magnet.ccsd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a9:0d:71:5d:f9:58:50:1c:ff:98:57:51:4e:84:c9:38:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magnet.ccsd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:0d:71:5d:f9:58:50:1c:ff:98:57:51:4e:84:c9:38:07
Serial Number (int): 405974732336189042391203855719397310674951
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:b5:62:74:c3:53:d4:bf:33:1c:c6:bd:99:00:4b:cd:a7:f3:b6:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:8a:2a:db:c3:b9:75:88:db:81:d1:b9:5a:fb:f4:9b:64:d4:87:92
Fingerprint (sha256): 1f:93:63:f1:02:fc:cc:b7:ba:7b:c0:5b:c3:25:d5:dc:b0:83:a9:fc:16:83:11:f8:d4:a6:50:96:26:e4:69:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magnet.ccsd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magnet.ccsd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magnet.ccsd.net

Other certificates including the domain name ccsd.net

(limited to 100 certificates)
*.sems.ccsd.net
mail.securitysystems.ccsd.net
info.securitysystems.ccsd.net
*.ccsd.net
famis.ccsd.net
email.axioshq.nv.ccsd.net
info.securitysystems.ccsd.net
famis.ccsd.net
sems.hrd.ccsd.net
parentlink.ccsd.net
*.sems.ccsd.net
campus.ccsd.net
campus.ccsd.net
mail.securitysystems.ccsd.net
erp-sx-s12.erp.ccsd.net
magnet.ccsd.net
*.ccsd.net
*.compass.ccsd.net
parentlink.ccsd.net
sems.hrd.ccsd.net
ccsd-win-jf01.ccsd.net
*.sems.ccsd.net
*.ccsd.net
effm.ccsd.net
*.ccsd.net
shared.compass.ccsd.net
secure.ccsd.net
ccsd-win-jf01.ccsd.net
kiosk.olr.ccsd.net
*.ccsd.net
erp-sx-s17.erp.ccsd.net
*.ccsd.net
info.securitysystems.ccsd.net
shared.compass.ccsd.net
*.sems.ccsd.net
www.lunt.ccsd.net
*.tiss.ccsd.net
riverdeep.ccsd.net
sems.hrd.ccsd.net
*.ccsd.net
mail.securitysystems.ccsd.net
ccsd-win-jf01.ccsd.net
shared.compass.ccsd.net
cm.ccsd.net
*.ccsd.net
nsweb.ccsd.net
ccsd-ftp.erp.ccsd.net
shared.compass.ccsd.net
shared.compass.ccsd.net
magnet.ccsd.net
*.hcm.ccsd.net
everyday.ccsd.net
ccsd-ftp.erp.ccsd.net
mail.securitysystems.ccsd.net
*.hcm.ccsd.net
mail.securitysystems.ccsd.net
www.bryan.ccsd.net
famis.ccsd.net
*.ccsd.net
riverdeep.ccsd.net
*.ccsd.net
magnet.ccsd.net
myaccount.ccsd.net
riverdeep.ccsd.net
magnet.ccsd.net
hrd6.ccsd.net
magnet.ccsd.net
*.sems.ccsd.net
ccsd.net
*.tiss.ccsd.net
*.ccsd.net
apply.magnet.ccsd.net
cm.ccsd.net
ccsd-win-jf01.ccsd.net
erp-sx-s12.erp.ccsd.net
everyday.ccsd.net
ccsdmagnet.org
mail.securitysystems.ccsd.net
*.ccsd.net
magnet.ccsd.net
mail.securitysystems.ccsd.net
*.ccsd.net
magnet.ccsd.net
magnet.ccsd.net
parentlink.ccsd.net
nsweb.ccsd.net
erp-sx-s17.erp.ccsd.net
email.axioshq.nv.ccsd.net
apply.magnet.ccsd.net
ccsdmagnet.org
facilities2.ccsd.net
apply.magnet.ccsd.net
ccsd-win-jf01.ccsd.net
*.ccsd.net
bffm.ccsd.net
erp-sx-s17.erp.ccsd.net
*.tiss.ccsd.net
campus.ccsd.net
campus.ccsd.net
*.ccsd.net

Certificate

The complete raw certificate details for magnet.ccsd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIr2uNdUz+k1ZbH5l11S
Ujq6gXwPoB7crvtEaH/FlOf2pH7FjZ+RQT2B6EKfzn0/5Ah9o+0l2nolVhaCnwtw
DLgDfJvMqK8WzKUp4GeHQpHSEsSTmybG8aXwfgtAXZctKtgXZpanuQdT8y91OztP
ZyAB1mzBNrTfpOfU8+ji1pmkR+7alSqs5VU/pjlxaI4u6h/uhmYPQslkLPbZuh/8
A+nKm5zayvzwOa2U7kBXw5PughVoCjJlTXSdtFWzUysTdqX4vj4s+1llmm6xIw+C
V5poa/b3H6K5xnih17speNMRroofkqFXQXVXaW0MpBaSbzUtXONKYkpt0iGwDZDH
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405974732336189042391203855719397310674951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 22:48:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 22:48:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magnet.ccsd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23296373696784339901002765755884957174820699748338947810706559205868498946507837555719111906419634763230618063609412947271514320184204049374709475634952540118282046417267738245346449323927373095996674821638278751903523464158871358339281691218045576771289673603440726359792780290994527885361389655116801044919979424806090516327555078157862434393163925578575508843237978283605526613451841113991411963073707128513047965324463162721051506442845673352833107542158065340064316854511287337046923700745534165745285510099974518726684889337333838634355286421049682406489380505173163349696938710638982696279781612262077538289519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91b56274c353d4bf331cc6bd99004bcda7f3b633
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnet.ccsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001669e2db4c0000004030047304502201b21e79592a8511813e96873c79e2b8ffba6dd743c37f5e48b04719f77bfa741022100ffc55681b0ea14c8e9c8f7c97ae8aff5ea9202221e3f4daa1539a164e27b0c72007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001669e2db6bf0000040300483046022100acb6814042abd8f753443c9092973a8c1a75645e1b572f541edc4b578680b3c1022100c3b0545da8934a4859f94bd79882b9743dd8c8900ddb7a55eeef2df1ebc38bcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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