mpu.org

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:8d:8e:45:49:8a:03:f9:18:d7:d5:3e:aa:b5:e9:16 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mpu.org

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:8d:8e:45:49:8a:03:f9:18:d7:d5:3e:aa:b5:e9:16
Serial Number (int): 18014963393923505307005651877943961878
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:91:c1:5b:41:ed:67:53:74:41:97:56:a0:5a:8f:e4:ca:6a:26:1e
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 4c:e5:c4:28:4c:80:82:72:5a:de:9e:1d:6c:cd:bc:36:a9:cc:5b:4b
Fingerprint (sha256): 58:cb:9e:d4:e9:9c:a7:28:be:0e:33:19:c5:7e:ec:42:c7:82:d7:13:57:35:24:b7:ea:75:96:6f:95:37:34:74

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate mpu.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mpu.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mpu.org
www.mpu.org

Other certificates including the domain name mpu.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for mpu.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18014963393923505307005651877943961878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mpu.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776859256455489535141686247550302160270016112481350191575049050001985172774177824353869735703325130572838051462214372185123024500555290045425329227565662268132202855828667236366675897754263141350465601794813686697589813121819715415874890302426783334308596269775395156298183664547361058493099876295450807246539119526856982679433021286161293571350786854865599037936865712042701348465604003195497454476614940029985979475829938551741859751262526979062415649001494875053094920155589999470193747220196205561948173593893863645822477008647897667162096088623459986906316775049735977570971970221233312780924276064658008488159596461787772183038911791530436549203238778947945988758617021278871716754074376048241872531126726768027856942924961907060760966576385712016436407765522341685592788694446056663973193391675686963445931246197162250879951713106785732307062869983710247030252061045076556785285680275427648603416768584695681664564779285602156628796487289095846093445255673210950269419149217005292134994070911797547252725800670295768710310717003921020888120713405187336098905381996426486319198341630589275864449904194531363393275179220743327934948366770703663936937163401845746965477662462054588156107229270746895269784952927569919252676838011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a91c15b41ed675374419756a05a8fe4ca6a261e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpu.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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