www.socialjusticemclc.org

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:ed:41 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.socialjusticemclc.org,OU=GT96984397+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ed:41
Serial Number (int): 126273
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 5a:e1:97:58:3e:35:4e:4d:7e:bf:ff:2a:7b:91:bc:63:a3:1c:e6:54
Fingerprint (sha256): 71:68:ae:e8:7d:b3:c0:71:ab:f6:e4:cc:7c:15:ef:72:8b:4a:b9:fb:88:2e:4a:9f:ae:91:f1:55:24:b9:e6:68

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate www.socialjusticemclc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.socialjusticemclc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.socialjusticemclc.org
socialjusticemclc.org

Other certificates including the domain name socialjusticemclc.org

(limited to 100 certificates)
www.sandymilleracademy.com
www.bhef.org
admin.amschool.edu.sv
admin.amschool.edu.sv
academywest.hamadyhawks.net
admin.amschool.edu.sv
cms.wvsd.org
www.sgisd.net
admin.altavista.unionsd.org
admin.amschool.edu.sv
admin.altavista.unionsd.org
admin.amschool.edu.sv
ps16.jcboe.org
admin.arete.prsd.us
admin.amschool.edu.sv
www.ekhla.org
admin.sd44.org
www.bhswca.com
admin.altavista.unionsd.org
www.cristoreyorangecounty.org
admin.amschool.edu.sv
qhs.burnetcisd.net
admin.altavista.unionsd.org
admin.altavista.unionsd.org
admin.amschool.edu.sv
admin.eastvalleycentral.evsd90.org
lvmhs.lucernevalleyunified.org
admin.amschool.edu.sv
admin.amschool.edu.sv
admin.bes.burnetcisd.net
sgisd.net
admin.amschool.edu.sv
www.socialjusticemclc.org
lcsd.k12.ms.us
www.notredameacademy.org
admin.altavista.unionsd.org
es.notredameacademy.org
www.arapaho.k12.ok.us
admin.d124.org
admin.altavista.unionsd.org
admin.hs.notredameacademy.org
www.somonauk.net
md.sd44.org
admin.amschool.edu.sv
admin.altavista.unionsd.org
admin.sfxcatholicschool.org
admin.altavista.unionsd.org
admin.altavista.unionsd.org
admin.altavista.unionsd.org
admin.athenour.unionsd.org
admin.altavista.unionsd.org
athenour.unionsd.org
d124.org
admin.eagles.lucernevalleyunified.org
admin.carlton.unionsd.org
admin.bes.burnetcisd.net
admin.amschool.edu.sv
svts.wvsd.org
admin.amschool.edu.sv
admin.family.mypagosaschools.com
admin.amschool.edu.sv
westlincoln.lcsd.k12.ms.us
admin.royjohnson.cv.k12.ca.us
admin.bes.bentworth.org
admin.bes.burnetcisd.net
admin.socialjusticemclc.org
earlylearning.wvsd.org
admin.altavista.unionsd.org
admin.amschool.edu.sv
admin.burnetcisd.net
socialjusticemclc.org
admin.north.legacyprep.org
family.mypagosaschools.com
admin.lindenschools.org
admin.amschool.edu.sv
admin.amschool.edu.sv
www.socialjusticemclc.org
eagles.lucernevalleyunified.org
admin.altavista.unionsd.org
admin.amschool.edu.sv
admin.crispschools.org

Certificate

The complete raw certificate details for www.socialjusticemclc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGu3Nt9Ie8jwFcB4XNHP
ke3rnhcM/jR8UsqaNAGvaEO0qpaL/lMJFOpTYGZnT4p9kVl71GAOdH6yybvsAsvn
fTl/IyxXl8rpAfMjxAo4oAPqBUzB2630nEiDB9uoGL5QxVKhx7oZgWKsWCMkgcrL
6+rzjpbFGQvXjJnq1x2eCFMMidmVVT7M6GlfK0DZaFjZ/y4eDSApNpG3py+30KO8
1wPrm/Py6knfIgJZYQqCgBA2jrvBQEpO5v8N6SfUV8ydDn44TgyTHghbLAtGAU4T
eq4xolDFyRnZra8WtPfcUfVRVaViMIclQFqIXxdFk6ou67anlH2LEbMYLz/AvXy2
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-11 02:51:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-12 21:32:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT96984397'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.socialjusticemclc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17221526057383625527407761216288876795928362745623368610832578931919305308185789396821748147880794914579982499630596141318796105588424511469325198515940645795772549353835631976833903269700363986601855858516352304417642518063176749244804662386783206482098261675693974571092284939615520532644736659202523431685800623645787458681805487122938104890327170600206258352142078802000035106079518409784928240511553442011601324953635629663376408951889082902144997724445687792100536271461013918060906483441458491754284758858213379126311560702849677139765283754292563212369127696552673675077623018883909021825106091621007927064167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socialjusticemclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialjusticemclc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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