lucity.orcity.org

Issued by Register.com CA SSL Services (DV)

About this certificate

This digital certificate with serial number 35:83:05:fc:9f:45:b1:72:88:2f:5f:51:fe:6e:88:1a was issued on by Register.com.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lucity.orcity.org,OU=Domain Control Validated+OU=Hosted by Register.com+OU=EssentialSSL

Register.com

Organization: Register.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:83:05:fc:9f:45:b1:72:88:2f:5f:51:fe:6e:88:1a
Serial Number (int): 71129396091905945950961197112533878810
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b6:81:d6:80:ea:8e:2f:1a:c3:b3:4f:1d:6f:b5:6b:5b:a4:aa:d1:81
AuthorityKeyId: 96:36:9b:f8:d6:e5:b3:68:4a:70:7a:7a:72:8d:d3:6e:2c:0b:b9:31

Fingerprint (sha1): 50:c7:68:14:fd:f3:d3:e4:62:09:79:29:ef:57:be:54:93:0c:0f:51
Fingerprint (sha256): 5e:99:2b:61:65:cf:ca:05:c2:a0:dd:d5:6c:17:d3:c7:4b:ba:18:28:e3:b6:4b:6a:f0:6b:86:15:95:3c:af:fd

Issuing Certificate URL: http://crt.register.com/RegistercomSSLServicesCADV.crt

Revocation information

OCSP Server: http://ocsp.register.com
CRL Distribution Point: http://crl.register.com/RegistercomSSLServicesCADV.crl

Check the revocation status for certificate lucity.orcity.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucity.orcity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lucity.orcity.org
www.lucity.orcity.org

Other certificates including the domain name orcity.org

(limited to 100 certificates)
*.orcity.org
CORC-FW.orcity.org
bids.orcity.org
exchange.orcity.org
bids.orcity.org
webmaps.orcity.org
bids.orcity.org
www.orcity.org
maps.orcity.org
*.orcity.org
www.orcity.org
orcity.org
CORC-FW.orcity.org
CORC-FW.orcity.org
*.orcity.org
bids.orcity.org
*.orcity.org
online.orcity.org
orcity.org
www.orcity.org
*.orcity.org
orcity.org
edenweb.orcity.org
maps.orcity.org
edenweb.orcity.org
bids.orcity.org
maps.orcity.org
lucity.orcity.org
bids.orcity.org
edenweb.orcity.org
CORC-FW.orcity.org
bids.orcity.org
webmaps.orcity.org
www.orcity.org
edenweb.orcity.org
www.orcity.org
bids.orcity.org
orcity.org
www.orcity.org
exchange.orcity.org
exchange.orcity.org
*.orcity.org
bids.orcity.org
www.orcity.org
parking.orcity.org
edenweb.orcity.org
orcity.org
CORC-FW.orcity.org
maps.orcity.org
maps.orcity.org
bids.orcity.org
permits.orcity.org
*.orcity.org
www.orcity.org
edenweb.orcity.org
CORC-FW.orcity.org
bids.orcity.org
orcity.org
www.orcity.org
*.orcity.org
bids.orcity.org
maps.orcity.org
bids.orcity.org
*.orcity.org
www.orcity.org
*.time.orcity.org
www.orcity.org
www.orcity.org
edenweb.orcity.org
bids.orcity.org
orcity.org
bids.orcity.org
*.orcity.org
bids.orcity.org
bids.orcity.org
edenweb.orcity.org
CORC-FW.orcity.org
*.orcity.org
edenweb.orcity.org
www.orcity.org
www.orcity.org
online.orcity.org

Certificate

The complete raw certificate details for lucity.orcity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA081/NCCae//RTr/jTeQE
orQBc2TwXZ9M0t2PZ/L/OGj+tIGCk6bfdtx+kQHAOQek9MbEz/MY3CefPTEeAr75
FW3x4jyBNNd1vz5O7EP+A6/EKQMNroZYbCu0/0LDf/v2tR6HYNguEFSsU1fIrWVa
sIWQnfOLOsgr7nPaLpqgCuXHAVTFMyP+ZjEOO0itCjgF+0zOa5r4klGjuna+sSYm
GItFesFbni3u4ztPuLsJA3ElZiIA+tfpsMFMOGotGBNdvGxt3/tkuD/tzFuty0TV
hjK6ZqRR+ORU5NamJqSYD/pjSDnXW7/4JURhEc8hJYYa5hoWmtDkDwi635liB3cN
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71129396091905945950961197112533878810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Register.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Register.com CA SSL Services (DV)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Register.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucity.orcity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26737616640659221045464692033378645161521478276192287522550487660677820481746235107917718939460226802987467825542186873501208130085116289490519478419055532943483771188818575110460611615576439315645077887378157121182720867989637953654398612093454116467017708574488640856620175875356254884697224693873856013558843349138033624758320399213313505535138806118032452761135785428731708077253050761679423586305991791255348220056533295706180456095181298521618951271341223696352356124678278456604051837695084424768830949139067911448129287785627758031129536095092281137254789658985677276779656652944991272851246630022322941529433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96369bf8d6e5b3684a707a7a728dd36e2c0bb931
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b681d680ea8e2f1ac3b34f1d6fb56b5ba4aad181
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.24
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ca.register.com/repository/Register_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.register.com/RegistercomSSLServicesCADV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.register.com/RegistercomSSLServicesCADV.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.register.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucity.orcity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucity.orcity.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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