90:3e:85

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate portal.yes4youth.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.yes4youth.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.yes4youth.co.za

Other certificates including the domain name yes4youth.co.za

(limited to 100 certificates)
www.yes4youth.co.za
finnianoneill.ie
yes4youth.co.za
fundme.yes4youth.co.za
data.yes4youth.co.za
bmsdev.yes4youth.co.za
portal.yes4youth.co.za
worksp.com
my.yes4youth.co.za
st4g1ng.genesisblock.com
www.yes4youth.co.za
my.yes4youth.co.za
yb-dev.yes4youth.co.za
my.yes4youth.co.za
yes4youth.co.za
connect.yes4youth.co.za
www.yes4youth.co.za
mailam1.m1studio.co
turner.struxhub.com
app.yes4youth.co.za
www.yes4youth.co.za
fundfuture.yes4youth.co.za
portal.yes4youth.co.za
mail.yes4youth.co.za
appdev.yes4youth.co.za
bmsdev.yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za
mail.yes4youth.co.za
sfg-manching.de
www.hoohaonline.com
data.yes4youth.co.za
kaif.oskarunt.com
yes4youth.co.za
www.yes4youth.co.za
supervisorapp.yes4youth.co.za
my.yes4youth.co.za
www.yes4youth.co.za
portal.yes4youth.co.za
fundafuture.yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za
sni151887.cloudflaressl.com
mail.yes4youth.co.za
data.yes4youth.co.za
www.yes4youth.co.za
yes4youth.co.za
www.yes4youth.co.za
dev-timu.yes4youth.co.za
bmsdev.yes4youth.co.za
manage.yes4youth.co.za
yes4youth.co.za
yes4youth.co.za
www.pedsqbank.com
data.yes4youth.co.za
www.shegergebeta.com
www.yes4youth.co.za
fundafuture.yes4youth.co.za
www.pedsqbank.com
my.yes4youth.co.za
mail.yes4youth.co.za
yes4youth.co.za
yes4youth.co.za
queme.smartcitysolutions.biz
portal.yes4youth.co.za
fastify.pandicorn.app
www.yes4youth.co.za
my.yes4youth.co.za
appuat.yes4youth.co.za
sni151887.cloudflaressl.com
console-dev.deeple.ai
dev.dgraphcloud.com
yes4youth.co.za
bmsdev.yes4youth.co.za
fundme.yes4youth.co.za
fundme.yes4youth.co.za
www.hipposrl.com
mail.yes4youth.co.za
fastify.pandicorn.app
www.yes4youth.co.za
saocristovaovendas.med.br
sni151887.cloudflaressl.com
my.yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za
yes4youth.co.za
admin.gruposabsas.com
firebase.laska.io
www.yes4youth.co.za
ganbei.lader.tw
www.soteam.app
sfg-manching.de
fundafuture.yes4youth.co.za
mail.yes4youth.co.za
portal.yes4youth.co.za
bmsdev.yes4youth.co.za
bmsdev.yes4youth.co.za
do-it.app
yes4youth.co.za
portal.yes4youth.co.za

Certificate

The complete raw certificate details for portal.yes4youth.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SEuheC0woJD7bRUGBoc
ybLA1VR0/H1i3ZyZv77Rc3ZCGJ+0xQmu10gEIAEjVKIIz8H7eIwnHreotuvv6yWS
1sMkmdI381njmpq9dyN0C5/EnPXoLNn5mNd0ObgAemq8JL8SWW3AcuGmjRf7v8vk
YtTjr+Ugr5G7PtNtB4DlWl1lsz7k0+vA1kfdb+W8hni/jd9OMN7H1m7WXZA99Ybr
nQV1gTcBHt3hdEsti5W8u7h8FesVZ8V9lPPZrX5SgElMMT5OQO/XR9k7coZ/9spr
f82jpF8HP5XzWwTtNbkIUfjVgL7D6/HBvAg1RrGUoHXWA6/9lTsD39Ya31sT52Au
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5602735701397085342384706333696865158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.yes4youth.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28419981138419781309420695788403696603265574663542825544789089141111269037393240494688029341755348935459804080557903332445314612384038233588722206556781479734919064421083455037058522215535846731969363104084345380386311295936972565072236962203852809015710549579833031981982771737286960335499645939480388204077757375264173393244085762901788587667290073943469466863417376498809409829813773734655630346377779087089771567560421942144426154358786124389167260055173610185457816521073855163108258954920272140932632765124707741307394068879059739759216460518686521272222378330442262426891948989837556580266440783948238620208857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e2929ef051299f96fde06a1d62fb73c46caee72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.yes4youth.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001882fb453bf000004030047304502200d2cb9cc4b51ae26be7c15d61ba885f0d1ef9c435a23dddf8e19a9b7679e028d022100c3cde33525fa9a6266a4ed080259eb81be9073f312b8fc9fcca4585483d6bd0b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882fb453d80000040300473045022100dc7474d29cdaafa3ea6c8a6faa26d35f670f931eb74f3a3bb0cb95029a328faf02203703c1368255695a61c196b05d3d6f180e5ab0e7f424b2e2438c8820e6e61fcf007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001882fb453f1000004030046304402205e2838d9cd7b8286a17eede6702d5c64e9cb3b3e27b92b3fbff6b0ba364c2d93022056af1eb3ba032ab43ce92cb87115ba671248342729b72080d7f45ce52bd6d706
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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