magazine.ketchum.edu

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number c0:32:5d:9c:57:2c:45:8b:ac:c2:73:95:8a:0b:81:62 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magazine.ketchum.edu,OU=Domain Control Validated+OU=PositiveSSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c0:32:5d:9c:57:2c:45:8b:ac:c2:73:95:8a:0b:81:62
Serial Number (int): 255473288684295797819897020397512261986
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d1:bf:31:d4:c8:db:2e:89:d1:59:02:cf:bc:07:8a:0a:07:73:a3:f7
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): bb:a5:40:a5:c9:e9:31:2f:bb:03:ce:a4:0a:a2:6c:42:54:a5:9c:b0
Fingerprint (sha256): 58:84:e5:cf:ba:1d:76:5f:22:a3:8b:e6:a8:b9:39:ba:1b:5c:f6:f0:5a:56:68:75:a6:a8:ff:4f:22:06:57:5c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate magazine.ketchum.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.ketchum.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magazine.ketchum.edu
www.magazine.ketchum.edu

Other certificates including the domain name ketchum.edu

(limited to 100 certificates)
apps.ketchum.edu
jobs.ketchum.edu
apps.ketchum.edu
apps.ketchum.edu
ketchum.edu
tls.automattic.com
ketchum.edu
jobs.ketchum.edu
sra.ketchum.edu
jobs.ketchum.edu
*.eproxy.ketchum.edu
photoshelter.ketchum.edu
photoshelter.ketchum.edu
ketchum.edu
tls.automattic.com
go.ketchum.edu
photoshelter.ketchum.edu
photoshelter.ketchum.edu
jobs.ketchum.edu
my.ketchum.edu
www.ketchum.edu
photoshelter.ketchum.edu
go.ketchum.edu
moodle.ketchum.edu
www.ketchum.edu
jobs.ketchum.edu
go.ketchum.edu
conference.ketchum.edu
jobs.ketchum.edu
ketchum.edu
apps.ketchum.edu
jobs.ketchum.edu
ketchum.edu
photoshelter.ketchum.edu
photoshelter.ketchum.edu
mail.ketchum.edu
jobs.ketchum.edu
magazine.ketchum.edu
apps.ketchum.edu
mail.ketchum.edu
tls.automattic.com
sra.ketchum.edu
ketchum.edu
*.eproxy.ketchum.edu
ems.ketchum.edu
www.scco.edu
screenconnect.ketchum.edu
jobs.ketchum.edu
www.ketchum.edu
photoshelter.ketchum.edu
photoshelter.ketchum.edu
apps.ketchum.edu
tls.automattic.com
*.eproxy.ketchum.edu
tls.automattic.com
photoshelter.ketchum.edu
mail.ketchum.edu
tls.automattic.com
ketchum.edu
nps.ad.ketchum.edu
my.ketchum.edu
tls.automattic.com
ketchum.edu
jobs.ketchum.edu
tls.automattic.com
mail.ketchum.edu
moodle.ketchum.edu
khnps.ad.ketchum.edu
jobs.ketchum.edu
ketchum.edu
conference.ketchum.edu
photoshelter.ketchum.edu
www.ketchum.edu
tls.automattic.com
tls.automattic.com
photoshelter.ketchum.edu
my.ketchum.edu
tls.automattic.com
magazine.ketchum.edu
tls.automattic.com
ems.ketchum.edu
tls.automattic.com
ems.ketchum.edu
tls.automattic.com
conference.ketchum.edu
go.ketchum.edu
tls.automattic.com
moodle.ketchum.edu
www.ketchum.edu
my.ketchum.edu
jobs.ketchum.edu
jobs.ketchum.edu
go.ketchum.edu
go.ketchum.edu
sra.ketchum.edu
photoshelter.ketchum.edu
ketchum.edu
tls.automattic.com
jobs.ketchum.edu
conference.ketchum.edu

Certificate

The complete raw certificate details for magazine.ketchum.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27ayTmcFFca+W2fnQooB
3GLkk0SZSvSV54yVWiPdeQKKUdtqHyEqDcfiE3emvfZzRqOcWMCw23fI0QA/YSFp
/2LbRasoY2pQaqfkmUF02JuOwCVaPTZ56CEa/9F3bshk8pvAfjhhnIM8MFma0lQo
uFI91leU4wkO0RUGbiUuK45d7sEPnYrV6ndSHDstU7kqysDCDSmb07FvG+XNMgLG
2aqZvByJdXr4GQ9RldsCnf1gfv/GaX8Lcs7fgHlHVxHhCgFyGLfvrAXLRKl+RxXK
HN62BRnEpxbP0ulR3KGY5nTh7hIegXbmU2brJTPhlYn07hI/9pZqROQ9wC/eSk7C
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 255473288684295797819897020397512261986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.ketchum.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27736279793806728807472562187016606540996971609401598939871954985231151048558015902964328314644456278034179142978462313242847445002671196628522836534652408877229818838068711825987103320313170876876840481217417063741759623077914452992378210997374513217276567432758656474684401985502286472270626679169043575615614049498267541094770201207383499091798504086621533102920689448545998227088199543604962979783352806230221498938073263028515821172090171633828313753486715402011586166199300050776301208580988174630829215790455640097986530746147362358533323465375647517693571099039217364261096343030426514377698208789364904739527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1bf31d4c8db2e89d15902cfbc078a0a0773a3f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.ketchum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazine.ketchum.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168af180222000004030046304402200b56d31fb480c9f8fef83fdd77385042eae262ba729bf0dc2b7df5ded8d3f76c022045a7c7e30335d7bacf2b2afe17bb44c226ed0e08ad48ae8bcc63dae0d47223db0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000168af1802780000040300473045022026650421ac61aaa68fd87a5438ddc3813a4c723859e24f8ab15a9db0253c62ea022100ff954cb02db9fedd5f5bb7d616fb55a88440557e611bfafdf5c5c7feab7bf632
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b111c262eeb5f10890438ce1f9ffa8318ad5e53566689ab7a4c1374eb8e45c9e1d405129e26c6fc5cc1e7b8a26f1d9fa9775d9ac9fb51ad9d5331f0f1daf6f0c70158e22512eaf693bf4ed00b8f43baa9ba449a1434ab299bd97bcc6165f258228edc5bbde1123e9e8edab2e6fde8b8b4db83c419fd3f8651c3262361b921aa3365a0f892b7fb609ea4cdd9c918386a9119a90e8b06ec8616a781eb8401df8ac94f841744696a9723033124d8e09e128314b86556e3e96c1a5f1fdbf784abc517e39b1c24e5e1fb0bc2bf5b27d50aa872d0b8fa6edb2342fd27ef9b62f0c675e1b311da858041f6e9a6f9e3afe174129695956a32d15a8c2aa3a1a39de60b76d