wwww.ssat.org

Issued by R3

About this certificate

This digital certificate with serial number 03:61:36:23:96:95:20:e8:ef:ab:8b:c1:16:98:93:72:9a:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wwww.ssat.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:36:23:96:95:20:e8:ef:ab:8b:c1:16:98:93:72:9a:c0
Serial Number (int): 294416210482950826957213276104335511689920
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:d9:e6:88:f8:c9:ea:c4:5b:56:47:86:d7:fe:af:49:f4:e9:57:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:91:38:b6:3d:88:4d:04:b6:3c:df:71:6c:ce:40:a8:78:99:1b:d3
Fingerprint (sha256): 3a:af:70:c1:f3:5d:27:8f:bb:48:68:c7:b4:01:12:7f:6d:3b:1f:3b:19:8e:11:c8:11:a9:c2:43:3a:1a:b8:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wwww.ssat.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwww.ssat.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwww.ssat.org

Other certificates including the domain name ssat.org

(limited to 100 certificates)
resources.ssat.org
crm.ssat.org
mercury.training.ssat.org
mercury.training.ssat.org
dev.ssat.org
blog.crm.ssat.org
search.ssat.org
ssat.org
dev.ssat.org
help.ssat.org
dev.ssat.org
help.ssat.org
ssat.org
ssat.org
crm.ssat.org
ucvpn.ssat.org
help.ssat.org
resources.ssat.org
bossmx.ssat.org
vwww.ssat.org
hcmiraefund.xn--com--www-9g0mygr38ivqf6vkjpejs1i.ssat.org
www.ssat.org
search.ssat.org
www.ssat.org
dev.ssat.org
help.ssat.org
xn--www-r14ez73btn0f.ssat.org
search.ssat.org
hcmiraefund.xn--com--www-9g0mygr38ivqf6vkjpejs1i.ssat.org
dev.ssat.org
xn--www-ll0hk7afz2bgu7a3xg.ssat.org
ssat.org
wlan.ssat.org
resources.ssat.org
wlan.ssat.org
search.ssat.org
infawiki.ssat.org
dev.ssat.org
kuku.ssat.org
developers.c.ssat.org
resources.ssat.org
www.ece.ssat.org
lyncdiscoverinternal.ssat.org
ssat.org
xn--www-r14ez73btn0f.ssat.org
dev.ssat.org
www.ssat.org
mercury.training.ssat.org
crm.ssat.org
resources.ssat.org
xn--www-ll0hk7afz2bgu7a3xg.ssat.org
resources.ssat.org
ssat.org
dev.ssat.org
www.ssat.org
www.ssat.org
blog.crm.ssat.org
apps.hive-uat.ssat.org
wwww.ssat.org
aol.ssat.org
developers.c.ssat.org
blog.mercury.training.ssat.org
ssat.org
resources.ssat.org
search.ssat.org
agentplusservices.ssat.org
juliet.ssat.org
infawiki.ssat.org
dev.ssat.org
search.ssat.org
cloudcenter.ssat.org
admin-internet.ssat.org
crmauth.ssatb.ssat.org
help.ssat.org
eye.ssat.org
ssat.org
resources.ssat.org
ww.ssat.org
lyncdiscover.ssat.org
aol.ssat.org
vwww.ssat.org
app.ssat.org
crm.ssat.org
ssat.org
resources.ssat.org
dana.ssat.org
ssat.org
dev.ssat.org
search.ssat.org
dev.ssat.org
www.ece.ssat.org
search.ssat.org
dev.ssat.org
m.ssat.org
dev.ssat.org
blog.m.ssat.org
admin-internet.ssat.org
*.ssat.org
search.ssat.org
*.ssat.org

Certificate

The complete raw certificate details for wwww.ssat.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJqk7VGXlFgCNSd/4tz
pS+Cv6/s05MlD/+zhBpvlkq95aOHuG7r9aug7UK/Nx9S8fiBO5Qqnh6kZ68aQCEh
q+yWfc+/iCVMFaKah118ggjkkHyktlyEWoE76dIqgye6wRbzuvD9/ciVDrJbJHMQ
/2EsM+GyoBsDcR8BT1wU9G/5Lna4SA0dGaxBIW/Gue63JOnbUw1KUizGn0tJS1qv
HfHz9oso40eJhUx7tX4NRWT5xIvUJVz0uCTZE2hyxaAb+6HdXYrcA9uCKKIORXao
w7svh0OVdS8CeGh7Bpb4a8CHVxqCI3V8LLDa5Pezxp1cAiC6auNSMF5YRlnqf71O
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294416210482950826957213276104335511689920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-11 11:58:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 11:58:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwww.ssat.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24136377460697879462942455536007121478359300867922500938011546089306152326214951615874480391933061736035176835687545004245726951137271782615914593763274021812999890146100866778550436728632147149251541338366927831255304985054618328980351931156870830133480440603352000105306052895754721786648667632146914052730492898172483259188157213285651395512772677663046077502043253693336111090502747409167758835399298753374350091345785605122022558137047382390735206117981653177052968456147541049281352725428144101777227406825989977637056865674935943493670542598566978203422660892741864865013369637366029619321806301308350799630027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ed9e688f8c9eac45b564786d7feaf49f4e9576c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww.ssat.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000179fb26fa820000040300473045022100a06ca22949961737439e2a1e2c38298d302f8f318584ab3b19a30d7f8464bff9022056e1e120f9e6e2daf0b717343b079358aee58ac1da7395815bc48a27b1e4d651007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179fb26fb080000040300473045022100b919068c8d229859ee18ea93fdf95438550fe6f0dd79ba20e25bfa23dc6da4a202203223d1404a28265b6d43bb6536c0bfd1fbd05fae914bf7da331d07e3d84dd9a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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