resources.ssat.org

Issued by R3

About this certificate

This digital certificate with serial number 03:f9:b2:86:36:d9:2c:18:c9:9d:38:ff:25:35:e1:5a:7d:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=resources.ssat.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:b2:86:36:d9:2c:18:c9:9d:38:ff:25:35:e1:5a:7d:cc
Serial Number (int): 346304466622079453204064359505090594897356
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:64:d5:85:cc:37:28:3a:dd:6a:75:a9:c4:e9:da:b0:72:23:cd:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:4f:75:fb:1e:09:70:1a:05:b2:0a:b6:61:a7:20:fd:4f:44:e3:05
Fingerprint (sha256): 01:5d:54:b4:c6:6d:04:0f:29:dd:e4:08:09:66:f8:ac:97:b4:28:53:a0:8a:1f:5e:c8:e0:01:9c:cd:99:af:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate resources.ssat.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resources.ssat.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resources.ssat.org

Other certificates including the domain name ssat.org

(limited to 100 certificates)
resources.ssat.org
crm.ssat.org
mercury.training.ssat.org
mercury.training.ssat.org
dev.ssat.org
blog.crm.ssat.org
search.ssat.org
ssat.org
dev.ssat.org
help.ssat.org
dev.ssat.org
help.ssat.org
ssat.org
ssat.org
crm.ssat.org
ucvpn.ssat.org
help.ssat.org
resources.ssat.org
bossmx.ssat.org
vwww.ssat.org
hcmiraefund.xn--com--www-9g0mygr38ivqf6vkjpejs1i.ssat.org
www.ssat.org
search.ssat.org
www.ssat.org
dev.ssat.org
help.ssat.org
xn--www-r14ez73btn0f.ssat.org
search.ssat.org
hcmiraefund.xn--com--www-9g0mygr38ivqf6vkjpejs1i.ssat.org
dev.ssat.org
xn--www-ll0hk7afz2bgu7a3xg.ssat.org
ssat.org
wlan.ssat.org
resources.ssat.org
wlan.ssat.org
search.ssat.org
infawiki.ssat.org
dev.ssat.org
kuku.ssat.org
developers.c.ssat.org
resources.ssat.org
www.ece.ssat.org
lyncdiscoverinternal.ssat.org
ssat.org
xn--www-r14ez73btn0f.ssat.org
dev.ssat.org
www.ssat.org
mercury.training.ssat.org
crm.ssat.org
resources.ssat.org
xn--www-ll0hk7afz2bgu7a3xg.ssat.org
resources.ssat.org
ssat.org
dev.ssat.org
www.ssat.org
www.ssat.org
blog.crm.ssat.org
apps.hive-uat.ssat.org
wwww.ssat.org
aol.ssat.org
developers.c.ssat.org
blog.mercury.training.ssat.org
ssat.org
resources.ssat.org
search.ssat.org
agentplusservices.ssat.org
juliet.ssat.org
infawiki.ssat.org
dev.ssat.org
search.ssat.org
cloudcenter.ssat.org
admin-internet.ssat.org
crmauth.ssatb.ssat.org
help.ssat.org
eye.ssat.org
ssat.org
resources.ssat.org
ww.ssat.org
lyncdiscover.ssat.org
aol.ssat.org
vwww.ssat.org
app.ssat.org
crm.ssat.org
ssat.org
resources.ssat.org
dana.ssat.org
ssat.org
dev.ssat.org
search.ssat.org
dev.ssat.org
www.ece.ssat.org
search.ssat.org
dev.ssat.org
m.ssat.org
dev.ssat.org
blog.m.ssat.org
admin-internet.ssat.org
*.ssat.org
search.ssat.org
*.ssat.org

Certificate

The complete raw certificate details for resources.ssat.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvltVNG/gidS/iLQQouEj
YenV+cSEVfvXsYdxiL5KMg4NVvhne4uvBFpN5msYO4+uV6+ZV2L/gkanFaFM1w7a
kj8Bg+Pc+lPA3tPKUC8Mk7ti/Lsfk1sgX5gA0PCD9nrrL1kOkF5UlOz8sub2COAI
aBwU2usCpiyz3+dxATPPiffEIG5MFA51zprPyADv0gMiKdxo8kHLrKILeKeguphk
jig177Ac4Ah/cOT4uZujoGHce/goac4TB3B8aRRtDePBVvWKKRyW1ZKh0qKrTktT
DHrv8fObFnD8ScrD1zY4QBMpXsUrTBaC1SWSkUpSKeFbOYwBjPqapKMNoBX7yQy7
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346304466622079453204064359505090594897356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-14 21:19:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-12 21:19:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resources.ssat.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24030315841287797079315592074493999575336962277112071613004365498419855857603962984258354817905726719026023995994672200393497527078356320882192412144216965497331117742178321463494809881908072242252311454458677997890448679032456282977332113251456344994369985641111260609496602027706816160524645710964997174141268813336957196363393847061441803798877842008312660642770104064363213578293929835346188877898175611688270532927000367917923299298155916566918656036992910065145531889830479417643572963061249309172964969972499611213896789301900771797547209450345547202093737638634406568241922257615700263628290663372187977431883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac64d585cc37283add6a75a9c4e9dab07223cde1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.ssat.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000180c4a793d9000004030046304402201618f9863f7794b15695e41221a9564203b97e3d78aa1629b962c240227678ed022022e6108f59890a9a7a3888aa778785042de272128324f457ec629de7ea0781c700760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000180c4a795dc0000040300473045022100ee7fe4f083af4b950046697845bb5b193378a7d86c9b97d5840676e8fa9d9e0f022012717d2d97ad8115413cdb829e72f46083f584a9980923987ba8ee1a44b38bad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048958e8cf3e4256343e9415db65b1a73b95f4c3fcb321e51db9713b7409e534f7e3edf36f1490d45b6d55d11cfa78d5bc25f68373a40ed1f25c5fc81a2d8b4a515ea4a961b7f8902ea0c6629f238c507d8a891d1ddc568c0e47fe1b2a2e44eff4c87a6fde0d798fc452071deb7e9db276c927cc00da56e807094880f0b2953629ea79bc299f130f618de30a68c197fda93a3f89ea056d8d6a9fc9a402b8edd9e12334cd80b3a807a3250ab566dbb4a34b3fb65a4435604bc9e05aa006e6b2db261dd1322e3cd4dc83d212338586c5e7af2d23aa4c742bd2ac703360399b53c95b9f282465f55518dedec76a7fd2b5e900f4d008411c224dc1f799b8fc0dcff00