aeriesweb.magnoliasd.org

Issued by USERTrust RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 3e:e8:73:89:bb:40:69:13:72:f1:0f:68:03:b0:8b:f1 was issued on by The USERTRUST Network.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeriesweb.magnoliasd.org

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: New Jersey
Locality: Jersey City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:e8:73:89:bb:40:69:13:72:f1:0f:68:03:b0:8b:f1
Serial Number (int): 83619091999159112822466238096247655409
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 47:f4:0b:88:b2:1a:de:a5:66:95:3c:8b:a1:73:0b:21:60:a7:da:14
AuthorityKeyId: a6:c1:e7:e1:f4:f6:47:63:d7:2f:7d:8d:90:f8:ba:23:4f:60:ac:9e

Fingerprint (sha1): c2:5d:14:17:01:c6:27:a4:6f:f1:80:67:f2:e0:4f:59:41:50:03:b2
Fingerprint (sha256): 38:e2:d4:76:76:37:2e:40:1c:60:8a:07:91:79:1d:5f:03:5f:95:61:71:69:65:09:32:92:90:4f:07:2e:cf:ab

Issuing Certificate URL: http://crt.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crl

Check the revocation status for certificate aeriesweb.magnoliasd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeriesweb.magnoliasd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeriesweb.magnoliasd.org
www.aeriesweb.magnoliasd.org

Other certificates including the domain name magnoliasd.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for aeriesweb.magnoliasd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7uKLFxJw+vmIrkzmZU
cNHspnEnQSIWcXCvg3rzq5PqUkyXUmC2GLeD0Ng7P4tzlUEKdUUpvGGkreYe25gN
Kd90uPpMbC2kBI6on/n/dGkl0qhcE6C4wW8CuHs7zmRrdVzTwFYjya5glhGrxtGr
oVPX4+x3PeXiec9bYVVC1rXyW0M6kJvAFs3BTObrveYPuHW76fc1LVLOdKLMRzWY
ESGXy414XfkIw+APV+vyx3htRoF9Mr6FhzPMI1ZVIgUPMTlsyKez9Snp8DDmHb4O
gpX/9sZRLWw14WcSANxUy1Z2vv5ZaSpIl8B9BEMpubH7ydO+VNmGTegazcbFh+98
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83619091999159112822466238096247655409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeriesweb.magnoliasd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22035946626063801243603423468949213201972823073749489522611390980913985339872755641430887835793684206909765277136340611750691232277332991659414664664122775673063101472189786181533396576829717614419282005747107054883701550870277765971327618522693531766384548732367455036753622375988337038292717250714839308177379996836936480813035477806557628742562514648822527635880870738250473161370493933483966252904025450572918177085898259664687042498607356510313785548976610279503987782404787267377777102233859443344219953803793013021774206275006832019011102249686825951473485753678519215106866466043492745854628133594743327128697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a6c1e7e1f4f64763d72f7d8d90f8ba234f60ac9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47f40b88b21adea566953c8ba1730b2160a7da14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeriesweb.magnoliasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeriesweb.magnoliasd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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