donate.childrensmuseum.org

- The Children's Museum of Indianapolis -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 62:14:62:cc:07:e0:32:f2:0e:40:7f:3a:75:77:2f:b9 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Children's Museum of Indianapolis

Organization: The Children's Museum of Indianapolis
Organization unit: Hosting
State / Province: Indiana
Locality: Indianapolis
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 62:14:62:cc:07:e0:32:f2:0e:40:7f:3a:75:77:2f:b9
Serial Number (int): 130370193365216197906576380087925944249
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 31:1e:11:6f:ea:a5:0e:25:bf:49:74:e1:57:2d:5b:2c:19:79:05:7e
Fingerprint (sha256): 53:98:79:c5:01:06:24:01:95:89:10:43:7c:83:cc:31:ba:45:26:71:0f:41:89:35:65:08:e0:8b:15:10:fb:cb

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate donate.childrensmuseum.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for donate.childrensmuseum.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

donate.childrensmuseum.org

Other certificates including the domain name childrensmuseum.org

(limited to 100 certificates)
sportslegends.childrensmuseum.org
campaign.childrensmuseum.org
sportslegends.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
thehistory.childrensmuseum.org
*.childrensmuseum.org
ceo.childrensmuseum.org
*.childrensmuseum.org
servicedesk.tangerinelife.com
secure-usea1-1.tessituranetwork.com
salesforce.childrensmuseum.org
e-commerce.childrensmuseum.org
servicedesk.tangerinelife.com
helpdesk.roadandrail.com
secure-usea1-1.tessituranetwork.com
campaign.childrensmuseum.org
iithelp.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
sportslegends.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
campaign.childrensmuseum.org
vpn.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
campaign.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
*.childrensmuseum.org
servicedesk.tangerinelife.com
thehistory.childrensmuseum.org
ONLINESALES.CHILDRENSMUSEUM.ORG
servicedesk.tangerinelife.com
campaign.childrensmuseum.org
*.childrensmuseum.org
tickets.childrensmuseum.org
helpdesk.plan-roa.org
webmail.childrensmuseum.org
servicedesk.tangerinelife.com
appcms.childrensmuseum.org
servicedesk.tangerinelife.com
campaign.childrensmuseum.org
servicedesk.tangerinelife.com
campaign.childrensmuseum.org
donate.childrensmuseum.org
remote.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
servicedesk.tangerinelife.com
appcms.childrensmuseum.org
donate.childrensmuseum.org
*.childrensmuseum.org
campaign.childrensmuseum.org
tickets.childrensmuseum.org
sportslegends.childrensmuseum.org
servicedesk.tangerinelife.com
www.childrensmuseum.org
servicedesk.tangerinelife.com
servicedesk.tangerinelife.com
webforms.childrensmuseum.org
helpdesk.plan-roa.org
www.childrensmuseum.org
servicedesk.jalladgroup.com
secure-usea1-1.tessituranetwork.com
tickets.childrensmuseum.org
appcms.childrensmuseum.org
servicedesk.tangerinelife.com
secure-usea1-1.tessituranetwork.com
servicedesk.tangerinelife.com
secure-usea1-1.tessituranetwork.com
salesforce.childrensmuseum.org
webmail.childrensmuseum.org
helpdesk.roadandrail.com
vpn.childrensmuseum.org
help.childrensmuseum.org
webmail.childrensmuseum.org
sportslegends.childrensmuseum.org
thehistory.childrensmuseum.org
itsm.questmindshare.com
tickets.childrensmuseum.org
webmail.childrensmuseum.org
appcms.childrensmuseum.org
www.childrensmuseum.org
servicedesk.tangerinelife.com
thehistory.childrensmuseum.org
helpdesk.plan-roa.org
sportslegends.childrensmuseum.org
itsm.questmindshare.com
servicedesk.jalladgroup.com
sportslegends.childrensmuseum.org
appcms.childrensmuseum.org
campaign.childrensmuseum.org
donate.childrensmuseum.org
secure-usea1-1.tessituranetwork.com
gift.childrensmuseum.org
thehistory.childrensmuseum.org
iithelp.childrensmuseum.org
tickets.childrensmuseum.org
help.childrensmuseum.org
ncbahelpdesk.ncbal.com
donate.childrensmuseum.org
sportslegends.childrensmuseum.org

Certificate

The complete raw certificate details for donate.childrensmuseum.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qDVYi/L2aK0gOPvvyr0
C9UVFeyHQtDOjjhFR9DMuG4QI0605SlAgg29+7m+/tT4qFurwEBHytkTQ4dhjBId
WsvYJr9rzXnEWpkwUcaKS6obexjK6wQsRW+8uecvIw5YCJfR6sM+Guc2ES/jGwiV
xf8XNII58qonpB0y4hn6ANnspZLlWot2PhuCj56LNBopaWofLYI780ABnwXOplLq
J8bPLaZOChWZXWb0fX7ewYC09OeYZFS9vn3DgqAhYwwmzWtowmWSK6HbzKsm/7Q2
mnHzVb9ZhckhAgnQKwyL6xExoetPCXCUL+E7DLjKqddTmOPPtd2CF6oPo1JDWJm4
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130370193365216197906576380087925944249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Children's Museum of Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'donate.childrensmuseum.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26589354012172175661050055045025509606005597043984864108980910046872244707125184295742783061675611264114387797521595888564576119991453717490686033391048480485442526235389683206689098481989871253337804697408483531794544814295431693624057381993631805246304349573395790190784301849481872983003238752044284134654954147638049056222781215177921457886696058043031202026153736585066680127989795136569171401894967673784622170005267372450573570395435627670411764233854245511531771170487581083998657477116999433623664984665635349311691294829908763089667554892777484862854329909244707621788650335664013256901257319350381967947899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.childrensmuseum.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ab6d871b96095857dc50544bf0a4e9c9f9b6a1da0fc367cc078305fc862313dd58ff9a91319daaf8656dbe565a81784890c75c5a3a6d2deb951830236ad7f68b62c04701f05b107c0d229749094f1d15f278c97249ed6f78a755d0522d2182b9ae53c4d2fc5ac1be840d14648cc1730e2662b055b7f6eeb88667a69bc88f067f7665cae877c34df750846bf90944b3da67cc179f99f512d20c351d39c955a4c8438ce1fa372401db4aca83b4117edac57ce00c71948c9dba6f8bbf0e0e91333576dcbc28448ae6e1204c59dd8a9751dced1a70cd4bde24d81229e9aa66aa5f17f2efcecef769983b34af27a5bc747f16db044948282b89d8cbd9444b17a86b3