www.abem.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 79:00:13:e7:ab:01:6e:b5 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.abem.org

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 79:00:13:e7:ab:01:6e:b5
Serial Number (int): 8718990764316651189
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: fa:6b:91:62:c5:87:2c:1e:e7:44:3f:c5:f0:9f:38:e3:4a:a8:07:01
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 6b:0c:ce:6a:27:cf:96:29:72:ea:7f:0e:77:8a:c3:93:08:dd:e1:8b
Fingerprint (sha256): 73:8e:10:e1:90:b0:c0:39:ad:ab:6a:df:5e:14:c5:f1:7f:e2:c7:52:06:05:d2:24:0c:2d:10:19:df:91:d5:eb

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-631.crl

Check the revocation status for certificate www.abem.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.abem.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.abem.org
abem.org

Other certificates including the domain name abem.org

(limited to 100 certificates)
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
abemcertified.abem.org
badges.gmac.com
badges.gmac.com
cases-prod.abem.org
www.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
badges.gmac.com
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
beta.abem.org
abemcertified.abem.org
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
abemcertified.abem.org
abemcertified.abem.org
staging.abem.org
badges.gmac.com
mail.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
badges.cesarritzcolleges.edu
abemcertified.abem.org
badges.gmac.com
mail.abem.org
www.abem.org
badges.gmac.com
abemcertified.abem.org
ibstage.abem.org
www.abem.org
mail.abem.org
abemcertified.abem.org
badges.gmac.com
abemcertified.abem.org
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
sfstage.abem.org
abemcertified.abem.org
cases-prod.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
mail.abem.org
badges.cesarritzcolleges.edu
staging.abem.org
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
sfstage.abem.org
cases-prod.abem.org
staging.abem.org
ibprod.abem.org
www.abem.org
cases-prod.abem.org
abemcertified.abem.org
vpn.abem.org
alpha1.abem.org
badges.gmac.com
sfstage.abem.org
badges.cesarritzcolleges.edu
abemcertified.abem.org
badges.cesarritzcolleges.edu
www.abem.org
abemcertified.abem.org
www.abem.org
abemcertified.abem.org
abemcertified.abem.org
IBStage.abem.org
alpha1.abem.org
badges.cesarritzcolleges.edu
abemcertified.abem.org
mail.abem.org
badges.gmac.com
badges.gmac.com
mail.abem.org
IBProd.abem.org
cases-staging.abem.org
fs.abem.org
abemcertified.abem.org
abemcertified.abem.org
badges.cesarritzcolleges.edu
abemcertified.abem.org
badges.gmac.com
badges.cesarritzcolleges.edu
badges.gmac.com
badges.gmac.com
abemcertified.abem.org
abemcertified.abem.org
cases-prod.abem.org
cases-prod.abem.org
www.abem.org
abemcertified.abem.org

Certificate

The complete raw certificate details for www.abem.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPpBQ+jq5HbbP4ms7S+6
34+X5O/GctCWmlThtz9OBwaeRPtG1KInnjS75tB/PkXJ85JIlo02NcUPyvBOYe+Q
jkXVJwcfLhXxDg5zUnFZlbprjS3eLgn1PXsYsg37p0V0RsVLvacsWRdQCKYfZDdv
3REPq+CS0eZ8JayZ72WyZGdyZuLuDx9N+rp+1xYndmWiwPoPa+ZtJxne2qxOPZTN
ajqjkO7DnM4P8r6KihDPyQeLTWO+3dxg+dT1C+ESGYllLQi13KbHMODGE+EWpX3i
/bARXCbwgGi/1bFyDaStMoMxlx/eMOsCUn0qzzkDguU+w2wBgJzLKhYFDhCnds6G
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8718990764316651189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 01:47:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 18:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abem.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22846300205402360424946857083832822382473683867971724061184002827013639234954821056174157172157837597563872789761216133136463537157044071868030479734116760584369883146795295900939565518275460548780120541355826654183473972919426057609750170232994317041216413512267790703970989148773894633414020887797129302254672680774253066794456519685370830076062543967513747947125936651774150567662494401414011295573656098233689050049337015608333173068788896719101353115655303009899674697952601919368358358475663278178081975495300469798997509893066915821336003855162477730366531137374155489754568656175025374167842735739653390763687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-631.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abem.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa6b9162c5872c1ee7443fc5f09f38e34aa80701
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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