secure.presbyterianhomes.org

- secure.presbyterianhomes.org -

Issued by Starfield Secure Certification Authority

About this certificate

This digital certificate with serial number 07:96:82:27:60:b0:f4 was issued on by Starfield Technologies, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 1 DNS name(s) are bare public suffixes: ntctxgate The domain SHOULD NOT have a bare public suffix (awslabs certlint)

secure.presbyterianhomes.org

Organization: secure.presbyterianhomes.org
Organization unit: Domain Control Validated

Starfield Technologies, Inc.

Company registration number: 10688435
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:96:82:27:60:b0:f4
Serial Number (int): 2135810587537652
Serial Number lenght: 51 bits, 7 octets

SubjectKeyId: 57:47:cd:17:95:02:5d:21:04:d3:06:81:a5:d8:c3:00:be:f9:ed:3b
AuthorityKeyId: 49:4b:52:27:d1:1b:bc:f2:a1:21:6a:62:7b:51:42:7a:8a:d7:d5:56

Fingerprint (sha1): 4f:fc:06:bc:0a:c9:d3:46:51:4a:89:df:29:36:1f:6c:b9:d0:3c:77
Fingerprint (sha256): 3f:e8:35:08:4b:df:26:65:25:27:89:cb:dc:e9:c2:04:97:9e:23:0f:c4:46:ff:4f:64:35:b2:26:0b:86:d2:5d

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sf_intermediate.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfs1-20.crl

Check the revocation status for certificate secure.presbyterianhomes.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.presbyterianhomes.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.presbyterianhomes.org
www.secure.presbyterianhomes.org
gwmail.presbyterianhomes.org
ntctxgate
portal.presbyterianhomes.org
remote.presbyterianhomes.org

Other certificates including the domain name presbyterianhomes.org

(limited to 100 certificates)
*.presbyterianhomes.org
servicedesk.presbyterianhomes.org
wpuca.presbyterianhomes.org
tmuca.presbyterianhomes.org
blog.presbyterianhomes.org
mail.presbyterianhomes.org
blog.presbyterianhomes.org
*.presbyterianhomes.org
resources.presbyterianhomes.org
myemail.presbyterianhomes.org
email.presbyterianhomes.org
soporte.familiabercomat.com
soporte.familiabercomat.com
presbyterianhomes.org
mail.presbyterianhomes.org
sentry.presbyterianhomes.org
soporte.familiabercomat.com
citrix.presbyterianhomes.org
presbyterianhomes.org
presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
email.presbyterianhomes.org
about.presbyterianhomes.org
www.presbyterianhomes.org
wpvpn.presbyterianhomes.org
www.presbyterianhomes.org
soporte.familiabercomat.com
abouts.presbyterianhomes.org
rews.presbyterianhomes.org
email.presbyterianhomes.org
www.presbyterianhomes.org
resources.presbyterianhomes.org
resources.presbyterianhomes.org
www.presbyterianhomes.org
mail.presbyterianhomes.org
resources.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
resources.presbyterianhomes.org
soporte.familiabercomat.com
*.presbyterianhomes.org
secure.presbyterianhomes.org
abouts.presbyterianhomes.org
soporte.familiabercomat.com
presbyterianhomes.org
help.helaclothing.com
www.presbyterianhomes.org
*.presbyterianhomes.org
myemail.presbyterianhomes.org
*.presbyterianhomes.org
resources.presbyterianhomes.org
soporte.familiabercomat.com
soporte.familiabercomat.com
presbyterianhomes.org
soporte.familiabercomat.com
www.presbyterianhomes.org
myemail.presbyterianhomes.org
www.presbyterianhomes.org
www.presbyterianhomes.org
presbyterianhomes.org
wpuca.presbyterianhomes.org
abouts.presbyterianhomes.org
www.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
blog.presbyterianhomes.org
*.presbyterianhomes.org
soporte.familiabercomat.com
tmuca.presbyterianhomes.org
soporte.familiabercomat.com
servicedesk.presbyterianhomes.org
ldaps.presbyterianhomes.org
mymobile.presbyterianhomes.org
soporte.familiabercomat.com
soporte.familiabercomat.com
soporte.familiabercomat.com
remote.presbyterianhomes.org
remote.presbyterianhomes.org
mail.presbyterianhomes.org
abouts.presbyterianhomes.org
remote.presbyterianhomes.org
about.presbyterianhomes.org
www.presbyterianhomes.org
mymobile.presbyterianhomes.org
lfuca.presbyterianhomes.org
soporte.familiabercomat.com
godrive.presbyterianhomes.org
help.helaclothing.com
blog.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
about.presbyterianhomes.org
presbyterianhomes.org
mymobile.presbyterianhomes.org
blog.presbyterianhomes.org
*.presbyterianhomes.org
mail.presbyterianhomes.org
soporte.familiabercomat.com
mymobile.presbyterianhomes.org

Certificate

The complete raw certificate details for secure.presbyterianhomes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5EAnGxwRkYKfLcNVnft
xWZnHDwCOq9libYu1PzmTQoRob1U2zjhbtQA/4GubJKcTpAlhcole8fggzvisLHB
8XSFsH9eSmWqyyIqZgLIeGsj7byDsGOuiWtG9YAM1mXHGGKYT4BxmPwsPeNOAifx
fBctPJflFIVWWE8c8Yd5wrufM6kc3VxHvwGmP9YoY+zt76r8pCgtitp6w0U3rBfo
IYD42E58yZziE5IfwEGRK1fzU7dTstJ1F8fHZqalqi8SIcpjDY18u2E5UcF74q6o
6Oo/gKUdnGS/BrJCNHyhxQiCgixGa7HbWG3h4EuLlN14Ast/q4UVOyzLMckkdZh8
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2135810587537652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.starfieldtech.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10688435'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-06-28 16:38:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-28 16:38:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.presbyterianhomes.org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.presbyterianhomes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24183019590431355451471641010905757442638344421076260461987611446098889943920072604574698398304807531378128178141577972533679184015211951594105303733093478298215868897243484605058611334002619318003653353542571833437879455795323659564892309827825940114763065796229709119016385385424120401159406255988977868810659658885922072625154058592525080009088935903429475162228739962652294177568562857915355388118959786219008741190745706062565051618850326101225366138729155035777648182466614606593166693040698873408609336367336022248771286979883763681007564535916813829203190848310888953271770940258422291730957344275086259551303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfs1-20.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sf_intermediate.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 494b5227d11bbcf2a1216a627b51427a8ad7d556
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwmail.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntctxgate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.presbyterianhomes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5747cd1795025d2104d30681a5d8c300bef9ed3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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