banninghs.org
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number ef:95:c6:e3:c5:52:b9:bd:23:51:90:1e:0d:00:63:28 was issued on by ZeroSSL.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=banninghs.org
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate will expire on
Certificate Details
Serial Number (hex): ef:95:c6:e3:c5:52:b9:bd:23:51:90:1e:0d:00:63:28Serial Number (int): 318463177187479552688201819320047657768
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 3a:b9:59:89:81:2b:20:86:c5:8f:ea:ed:c6:ee:03:f2:bb:8d:5c:10
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): 69:ea:77:d4:f6:b5:5a:e8:8d:39:90:ff:68:04:bf:7e:e8:d4:13:1c
Fingerprint (sha256): 3b:71:4b:70:55:e5:3d:0f:3f:cd:e0:8d:c9:9a:25:7d:2f:a8:93:a1:af:4e:af:87:ef:cd:e6:20:56:9f:a7:9c
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate banninghs.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for banninghs.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
banninghs.org
admin.banninghs.org
www.banninghs.org
admin.banninghs.org
www.banninghs.org
Other certificates including the domain name banninghs.org
(limited to 100 certificates)
highschool.kiskiarea.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
ps33.jcboe.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
beverlyvistaschool.us
banninghs.org
revbrownschool.org
admin.revbrownschool.org
admin.banninghs.org
banninghs.org
banninghs.org
admin.banninghs.org
bhas.bhusd.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
ps33.jcboe.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
beverlyvistaschool.us
banninghs.org
revbrownschool.org
admin.revbrownschool.org
admin.banninghs.org
banninghs.org
banninghs.org
admin.banninghs.org
bhas.bhusd.org
Certificate
The complete raw certificate details for banninghs.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkjCCBHqgAwIBAgIRAO+VxuPFUrm9I1GQHg0AYygwDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yNDAzMjUwMDAwMDBaFw0y NDA2MjMyMzU5NTlaMBgxFjAUBgNVBAMTDWJhbm5pbmdocy5vcmcwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAy0eXfvtcpxUPHvD+kjb4chbrHP9efawS 6P64vA8S3uEuaYy+3PCG1rzDPeN9gdHPNudEvBc+TH5j04oVV60vBzfqtYGj0718 H47DztJKM/XW6+zlujgaeqjJChkQd4hK+58098lgZeWM5OA3Me2yuI/vnbumhIKX PZeRKt7figSYj5/G3PrYxnC+dqStwZbv7zGoFBbp804rPcT9CFYHlctAvme1Dcfo gi+QzajluDD9lgjg5uySpSNRyzg8Y/ylWGGKrzcBv4GWuXKvQIt8vaqhZY0voOSh Q0i2Z0S/0lbERBaXwwTQwm+x6oDeLs18SkZWYsibCEklrkHNWS79AgMBAAGjggKi MIICnjAfBgNVHSMEGDAWgBTI2XhootkZaNU9ct5fCj7ctYaGpjAdBgNVHQ4EFgQU OrlZiYErIIbFj+rtxu4D8ruNXBAwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYL KwYBBAGyMQECAk4wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D UFMwCAYGZ4EMAQIBMIGIBggrBgEFBQcBAQR8MHowSwYIKwYBBQUHMAKGP2h0dHA6 Ly96ZXJvc3NsLmNydC5zZWN0aWdvLmNvbS9aZXJvU1NMUlNBRG9tYWluU2VjdXJl U2l0ZUNBLmNydDArBggrBgEFBQcwAYYfaHR0cDovL3plcm9zc2wub2NzcC5zZWN0 aWdvLmNvbTCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHb/iD8KtvuVUcJhzPWH ujS0pM27KdxoQgqf5mdMWjp0AAABjnMVs/0AAAQDAEcwRQIgZflYGcsOW/YQ9Wd/ Re/xV4JVF6wwUAmrVxEY4cc2e7QCIQCpMhXSkcGJ0nZxiv5AHRqw9zd+pFzr8cry