www.stvfschool.org

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 25:96:b7:50:b5:1f:68:7b:f5:c9:86:eb:13:64:37:92 was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.stvfschool.org

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 25:96:b7:50:b5:1f:68:7b:f5:c9:86:eb:13:64:37:92
Serial Number (int): 49963998448087337729401111317047424914
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 95:06:2a:02:99:c5:7b:a9:be:a8:3e:d8:57:58:1f:30:e4:80:50:76
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 85:b1:c7:e6:26:45:ff:30:4c:8c:75:e5:d9:2f:1f:dc:57:7a:0c:56
Fingerprint (sha256): 17:34:94:eb:55:f4:e5:8d:43:ab:47:3b:ea:88:91:f3:c2:a0:0b:36:d7:26:49:4b:ff:fe:b2:6d:cc:43:96:2b

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate www.stvfschool.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stvfschool.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stvfschool.org
stvfschool.org

Other certificates including the domain name stvfschool.org

(limited to 100 certificates)
admin.beafriar.com
admin.facs.fentoncharter.net
acecharterhigh.com
sphstigers.org
admin.beafriar.com
admin.beafriar.com
www.stvfschool.org
admin.beafriar.com
acecharterhigh.com
admin.beafriar.com
pechs.net
acecharterhigh.com
acecharterhigh.com
hokulani-elementary.com
www.westfieldfriends.org
flacsms.flacsnyc.com
admin.beafriar.com
admin.schillingfarmses.colliervilleschools.org
rembrandt-elementary.vanguardacademy.education
admin.beafriar.com
stvfschool.org
admin.westfieldfriends.org
gpa.gonzalesisd.net
admin.beafriar.com
admin.beafriar.com
admin.beafriar.com
admin.beafriar.com
admin.beafriar.com
oce.lifeschools.net
baxterjh.eisd.org
www.jisd.org
acecharterhigh.com
elliotlake.adsb.on.ca
admin.beafriar.com
jisd.org
admin.beafriar.com
stvfschool.org
admin.beatty.bpsd.k12.ca.us
www.bufordcityschools.org
admin.beafriar.com
acecharterhigh.com
admin.stvfschool.org
admin.wms.csisd.org
acecharterhigh.com
www.vanguardacademy.education
admin.beafriar.com
web.upedregal.edu.mx
acecharterhigh.com
admin.corey.bpsd.k12.ca.us
gpa.gonzalesisd.net
admin.beafriar.com
admin.beafriar.com
bgh4.org
www.northmiddle.org
admin.beafriar.com
admin.beafriar.com
admin.beafriar.com
cfh.chesterfieldschools.org

Certificate

The complete raw certificate details for www.stvfschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdYMbFVGH1t5Q5Zswwwu
skPZys8e8VmE+AFNqQgF6pgZal9jWQBmIDF8UIttMGvijEQYOXTmCngPxGyQsxcz
3wZeoUYX7ZSwbp6rBfOmkVJlWUDWLja3dWiY6LbNN+xOyjK0iJ/v+xneUw+KSmgU
gVd/59IlaPa9D6+0h4TAscuVZwsiewsovEOruc7v7/nr3/GJUu1Ks+Pzws7fElnr
bV1B437oYsoG09GknnKYjYfqV6uniEzfG5eCD92Mn0B1br8erLQdlqJgZlS+8Q6r
LMf7twn1915Q7DTF9vd380DbydhDASihncs5yjLtP9210YksNKmJrbgopNZ3GquK
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49963998448087337729401111317047424914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stvfschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18410105483200500296602550098490438192240589365690151444096889694196203280006467866251713871164468713718918564482073017702246575601645759000172897463678877241853199119047057819008769594290133482440306685015397499468805892462054199424766686877038085466791257469762103133091988945302226850210195251786979072124317043009436006962402849910225367535029966727104646962058723755385427902173799532302672038231292969019971041040375648774291212785219120537896407074595001441961540667517899936313281400362811383169980724922383937432331390042909103318250263427202683441524811949753702105572443435730515102871197514103193632213639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95062a0299c57ba9bea83ed857581f30e4805076
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bf61ffb8a000004030046304402200b082433bffe1696a19970df0d096ca48347932beb28ada6303588a05034163802207977fbcaa02fa57d2219b528253703740efc5360aa05479af13256023d90c36f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf61ffd41000004030047304502200632e38ba01da400ce0a58754b4f0585fc814a0224c443f5c75d7a0a3d71d59a022100a757c91e4f9436e1dad3ec25b21d18ec30a0eff10a69219aa80adad9a3e091ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvfschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvfschool.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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