mail.presbyterianhomes.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ce:37:f3:0e:78:4e:e2:51 was issued on by Starfield Technologies, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=mail.presbyterianhomes.org

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): ce:37:f3:0e:78:4e:e2:51
Serial Number (int): 14859612739005768273
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 3f:45:ec:b6:fc:7c:26:34:e8:64:f4:84:52:71:45:d3:4f:19:35:48
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 1d:41:cf:b8:7a:92:f0:e9:c4:c8:ae:d5:3b:14:e4:19:55:60:08:41
Fingerprint (sha256): 15:88:66:f3:19:1f:34:1d:0f:5d:02:83:5d:17:2e:85:8a:5f:e2:0f:72:87:c1:8e:95:4f:81:c7:74:a5:89:d8

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-656.crl

Check the revocation status for certificate mail.presbyterianhomes.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.presbyterianhomes.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.presbyterianhomes.org
autodiscover.presbyterianhomes.org
www.mail.presbyterianhomes.org
mail.presbyterianhomes.org

Other certificates including the domain name presbyterianhomes.org

(limited to 100 certificates)
*.presbyterianhomes.org
servicedesk.presbyterianhomes.org
wpuca.presbyterianhomes.org
tmuca.presbyterianhomes.org
blog.presbyterianhomes.org
mail.presbyterianhomes.org
blog.presbyterianhomes.org
*.presbyterianhomes.org
resources.presbyterianhomes.org
myemail.presbyterianhomes.org
email.presbyterianhomes.org
soporte.familiabercomat.com
soporte.familiabercomat.com
presbyterianhomes.org
mail.presbyterianhomes.org
sentry.presbyterianhomes.org
soporte.familiabercomat.com
citrix.presbyterianhomes.org
presbyterianhomes.org
presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
email.presbyterianhomes.org
about.presbyterianhomes.org
www.presbyterianhomes.org
wpvpn.presbyterianhomes.org
www.presbyterianhomes.org
soporte.familiabercomat.com
abouts.presbyterianhomes.org
rews.presbyterianhomes.org
email.presbyterianhomes.org
www.presbyterianhomes.org
resources.presbyterianhomes.org
resources.presbyterianhomes.org
www.presbyterianhomes.org
mail.presbyterianhomes.org
resources.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
resources.presbyterianhomes.org
soporte.familiabercomat.com
*.presbyterianhomes.org
secure.presbyterianhomes.org
abouts.presbyterianhomes.org
soporte.familiabercomat.com
presbyterianhomes.org
help.helaclothing.com
www.presbyterianhomes.org
*.presbyterianhomes.org
myemail.presbyterianhomes.org
*.presbyterianhomes.org
resources.presbyterianhomes.org
soporte.familiabercomat.com
soporte.familiabercomat.com
presbyterianhomes.org
soporte.familiabercomat.com
www.presbyterianhomes.org
myemail.presbyterianhomes.org
www.presbyterianhomes.org
www.presbyterianhomes.org
presbyterianhomes.org
wpuca.presbyterianhomes.org
abouts.presbyterianhomes.org
www.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
blog.presbyterianhomes.org
*.presbyterianhomes.org
soporte.familiabercomat.com
tmuca.presbyterianhomes.org
soporte.familiabercomat.com
servicedesk.presbyterianhomes.org
ldaps.presbyterianhomes.org
mymobile.presbyterianhomes.org
soporte.familiabercomat.com
soporte.familiabercomat.com
soporte.familiabercomat.com
remote.presbyterianhomes.org
remote.presbyterianhomes.org
mail.presbyterianhomes.org
abouts.presbyterianhomes.org
remote.presbyterianhomes.org
about.presbyterianhomes.org
www.presbyterianhomes.org
mymobile.presbyterianhomes.org
lfuca.presbyterianhomes.org
soporte.familiabercomat.com
godrive.presbyterianhomes.org
help.helaclothing.com
blog.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
about.presbyterianhomes.org
presbyterianhomes.org
mymobile.presbyterianhomes.org
blog.presbyterianhomes.org
*.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
mymobile.presbyterianhomes.org

Certificate

The complete raw certificate details for mail.presbyterianhomes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZL+L2WtY8Cltbw2jV0S
tJDEBrJEBWwlxawBiao8d0m2+JpsChgWHx1JkCSKXH1krqHQoqfFaGTHGFVsJzZq
d2WeD+R9EqVhS//jwxoNU9VVdhoeA73+CrYcoXVB1BXI8YSGj+HfOp4v9aOt8bHv
9U6JAzO8idYvEI3zjcDcrET5BGcOuK04GUe7/u1HRNj+FVZfgTZBJ7lyIetqOPLe
XrHRr3PDPVOYzOZ+DZ2kUyJ8lt2j1hFQ7EzMdBdDlDiFXuHwRXAofwUTcgvVE/mO
A+emiIqVXXRjP6YN4wts8taQM+L4s/8r+JN5m9+W9Aqxpm8fEByd80mkQqhUan4k
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14859612739005768273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 17:00:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-21 17:00:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.presbyterianhomes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28476103523190397194046329091959352626438623708227592896809388181432988472841809027759088380294552481415362895767536300410046695838594914823382917458104397960831782945928791900688633169711580836151627412556783188096163297827182768889423862429634870698733789735113333258137521890119501095933985091107799153292094813019817909563739705779972168270533655335482538233017499632155196448884800305510809600073718076868081650810131967119943599656966152733121192666435647530690658168124807451334886761028782643584244747331981545592578178391882998241948873037383051675489125565048207051507902640787160567668596909805595747296397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-656.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f45ecb6fc7c2634e864f484527145d34f193548
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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