IQW2QDZrGQB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjnMV s6EAAAQDAEgwRgIhAIvf/JFkG5Ji1PxU77uwCbBhGIfMyda8uWpHjV/4o85aAiEA zyLw4AxH1+iLfuCbQSCHfKYp4L18ZvuIfazEsy4cBr4wQAYDVR0RBDkwN4INYmFu bmluZ2hzLm9yZ4ITYWRtaW4uYmFubmluZ2hzLm9yZ4IRd3d3LmJhbm5pbmdocy5v cmcwDQYJKoZIhvcNAQEMBQADggIBAAndVrnBwnWPMVcnEu9IJWjOAnwrvKPG0lX0 kBspfPY9FlDxCLIcxb2O6hfYSlsKob+cr0IcHIfEfscUmVKOiNy3D/zVSROVMZu9 KSdp/zSG7Bbr2KqSXVuy6xtY//Q/mVFSYwpLf49uxd8+XT/NCq+WdAGayg9uyp55 fsVAunbwMP0NeJv6dgaU8VptifI99POwALSu0cIBDFXqWPNzlvsYksBq8a3xiYRZ PnVO4QJNfOGHefXVoLuf0/6OC+umjwNtmoBp27KhS/XR40kGaTOFOjqZcYkZOl6J 0a1CZVSjsGwIiR9MVGHBx/s24ylL7LYC3D0K+FCKvo/IAthp700grrmkTgiRS6jK q98ok7g4/gZ+LvTHkj8dWo/eysZ5X1VtaNy2wXp8olNaf3/hSQTo1F2SJVnSnxhW lfyLCGRwuvZ0UEhemlvJAxojvH6vEJhj/uqw9QbdmppUKAHUwSNxk1bNexOA/1A9 TtTAIIBhPWsZFgl+gWZ3QGe9+GPL85a2tOzvfS5zm8ONEkp12CaEOCoPD1+0qgjZ 3R64EFtmxttmM9SHvjg5CO3eO+GbHNEutq9G714wGH9yIYKaDv/xGdGIO1yVbtS3 mKAeh7DHlTSsx046SvNeUVShMPvOw8YheMXYSsYR1vUi7KQnlZeclY/4QuJxe1++ PnhCVv8p -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMtHl377XKcVDx7w/pI2 +HIW6xz/Xn2sEuj+uLwPEt7hLmmMvtzwhta8wz3jfYHRzzbnRLwXPkx+Y9OKFVet Lwc36rWBo9O9fB+Ow87SSjP11uvs5bo4GnqoyQoZEHeISvufNPfJYGXljOTgNzHt sriP7527poSClz2XkSre34oEmI+fxtz62MZwvnakrcGW7+8xqBQW6fNOKz3E/QhW B5XLQL5ntQ3H6IIvkM2o5bgw/ZYI4ObskqUjUcs4PGP8pVhhiq83Ab+Blrlyr0CL fL2qoWWNL6DkoUNItmdEv9JWxEQWl8ME0MJvseqA3i7NfEpGVmLImwhJJa5BzVku /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318463177187479552688201819320047657768 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banninghs.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24337995487589730794469772511878423900753118406359192702844168256582419423551774302546495033543128706737841205398609438607039108141609648831300224292802175407460814496903024077437097999606915531494626255419858894599056687667451762321399283166362183695000478251706100595467429844956328639633579985491206595285136917284446052880560425838861270439746598943797449832719822934212727742946712278130351117479665813828766005020205746247115957302341846184742566032599322971629021042921748801285971487003861542642352754043604125150000046099887301394250412263348120007991091780503500582499355525590670004185211110519617810411261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3ab95989812b2086c58feaedc6ee03f2bb8d5c10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7315b3fd0000040300473045022065f95819cb0e5bf610f5677f45eff157825517ac305009ab571118e1c7367bb4022100a93215d291c189d276718afe401d1ab0f7377ea45cebf1caf22105b640366b190077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e7315b3a100000403004830460221008bdffc91641b9262d4fc54efbbb009b0611887ccc9d6bcb96a478d5ff8a3ce5a022100cf22f0e00c47d7e88b7ee09b4120877ca629e0bd7c66fb887dacc4b32e1c06be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banninghs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.banninghs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banninghs.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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