www.mstmaatroosevelt.org

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 52:cd:c9:e1:11:7e:14:e6:82:74:d0:92:55:43:66:51 was issued on by ZeroSSL.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mstmaatroosevelt.org

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate will expire on

Certificate Details

Serial Number (hex): 52:cd:c9:e1:11:7e:14:e6:82:74:d0:92:55:43:66:51
Serial Number (int): 110065211106443309456907574074954442321
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a4:4f:d9:cd:2c:82:9b:9e:87:89:25:aa:5d:2e:e5:93:7f:ed:31:5a
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 63:23:87:78:d8:90:b2:d4:2b:a5:58:22:2f:5c:45:99:5b:13:c6:5f
Fingerprint (sha256): 04:24:c3:68:77:13:21:4d:a7:c6:1c:52:40:59:0f:c3:5d:6c:05:9e:e6:6a:4d:f2:a8:77:d9:92:e4:f9:7e:76

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate www.mstmaatroosevelt.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mstmaatroosevelt.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mstmaatroosevelt.org
admin.mstmaatroosevelt.org
mstmaatroosevelt.org

Other certificates including the domain name mstmaatroosevelt.org

(limited to 100 certificates)
www.mstmaatroosevelt.org
www.mstmaatroosevelt.org
admin.ccti.pgsd.ms
www.mstmaatroosevelt.org
admin.ccti.pgsd.ms
www.holyfamilycatholicacademy.net
admin.ccti.pgsd.ms
www.nolafsme.org
admin.ccti.pgsd.ms
www.nccs.k12.nc.us
admin.ccti.pgsd.ms
ac21.clps.org
ac21.clps.org
ac21.clps.org
www.bendist25.org
admin.ccti.pgsd.ms
mstmaatroosevelt.org
www.stlouis-batesville.org
benchmarkbobcats.org
cra.freeholdtwp.k12.nj.us
admin.ccti.pgsd.ms
admin.bands.dekalbcentral.net
admin.aes.acsc.net
admin.es.lorenaisd.net
cet.edu.mx
admin.chms.mx
admin.benchmarkbobcats.org
moreno.bhusd.k12.ca.us
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
www.southernwakeacademy.org
shs.lskysd.ca
admin.ersk.acsc.net
www.mdsummerschool.com
admin.fges.davidson.k12.nc.us
admin.acsc.net
admin.bands.dekalbcentral.net
ccti.pgsd.ms
admin.chuckey.greenek12.org
zoraellisjh.net
www.thomasolaeta.school
2.southampton.k12.nj.us
admin.sqhs.monroe.k12.tn.us
admin.ps17queens.com
www.mstmaatroosevelt.org
popejohn.org
admin.ups.lskysd.ca
harpethhighccs.net
svhs.wvsd.com
coahomak12.org
mustangsla.org
ac21.clps.org
www.rosemont78.org
admin.acsc.net
hsp.clps.org
admin.bcca.bibbed.org
crumpton.mpusd.net
admin.bcca.bibbed.org
vapa.mvusd.net
www.mstmaatroosevelt.org
www.colegioedgarmorin.edu.mx
admin.sherard.coahomak12.org
admin.ccti.pgsd.ms
ces.shelbycs.org
www.trinitystelementary.com
www.stroseschoolwilmington.org
www.ckchicago.org
2.southampton.k12.nj.us
ac21.clps.org
westcheathamccs.net
www.stjosaphat.net
invictusprep.com
admin.benchmarkbobcats.org
admin.chms.mx
admin.avrlacademy.org
www.centroculturaljalilgibran.edu.mx
oglesby.cps.edu
ckcs.lskysd.ca
admin.greatwestern.kcusd.com
2.southampton.k12.nj.us
admin.rosemont78.org
www.swake.org
ac21.clps.org
ups.lskysd.ca
www.stjosephpomona.org
www.cardinalritterprep.net
invictusprep.org
ps086.com
www.cardinalritterprep.org
admin.cvhs.cv.k12.ca.us
www.monte-rosa.mx

Certificate

The complete raw certificate details for www.mstmaatroosevelt.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRxgszdXdDAsXqBxWqaT
oxs+Eb43mGeUTMko2bBG1SxrjS1c65BIjXKfl+PwfuVynG2ESSnNvEdb1quCWbWH
toygDVlaCqRwJkmCn3rpJvI7Datkz9MBrQ++vACTkbXbeXmxLlVpyVo6rTg3pBhm
3NS2Up6DWM+quM1WQghDaDTo4YagNzbRn+UVj98GCgFKRurtwZhJB74pGeL9ku4N
coqfA6oPjSbQAbkbdd+5zV6Jy2jZhVjfBRUYNnN96k8H0b93FTO4kShqmp95E3GP
5kGO6emfFpsTlTT+FbtHl5pd1wcv3HhLqfn/7EmNw5C2e4UPCD3AfXIVn+Rn2wzR
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110065211106443309456907574074954442321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mstmaatroosevelt.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23873033221075080354873331748964378898366838016433366982156796037670656767972673162612355123194229060219577445328709360999451689559041507816556713103156371089094878144517155544659511961376447294362042670553008237428823223212289154502513212880346166258851130036847518857664190058118523405682947492760641897583069977215177632951308072387876675201712558831182046187465141197194968415549276823550517693622931495076813596533085086918200923759835411821465022170437352637062965717882104235935990789006447970966038561157820062230456227633768211111665270973908975574277513272824229422032712403281821594016183506663253516013849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a44fd9cd2c829b9e878925aa5d2ee5937fed315a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018eeec549760000040300483046022100c02d0c1221d9b0d133a096ae68121ae2134ba4dafb6125112637e7d4367df34b022100c0cee5fa500451bedd2d001274cb8b93d954cc992c849522ba3565ae6679c0f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eeec54a1700000403004630440220613eec4bcd3f9e70fc9223bd0184ffd6b7f78806a18ae326038503e735bf38a102207f33470a11817ed1d1bd69a27845578f201a05fb9b2a2b98f434c95456a38f09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mstmaatroosevelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mstmaatroosevelt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstmaatroosevelt.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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