www.bestpracticeinstitute.org

Issued by USERTrust Secure Server CA

About this certificate


This digital certificate with serial number 8b:d9:61:1c:32:90:a7:ab:2d:d3:dd:4e:fa:e0:08:db was issued on by The USERTRUST Network .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

www.bestpracticeinstitute.org

Organization unit: Domain Control Validated
Organization unit: Hosted by pair Networks, Inc.
Organization unit: COMODO SSL

The USERTRUST Network

Organization: The USERTRUST Network

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 8b:d9:61:1c:32:90:a7:ab:2d:d3:dd:4e:fa:e0:08:db
Serial Number (int): 185891389460174596142442736740573645019
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9c:79:e1:9d:5e:01:d3:5c:b0:c5:7c:ff:f6:fd:b6:e9:16:a7:2b:03
AuthorityKeyId: 24:c5:9d:2d:59:f6:12:f0:17:24:24:0b:94:da:d9:6b:f0:5b:c0:20

Fingerprint (sha1): f0:08:19:48:24:59:16:af:16:97:0d:3a:8c:a5:00:fb:4d:e1:b6:15
Fingerprint (sha256): af:a4:8e:94:63:b4:e6:18:02:c9:f1:7d:d7:eb:1c:71:fd:83:0e:8e:14:68:5d:87:a4:39:bb:d0:db:b0:da:77

Issuing Certificate URL: http://crt.usertrust.com/USERTrustSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustSecureServerCA.crl

Check the revocation status for the current certificate on www.bestpracticeinstitute.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bestpracticeinstitute.org
bestpracticeinstitute.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIRAIvZYRwykKerLdPdTvrgCNswDQYJKoZIhvcNAQEFBQAw fTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxIzAhBgNV BAMTGlVTRVJUcnVzdCBTZWN1cmUgU2VydmVyIENBMB4XDTE0MDMwMzAwMDAwMFoX DTE5MDMwMjIzNTk1OVowgYgxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlk YXRlZDEmMCQGA1UECxMdSG9zdGVkIGJ5IHBhaXIgTmV0d29ya3MsIEluYy4xEzAR BgNVBAsTCkNPTU9ETyBTU0wxJjAkBgNVBAMTHXd3dy5iZXN0cHJhY3RpY2VpbnN0 aXR1dGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn2HV950 3FjkQBfODjlhj5KMpYr03Fu/Wnmhv0k3cFEG4fP9AFtnmDrv/WgjLGOLGuspsEnu EogZRQ1Y6sfEja4/RLbRkS5cVuAGLqBJaIlYpQugndI0WDLfEp9IuqNYYABFv34S lvUSnqQbzO7CLAgIeZnXU6m7r3JvYqGUsAo3cY/AeV0a6Mp7tDknSzgCjEdXdBFZ ipyDKcyNbAsNXhQYNM+Ou6JEVRqlZ+D6yxLi0gMQy1qxVCT+c/jJT/zFNMB5FOnO 1lTCIqZjtNH2oDehPjwMOf2lsp2z0cf6ZG5GJ08k4toZA9QIVpsRfT7GUwKa/GZF +a0c7uzJXUhPnwIDAQABo4IB1DCCAdAwHwYDVR0jBBgwFoAUJMWdLVn2EvAXJCQL lNrZa/BbwCAwHQYDVR0OBBYEFJx54Z1eAdNcsMV8//b9tukWpysDMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBMBgNVHSAERTBDMDcGDCsGAQQBsjEBAgEDBDAnMCUGCCsGAQUFBwIBFhlo dHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAECATBFBgNVHR8EPjA8MDqg OKA2hjRodHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0U2VjdXJlU2Vy dmVyQ0EuY3JsMHcGCCsGAQUFBwEBBGswaTBABggrBgEFBQcwAoY0aHR0cDovL2Ny dC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFNlY3VyZVNlcnZlckNBLmNydDAlBggr BgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTBDBgNVHREEPDA6gh13 d3cuYmVzdHByYWN0aWNlaW5zdGl0dXRlLm9yZ4IZYmVzdHByYWN0aWNlaW5zdGl0 dXRlLm9yZzANBgkqhkiG9w0BAQUFAAOCAQEAnDZBfWamuzcJ0ni0udZnTlSrq8xD 7ZlhJvh5R5cmZuzdzyDG3i3WH/ND1jcJhiBpxf9j+7QOJjYFB4T2pHID8UOKxfCj hqr1ONTuzcwQXKBmlwoEiL+cYYCwL4YC8RQFCmglYxVGoZ/EKCYbqsv2y21CN/oQ 8S8jsnks7I9h2lnAwmMbXqcL4VDMItvAOcQ2GJPa/GhTB5n6uYflcNVjjVUiJVxb rp+yyds8C7SqhASRMBcWudlvDqs93sxMrIcnHL3RsoL4gDVsH1dt3kd4D5eJ8djy X98WaZ7j9/2U8bN2NaoGgQw76heSSt9o0KrXZzd+hESGmJJqZJNEc/HBuw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn2HV9503FjkQBfODjlh j5KMpYr03Fu/Wnmhv0k3cFEG4fP9AFtnmDrv/WgjLGOLGuspsEnuEogZRQ1Y6sfE ja4/RLbRkS5cVuAGLqBJaIlYpQugndI0WDLfEp9IuqNYYABFv34SlvUSnqQbzO7C LAgIeZnXU6m7r3JvYqGUsAo3cY/AeV0a6Mp7tDknSzgCjEdXdBFZipyDKcyNbAsN XhQYNM+Ou6JEVRqlZ+D6yxLi0gMQy1qxVCT+c/jJT/zFNMB5FOnO1lTCIqZjtNH2 oDehPjwMOf2lsp2z0cf6ZG5GJ08k4toZA9QIVpsRfT7GUwKa/GZF+a0c7uzJXUhP nwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 185891389460174596142442736740573645019 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by pair Networks, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bestpracticeinstitute.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22532318785360544243575839595874757596664002756094490792166616717404385681355802623914392323634308459699977378436613377975811763921088842270454804252240507318981342610686490943580583811771806618119298921998891080790582356850604270312904700924415159885969722844732299610317970347305422280665455940523871362906093068880945432196039483690370696340888438246387822855938742914048877992852005233994033866441096678173989127276889457659521551565305435648075190750854254895375251561483278452062871084883349777776391336221146613195258993978989054538774610088456386881914261877045512993698975918398496773078211613265703266176927 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c59d2d59f612f01724240b94dad96bf05bc020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c79e19d5e01d35cb0c57cfff6fdb6e916a72b03 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestpracticeinstitute.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpracticeinstitute.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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