bluestarorganics.org

Issued by SSL.com DV CA

About this certificate


This digital certificate with serial number e8:e9:f6:eb:07:ee:6f:35:a0:9f:07:a3:a8:da:00:1a was issued on by SSL.com .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

bluestarorganics.org

Organization unit: Domain Control Validated
Organization unit: EssentialSSL

SSL.com

Organization: SSL.com
Organization unit: www.ssl.com

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): e8:e9:f6:eb:07:ee:6f:35:a0:9f:07:a3:a8:da:00:1a
Serial Number (int): 309595708283974431099923178765130792986
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8a:52:3e:ff:eb:77:42:a3:12:fe:44:4f:d5:1e:c6:3e:90:7f:89:2b
AuthorityKeyId: 46:9a:fd:fc:51:5e:7c:54:53:52:e2:99:e3:b3:32:ef:93:1a:7f:56

Fingerprint (sha1): e2:34:e8:4a:68:a7:12:85:d3:8d:12:27:12:11:05:c7:ac:9e:af:80
Fingerprint (sha256): b8:5d:00:79:bb:49:a5:14:6f:b4:31:3c:b3:4e:13:15:bb:14:19:49:e2:f2:a2:ef:ab:a7:22:c9:e5:c5:95:91

Issuing Certificate URL: http://crt.ssl.com/SSLcomDVCA_2.crt

Revocation information

OCSP Server: http://ocsp.ssl.com
CRL Distribution Point: http://crl.ssl.com/SSLcomDVCA_2.crl

Check the revocation status for the current certificate on bluestarorganics.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

bluestarorganics.org
www.bluestarorganics.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIRAOjp9usH7m81oJ8Ho6jaABowDQYJKoZIhvcNAQELBQAw TTELMAkGA1UEBhMCVVMxEDAOBgNVBAoTB1NTTC5jb20xFDASBgNVBAsTC3d3dy5z c2wuY29tMRYwFAYDVQQDEw1TU0wuY29tIERWIENBMB4XDTE1MDgwODAwMDAwMFoX DTE2MDgwNjIzNTk1OVowWTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMRUwEwYDVQQLEwxFc3NlbnRpYWxTU0wxHTAbBgNVBAMTFGJsdWVzdGFyb3Jn YW5pY3Mub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfusEpkj qJyye34k9gihxNobCb0sJIoorVv15Z5T9zkq2tmp2gm22nsPkQPGm4uHxDGHspG7 D/dIGsa0h9GyIiXP8wZV4ccwGgGs68kr8k0XM0h8sUXCyiiFVk7DUfE1/q6d95Mi xVuc5JLL873owQCfYk2ZbqSfMXI6f3aBpybt6BnOHj38HgCMaJNsE9MHYVKbWXt4 fl+iefs+Tq8aBD0cDtrUreslx5pyqyRD2Jc994j9UiK1OofHEPmgW06pNkYIMOxu KdJjummYoualLkVO+kcJpczxbQDYfvJrKd/Dbx6NBYD7JnDjq1+PF1u+5CDbQtxt F89jdflEzlpjaQIDAQABo4IBoDCCAZwwHwYDVR0jBBgwFoAURpr9/FFefFRTUuKZ 47My75Maf1YwHQYDVR0OBBYEFIpSPv/rd0KjEv5ET9Uexj6Qf4krMA4GA1UdDwEB /wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBKBgNVHSAEQzBBMDUGCisGAQQBgqkwAQEwJzAlBggrBgEFBQcCARYZaHR0 cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgEwNAYDVR0fBC0wKzApoCeg JYYjaHR0cDovL2NybC5zc2wuY29tL1NTTGNvbURWQ0FfMi5jcmwwYAYIKwYBBQUH AQEEVDBSMC8GCCsGAQUFBzAChiNodHRwOi8vY3J0LnNzbC5jb20vU1NMY29tRFZD QV8yLmNydDAfBggrBgEFBQcwAYYTaHR0cDovL29jc3Auc3NsLmNvbTA5BgNVHREE MjAwghRibHVlc3Rhcm9yZ2FuaWNzLm9yZ4IYd3d3LmJsdWVzdGFyb3JnYW5pY3Mu b3JnMA0GCSqGSIb3DQEBCwUAA4IBAQBojLIJIW7eujdQoIJtFWMVEK7sZadlPjho B5V5rCUU8+OmB9ZgbyVloBKZ9hWOuZUusCDvNeOd1DYHVmQqSCTFlW2sD1Vh0Otl IpknzrZJKRb846pLQYm/fHfG4gM+ShTU/Hs7/8+HtxMo6hxE9Wjyo4qCJSZvB6Zg 3w0Uo9eoWVAU8xD3eZc8BXqm1J07BszTsy+ZnH88q0jebJL0PwJg1/Rwv0nHT3dh CTpfs7OQYch0cd7Hrl4ViQfBNLsFMKumtAHKx1777lNUbdPdx5+qu12yaGUrpx5o Dv/oOkrDG2R+ph5W0dR3cBucfIBngcVqGqLsb4GdOggztoUL1sWF -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfusEpkjqJyye34k9gih xNobCb0sJIoorVv15Z5T9zkq2tmp2gm22nsPkQPGm4uHxDGHspG7D/dIGsa0h9Gy IiXP8wZV4ccwGgGs68kr8k0XM0h8sUXCyiiFVk7DUfE1/q6d95MixVuc5JLL873o wQCfYk2ZbqSfMXI6f3aBpybt6BnOHj38HgCMaJNsE9MHYVKbWXt4fl+iefs+Tq8a BD0cDtrUreslx5pyqyRD2Jc994j9UiK1OofHEPmgW06pNkYIMOxuKdJjummYoual LkVO+kcJpczxbQDYfvJrKd/Dbx6NBYD7JnDjq1+PF1u+5CDbQtxtF89jdflEzlpj aQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309595708283974431099923178765130792986 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ssl.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL.com DV CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bluestarorganics.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24488097025372343171950009799655549014281828156240055714965296457632413800662848321732519622532773248305694896106467084449292763478466510733936879100431277299407252341299927195658962850303868219134239386559015397203512032286854688288155674325132827559052628910438639861636121939562592900906584530453044529317229990406808386225350469451751632657857376237049768820605915250022453879462893425344180916797020728031085467875228490189149218503054017487519007208525249691601552600399438477090967323133583960689234801656613100045828357149323466472600370246071194600247934799234669020585545089655311147854185703454925708223337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 469afdfc515e7c545352e299e3b332ef931a7f56 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a523effeb7742a312fe444fd51ec63e907f892b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ssl.com/SSLcomDVCA_2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.ssl.com/SSLcomDVCA_2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ssl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluestarorganics.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluestarorganics.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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