mccd.progressmichigan.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:b1:b8:31:67:70:80:9b:ad:86:ce:26:95:e7:5f:04:bd was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mccd.progressmichigan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:b1:b8:31:67:70:80:9b:ad:86:ce:26:95:e7:5f:04:bd
Serial Number (int): 307170924702595783678425303543649321026749
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:c5:64:2a:8e:c8:ce:bd:5c:d8:a6:08:a9:31:7b:4e:bc:9f:0c:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:c0:a3:9e:ca:b6:21:04:02:fc:ee:d6:a5:31:00:3f:46:11:b8:9c
Fingerprint (sha256): 56:74:42:79:f5:9e:23:a1:8c:e7:de:ad:7f:07:8e:32:87:4a:82:d3:d8:ea:71:bf:e3:8c:b0:dc:8a:95:f3:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mccd.progressmichigan.org

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mccd.progressmichigan.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2016pm.progressmichigan.org
2016test.progressmichigan.org
akworkersvoice.progressmichigan.org
fixyourride.progressmichigan.org
freedomtofreeload.progressmichigan.org
mccd.progressmichigan.org
michiganlecet.progressmichigan.org
michiganprevails.progressmichigan.org
oneweakgeek.progressmichigan.org
reallyterrilynnland.progressmichigan.org
test.progressmichigan.org
www.2016pm.progressmichigan.org
www.2016test.progressmichigan.org
www.akworkersvoice.progressmichigan.org
www.fixyourride.progressmichigan.org
www.freedomtofreeload.progressmichigan.org
www.mccd.progressmichigan.org
www.michiganlecet.progressmichigan.org
www.michiganprevails.progressmichigan.org
www.oneweakgeek.progressmichigan.org
www.reallyterrilynnland.progressmichigan.org
www.test.progressmichigan.org
www.youthmitigationcommittee.progressmichigan.org
youthmitigationcommittee.progressmichigan.org

Other certificates including the domain name progressmichigan.org

(limited to 100 certificates)
www.sunshinesquad.progressmichigan.org
act.one.org
progressmichiganeducation.org
sni.cloudflaressl.com
act.johnfetterman.com
progressmichigan.org
www-default.actionkit.com
progressmichigan.org
www-default.actionkit.com
thoughtsthenaction.com
www-default.actionkit.com
sunshinesquad.progressmichigan.org
action.wemove.eu
thoughtsthenaction.com
www-default.actionkit.com
webmail.progressmichigan.org
www-default.actionkit.com
betsyandbill.com
workingformichigan.org
webmail.progressmichigan.org
www-default.actionkit.com
progressmichigan.org
act.medicare4all.org
shadyschuette.com
www.fixyourride.progressmichigan.org
www-default.actionkit.com
sunshinesquad.progressmichigan.org
act.leftnet.org
www-default.actionkit.com
progressmichiganeducation.org
thoughtsthenaction.com
shadyschuette.com
sunshinesquad.progressmichigan.org
peoplesmillion.whitehelmets.org
www-default.actionkit.com
sunshinesquad.progressmichigan.org
progressmichiganeducation.org
progressmichiganeducation.org
www-default.actionkit.com
thoughtsthenaction.com
mail.progressmichigan.com
shadyschuette.com
sni.cloudflaressl.com
act.lucaskunce.com
www-default.actionkit.com
thoughtsthenaction.com
thoughtsthenaction.com
act.elizabethwarren.com
act.campaigntoendqualifiedimmunity.org
action.pollinis.org
sunshinesquad.progressmichigan.org
webmail.secondchances4youth.org
progressmichigan.org
mccd.progressmichigan.org
thoughtsthenaction.com
www-default.actionkit.com
act.one.org
sunshinesquad.progressmichigan.org
progressmichigan.org
progressmichigan.org
mail.snyderfails.com
webmail.progressmichigan.org
sunshinesquad.progressmichigan.org
progressmichigan.com
progressmichigan.org
act.progressnc.org
progressmichigan.org
www-default.actionkit.com
sunshinesquad.progressmichigan.org
www-default.actionkit.com
mail.readymichigan.org
www-default.actionkit.com
progressmichigan.org
www-default.actionkit.com
act.progressmichigan.org
www-default.actionkit.com
progressmichigan.com
sunshinesquad.progressmichigan.org
progressmichigan.org
progressmipoliticalaction.progressmichigan.org
mccd.progressmichigan.org
www.progressmichigan.org
progressmichigan.org
sunshinesquad.progressmichigan.org
www-default.actionkit.com
faithfulamerica.org
michiganlecet.com
sni.cloudflaressl.com
sunshinesquad.progressmichigan.org
thoughtsthenaction.com
www-default.actionkit.com
act.progressga.org
act.ruraldemocratsturnoutfund.com
action.pollinis.org
thoughtsthenaction.com
greatlakesbeacon.org
act.defendvotingrights.org
sunshinesquad.progressmichigan.org
www-default.actionkit.com
www-default.actionkit.com

Certificate

The complete raw certificate details for mccd.progressmichigan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5hyWh/w7+7720UJaPp3
Z6Aihp2soPkIzVil75kkOtcEHDocIU74cx/jjO3p2HCzzWW1rgbSZISY8CR5TqVY
Lb9Dc/KhcIVyJnFFjO5+QGFV9ZdYSPvzsR53q6W39xxD3Bbr6TEQwxWPgCjiCwci
GbxREpaUdR7OTRKtwnAlBQP/xTySVU/6J/e2B7Sv96ciMGQ6FkY9X5JtrJV2fuND
OKA3pJThkeuS97PHWQ5/cJkePW78rMzsK/zucls7+CyY8/fgPLfKuR03+xF9P9+y
3Ssf6Nn1ZzI+o6RmmdMJOWzdReX68V097UxfI55BULYKBCDMNY7+e1uTSRgeLerz
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307170924702595783678425303543649321026749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-30 08:24:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 08:24:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mccd.progressmichigan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19137158313360355391203197143980577080572893760695380801687354719281734130845187326881604519316081313620801455639991731324828260386146075844464627513270462961469640479785835194123833835029180216500741824992971971653962070151502255309163338957844373935779798615935650884784069656025290723853581851463982574786177445881818744492569460444567649127575482395625236075933990810561161170690412176246701160365600935744030146868835085155146262298385528410057823378426189373410366646454965735655186477309557593283532508855048136206019445271610088969877799331465892077073234748035106144292022370049612936501407121247720643949321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dec5642a8ec8cebd5cd8a608a9317b4ebc9f0c88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2016pm.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2016test.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akworkersvoice.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixyourride.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomtofreeload.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccd.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganlecet.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganprevails.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneweakgeek.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reallyterrilynnland.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2016pm.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2016test.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akworkersvoice.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixyourride.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomtofreeload.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccd.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganlecet.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michiganprevails.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneweakgeek.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reallyterrilynnland.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youthmitigationcommittee.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthmitigationcommittee.progressmichigan.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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