grandronde.org

- Confederated Tribes of the Grand Ronde Community -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 15:5e:7b:8b:5a:b6:9e:c0:15:53:d8:44:3d:ff:a9:03 was issued on by GeoTrust Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Confederated Tribes of the Grand Ronde Community

Organization: Confederated Tribes of the Grand Ronde Community
Organization unit: Information Systems
State / Province: Oregon
Locality: Grand Ronde
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:5e:7b:8b:5a:b6:9e:c0:15:53:d8:44:3d:ff:a9:03
Serial Number (int): 28404369593355770826573769872028707075
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): d4:76:8f:a0:3a:c2:b1:ae:16:4d:e3:e8:1d:25:09:7c:f5:fb:f3:01
Fingerprint (sha256): 49:59:cd:a5:8d:08:d5:2f:3d:6b:f3:f6:d5:9c:f8:21:25:6e:5b:13:1e:7e:d7:0a:3d:43:5a:0d:ca:e0:d6:8e

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate grandronde.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandronde.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thecommunityfund.com
autodiscover.thecommunityfund.com
exchange.grandronde.org
email.grandronde.org
autodiscover.grandronde.org
mail.grandronde.org
www.grandronde.org
grandronde.org

Other certificates including the domain name grandronde.org

(limited to 100 certificates)
*.grandronde.org
techstop.ats-inc.com
helpdesk.edmontonstatebank.com
*.grandronde.org
helpdesk.grandronde.org
helpdesk.edmontonstatebank.com
email.grandronde.org
grandronde.org
help.yonkerscontractingco.com
techstop.ats-inc.com
service.upperlinehealth.com
*.grandronde.org
grandronde.org
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
grandronde.org
grandronde.org
help.yonkerscontractingco.com
*.grandronde.org
service.upperlinehealth.com
*.grandronde.org
helpdesk.edmontonstatebank.com
mobile.grandronde.org
helpdesk.grandronde.org
service.upperlinehealth.com
*.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
grandronde.org
helpdesk.grandronde.org
*.grandronde.org
helpdesk.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
techstop.ats-inc.com
helpdesk.northstarcasinoresort.com
weblink.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
help.yonkerscontractingco.com
email.grandronde.org
helpdesk.edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
grandronde.org
service.upperlinehealth.com
help.yonkerscontractingco.com
grandronde.org
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
weblink.grandronde.org
service.upperlinehealth.com
service.upperlinehealth.com
helpdesk.northstarcasinoresort.com
service.upperlinehealth.com
grandronde.org
service.upperlinehealth.com

Certificate

The complete raw certificate details for grandronde.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nPBRrtqXCjezA8tvOEa
nNzN8BYPMZV553tJRiSS8MOys93Mchx/BvNAP3GVKfoEENag5RVlgczDpvXBYf3I
Ul93pTDQHjp0jN8OsGf3NWYc9J9/nWvWgG9QCAX9Z8htKSjgPTMY2RByef4dPMly
PzemBL/HkoHJhgDcqS/8H3bsYoySLYYdepdh8Kpgy5wSqtBxZVbnfZJGk9uuuYqO
YJJ5JIvIA2tTchAmprw2Suhsiw8TQuY2MAKYF6Gc8kDdJyi+2owvLuieSfbW6EXu
SfwH1pzzn0PDzVUF9i/Vm4gub88Q/uiHsrly6E7BEt7HGTG93bmnRtrT+7/MYvS/
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28404369593355770826573769872028707075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Grand Ronde'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Confederated Tribes of the Grand Ronde Community'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'grandronde.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26567124953674825158383994803487758151417066039497251472506119275646781299953264657807141380529872347459530904227701161096074656430189383162282022834312782414392543504884090706007468072939274104223930348226229322102611355236054222711602710040204722897286079610402866239125004887280800285359438403375681394770428324226854466410338548503357795962746757643347699598281700183375643033512553325143394106125471998617519142473294543045970230747842038695031455160446985049131273826131399831441425656509895412713742329987090387375132055264778351393988491675396589408788790537576947959031958030446683266149718924717533726818291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecommunityfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thecommunityfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandronde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandronde.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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