yes4youth.co.za

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number c5:ac:ea:14:12:ef:69:c9:0d:5e:dd:89:9b:ba:71:0c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yes4youth.co.za

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c5:ac:ea:14:12:ef:69:c9:0d:5e:dd:89:9b:ba:71:0c
Serial Number (int): 262755737903567085095235010463098630412
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 98:c5:e2:62:34:ae:e8:6f:a1:78:b7:68:d1:30:ef:ec:83:34:c6:a7
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): d9:55:89:73:c2:01:ba:59:cf:4a:aa:0f:6e:2c:47:69:f9:8c:63:91
Fingerprint (sha256): 9f:39:81:80:a4:0a:e4:53:2e:8e:9f:6d:f8:c2:bf:9f:07:5f:1d:0c:58:93:0f:d3:48:70:07:57:b7:4e:e2:af

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/XS3RadXFsAE
CRL Distribution Point: http://crls.pki.goog/gts1p5/CznYjF9ox0I.crl

Check the revocation status for certificate yes4youth.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yes4youth.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yes4youth.co.za

Other certificates including the domain name yes4youth.co.za

(limited to 100 certificates)
www.yes4youth.co.za
finnianoneill.ie
yes4youth.co.za
fundme.yes4youth.co.za
data.yes4youth.co.za
bmsdev.yes4youth.co.za
portal.yes4youth.co.za
worksp.com
my.yes4youth.co.za
st4g1ng.genesisblock.com
www.yes4youth.co.za
my.yes4youth.co.za
yb-dev.yes4youth.co.za
my.yes4youth.co.za
yes4youth.co.za
connect.yes4youth.co.za
www.yes4youth.co.za
mailam1.m1studio.co
turner.struxhub.com
app.yes4youth.co.za
www.yes4youth.co.za
fundfuture.yes4youth.co.za
portal.yes4youth.co.za
mail.yes4youth.co.za
appdev.yes4youth.co.za
bmsdev.yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za
mail.yes4youth.co.za
sfg-manching.de
www.hoohaonline.com
data.yes4youth.co.za
kaif.oskarunt.com
yes4youth.co.za
www.yes4youth.co.za
my.yes4youth.co.za
www.yes4youth.co.za
portal.yes4youth.co.za
fundafuture.yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za
sni151887.cloudflaressl.com
mail.yes4youth.co.za
data.yes4youth.co.za
www.yes4youth.co.za
yes4youth.co.za
www.yes4youth.co.za
dev-timu.yes4youth.co.za
bmsdev.yes4youth.co.za
manage.yes4youth.co.za
yes4youth.co.za
yes4youth.co.za
www.pedsqbank.com
data.yes4youth.co.za
www.shegergebeta.com
www.yes4youth.co.za
fundafuture.yes4youth.co.za
www.pedsqbank.com
my.yes4youth.co.za
mail.yes4youth.co.za
yes4youth.co.za
yes4youth.co.za
queme.smartcitysolutions.biz
portal.yes4youth.co.za
fastify.pandicorn.app
www.yes4youth.co.za
my.yes4youth.co.za
appuat.yes4youth.co.za
sni151887.cloudflaressl.com
console-dev.deeple.ai
dev.dgraphcloud.com
yes4youth.co.za
bmsdev.yes4youth.co.za
fundme.yes4youth.co.za
fundme.yes4youth.co.za
www.hipposrl.com
mail.yes4youth.co.za
fastify.pandicorn.app
www.yes4youth.co.za
saocristovaovendas.med.br
sni151887.cloudflaressl.com
my.yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za
yes4youth.co.za
admin.gruposabsas.com
firebase.laska.io
www.yes4youth.co.za
ganbei.lader.tw
www.soteam.app
sfg-manching.de
fundafuture.yes4youth.co.za
mail.yes4youth.co.za
portal.yes4youth.co.za
bmsdev.yes4youth.co.za
bmsdev.yes4youth.co.za
do-it.app
yes4youth.co.za
portal.yes4youth.co.za
yes4youth.co.za

Certificate

The complete raw certificate details for yes4youth.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ99Eb4h2EkAjqzsHels
wrxvIY1LUjhcWkl6dvftCyfM5u+GdfcFG1N9wuZSjNFOUl48yNuAENVMFbWiXGHj
0l80PkPUQiZ8UyLp970QsuuPM9PyDyC8n5Eg5Zl0KV1OvvyGEQdnjgcW8fN6eKXS
ZqZZ/PPBOVlqEr5pLh9NhNQmybjj8gwglUzsQScfz2ysoyIiH3AlR0eppGxlE9er
avGDw+RPa0/c+y6x7yVhTurkHOr66xyokh2BP+QVMiiHw6pWc4OY5jrC2SilbrCb
33Xyrs22FsCvITBmSKfPjk5N0hcYvSgJna/VprD1O7AulRza4lJE0cjFGwc6Z7/C
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262755737903567085095235010463098630412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 02:12:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 02:12:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yes4youth.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20781728750620024655655339554190306898884428000250665560741717150189730639574271424525763973337614864308071289750015382173290212920366570168338530370784169789948785958671461378780769043375080469284565694360275331953798026352883992586605818484195760305844983198401459713019362486519168146478623663310215114540423743421131245093702738848180361598849790250270965324597979738988687803741887622929440825661951468173276029030317853190444318381912061823714489345538231791554009176268964905687905096118028079339205605181938825411786100410650584925299171090513435227934817771212703608265835835127878090500510873863160300814889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98c5e26234aee86fa178b768d130efec8334c6a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/XS3RadXFsAE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes4youth.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/CznYjF9ox0I.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c13e9ea500000040300483046022100ede4cf43d80ba5872cd6e3a156edbe35dc815d41a5ba2e05bc4982c5d6ea00a1022100a4e306ebd7da2121261870d04f4306ca450a277631fcfca2a688d156d535cb9800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c13e9ea51000004030047304502207914bb502c7cc3308954d6782f9202bd4af384d43accc92fddaa2a154de1615a022100998b4cd6900785a3e7a517b1cad9fefe07a077aea2559b57f3763b5b6675925d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00845446906c6a1488242b63f39e425916f0fc43cf1b3c99a3adee4afcb8d39c1951418cdee5cbea4f1a1f5c7f9a213f157b7aa2b059e0944bf32b921ffe9bdde90e2d440793b5c2d6d6438b6d05927610143a617592b4b2df1a7227d1f03c3f8d1f69b04caf580b0e247fde49b2446961cefc700aa7a9133f035ba814e8abd5a63532a58b85a949f73e8c73b745258f46a150b74d0f2d3cba102e5c4315cf7189108c7e83265b636a0df13840c8d9755ffd0d10058da17502119882dddbc707a637fd364ca5c6da677b4c1f1b255e036ebc75a1e5af6b74dd88c9d81f85df83a5fb53f154af56c7d2bfc392abd27d26d8ffaa5931b4472cf1d207343d0a31ff7e