writepro.donegalgroup.com

- Donegal Insurance Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f7:65:06:15:d9:4a:1b:ea:00:00:00:00:50:eb:62:9b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Donegal Insurance Group

Organization: Donegal Insurance Group
State / Province: Pennsylvania
Locality: Marietta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f7:65:06:15:d9:4a:1b:ea:00:00:00:00:50:eb:62:9b
Serial Number (int): 328843860367083112369612070368446210715
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3b:dc:d6:88:7f:7c:51:f5:b5:70:41:05:19:8b:f0:47:c5:67:4b:4f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5e:ae:c9:71:a5:2b:f9:66:e0:25:0f:53:55:2a:92:47:bf:a4:84:3d
Fingerprint (sha256): 88:ca:8a:0d:9c:9b:64:f3:e0:22:e4:3d:8f:38:f9:f4:d6:96:76:d1:fc:ba:e2:f1:96:76:26:29:a1:fe:21:cd

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate writepro.donegalgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for writepro.donegalgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

writepro.donegalgroup.com

Other certificates including the domain name donegalgroup.com

(limited to 100 certificates)
qa-user.donegalgroup.com
test-gw-lem-iso.donegalgroup.com
www.donegalgroup.com
test-www.donegalgroup.com
test-qtest-jira.donegalgroup.com
test-cdn.donegalgroup.com
esig.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
selfservice.donegalgroup.com
pilotprod-writebiz.donegalgroup.com
test-www.donegalgroup.com
test-external-ws.donegalgroup.com
sharepoint.donegalgroup.com
test-vueapp2.donegalgroup.com
test-qtest-jira.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
guestportal.donegalgroup.com
qa-external-ws.donegalgroup.com
www.donegalgroup.com
ts-test.donegalgroup.com
test-mobile.donegalgroup.com
mobile.donegalgroup.com
qa-user.donegalgroup.com
test-www.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
test-vueapp.donegalgroup.com
writebiz.donegalgroup.com
test-www.donegalgroup.com
my.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
test-wsag.donegalgroup.com
nautilus.donegalgroup.com
dmi-frw-barracuda.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
qa-www.donegalgroup.com
writebiz.donegalgroup.com
qa-cdn.donegalgroup.com
test-www.donegalgroup.com
test-digportal.donegalgroup.com
vue.donegalgroup.com
api.donegalgroup.com
api.donegalgroup.com
vpn-dr.donegalgroup.com
qa-www.donegalgroup.com
pas.donegalgroup.com
test-user.donegalgroup.com
pas.donegalgroup.com
sso.donegalgroup.com
writebiz.donegalgroup.com
expressway1pri.donegalgroup.com
qa-external-ws.donegalgroup.com
test-writepro.donegalgroup.com
prod-qtest-jira.donegalgroup.com
test-external-ws.donegalgroup.com
esig.donegalgroup.com
qa-user.donegalgroup.com
test-writebiz.donegalgroup.com
test-wbportal.donegalgroup.com
qa-cdn.donegalgroup.com
qa-www.donegalgroup.com
mergers.donegalgroup.com
wbportal.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
teradiciconsole.donegalgroup.com
remotedesktop.donegalgroup.com
smtp.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
wb-portal.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
cdn.donegalgroup.com
test-user.donegalgroup.com
www.donegalgroup.com
isosearchtst.donegalgroup.com
ts-test.donegalgroup.com
expressway1sec.donegalgroup.com
test-vue.donegalgroup.com
test-gw-symbility.donegalgroup.com
perf-vueapp2.donegalgroup.com
qa-user.donegalgroup.com
writepro.donegalgroup.com
www.donegalgroup.com
perf-www.donegalgroup.com
test-user.donegalgroup.com
losscontrol.donegalgroup.com
director.donegalgroup.com
test-wsag.donegalgroup.com
losscontrol.donegalgroup.com
cdn.donegalgroup.com
seg.donegalgroup.com
ts-prod.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
external-ws.donegalgroup.com
www.donegalgroup.com
test-vue2.donegalgroup.com
writebizqa.donegalgroup.com
cdn.donegalgroup.com
leapfrog-ssl-55.gcs-web.com
writepro.donegalgroup.com
user.donegalgroup.com
www.donegalgroup.com

Certificate

The complete raw certificate details for writepro.donegalgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fVTXCpOtrIf7nSbD3ni
EdSY8jNqSxrzIRDVHtsiQBhxY33E8+Y8Rvmoo1ylbrivRGsA/iSFBvaLU2baVlxf
2XGmnKJh6amvwWvttpW3cEpzC40FDHCzZkfQnbfXU7DUgquNcWnBKqLnlRdvlYuT
DoNimqkBU8OUFQFQTsTVJH+X/pJbRGQb7za5WwUkQOy+GIKk3r98222jJRSkZoDv
lmfyTNXy8/MmkIP1Ab3z0D7oIqUgkS2CscSIxRVvSdNg7vAHPmIrgWN08J4kmVTX
N3y6yVoTIN386N09SD35OLoZ4TSFvagaQbSVAxuqxBryMPDYbgWxdZeUGBUZD7w+
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328843860367083112369612070368446210715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 17:35:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 18:05:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marietta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Donegal Insurance Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'writepro.donegalgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27009733532281728197196560683176481038237700916436196168825335741062445361966562453388819232193239784163832689410928248333925968727076477842695445059847463325781133855738297834670268778682829102649389025290278580996126138352796588397722745483975296440928846355451374345494850054697425921042612637998948208210377447337383155791353144130699211159616019206089372265827960210184486274893725123803898113246169096114597083743722752140368435663852935728753288227357950508190746652270296375510463215327616325935072278692286036297395183890866890804283672258240045141708837118716415348448874447067056510458045153911175705804309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writepro.donegalgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bdcd6887f7c51f5b5704105198bf047c5674b4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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