media.myc3church.net

- C3 Church Sydney Ltd -

Issued by Trustwave Organization Validation SHA256 CA, Level 1

About this certificate

This digital certificate with serial number 06:f9:93:eb:64:da:f0:e9:51:8e:fe:e2:9f:7a:a7:82:ac:1d:2f was issued on by Trustwave Holdings, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

C3 Church Sydney Ltd

Organization: C3 Church Sydney Ltd
State / Province: New South Wales
Locality: Oxford Falls
Country: AU

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:f9:93:eb:64:da:f0:e9:51:8e:fe:e2:9f:7a:a7:82:ac:1d:2f
Serial Number (int): 155545764788378765788270717126118843576229167
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 04:35:ad:78:b9:3b:d5:30:96:d5:71:7b:dd:12:96:de:67:9d:8f:ef
AuthorityKeyId: ca:ce:1d:18:03:77:1e:1c:f3:7c:58:b2:9a:70:a8:08:80:16:f4:ae

Fingerprint (sha1): 60:57:51:45:9f:7f:52:29:39:8e:f4:6b:05:b6:21:5b:95:db:1a:0c
Fingerprint (sha256): 87:36:ad:3b:1e:54:4b:8b:f0:f5:89:67:4a:74:fa:42:1d:77:2d:b5:99:90:d9:00:da:4c:d9:18:52:a6:9a:b2

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate media.myc3church.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media.myc3church.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media.myc3church.net

Other certificates including the domain name myc3church.net

(limited to 100 certificates)
www.pursuit.myc3church.net
www.pursuit.myc3church.net
media.myc3church.net
myc3church.net
myc3church.net
live.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
hub.myc3church.net
www.pursuit.myc3church.net
rozelle.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
www.hub.myc3church.net
hub.myc3church.net
media.myc3church.net
www.pursuit.myc3church.net
hub.myc3church.net
pursuit.myc3church.net
www.hub.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
penrith.myc3church.net
www.myc3church.net
pursuit.myc3church.net
mail.myc3church.net
www.pursuit.myc3church.net
myc3church.net
www.pursuit.myc3church.net
hub.myc3church.net
www.pursuit.myc3church.net
pursuit.myc3church.net
admin.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
pursuit.myc3church.net
myc3church.net
pursuit.myc3church.net
www.hub.myc3church.net
www.pursuit.myc3church.net
www.myc3church.net
www.pursuit.myc3church.net
media.myc3church.net
pursuit.myc3church.net
www.pursuit.myc3church.net
admin.myc3church.net
hub.myc3church.net
www.pursuit.myc3church.net
www.myc3church.net
live.myc3church.net
www.pursuit.myc3church.net
myc3church.net
pursuit.myc3church.net
pursuit.myc3church.net
mail.myc3church.net
hub.myc3church.net
myc3church.net
myc3church.net
myc3church.net
myc3church.net
www.pursuit.myc3church.net
myc3church.net
www.pursuit.myc3church.net
www.hub.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
hub.myc3church.net
myc3church.net
myc3church.net
media.myc3church.net
mail.myc3church.net
www.pursuit.myc3church.net
www.pursuit.myc3church.net
mail.myc3church.net
media.myc3church.net
www.pursuit.myc3church.net
pursuit.myc3church.net
myc3church.net
podcast.myc3church.net
www.myc3church.net

Certificate

The complete raw certificate details for media.myc3church.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NybUQc3OfdY/trhrWEz
nEenMbOYcvgab03zdD1YQ4ESpt+UD8gWoIAOrdaqe1YUuziU1J3IY75Qia4+un/e
esmv0qXI7cXGvfYq0XwcS0mdhTCUsnYFmP5m7EVslmy/sZ7ocsMPtm2XQsSOQ+8z
qcmwLK5wreWZsqCph1XxLTWqb4bu5kkGKWB4bF8hQlCN/nNxe7ikhuVQ66DyfSNd
SDkVN1S1EjEMyCCPR8bO3dUK+lNMZ823CWZqV/nqWsxK0HaLQTbTfLMCacPgkvID
5DDtzFcItc2sdKuWlx2gxdABPvdLJ5LAkdtQs1q0LcLHyPd4iDPpzxGr+Xml36yS
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155545764788378765788270717126118843576229167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation SHA256 CA, Level 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 17:34:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 23:34:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.myc3church.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C3 Church Sydney Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxford Falls'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26871305873590653692893790706784280536592577573585735406370308150955520400912909231301855914351316100514738089643255254011987132893064336064994772670092334288461162370088349602709501493366540132451510549263787628121133397336173479961194639648555937163090406666904022666729251493968351592299861075602190056469643054034029830198907166361903173115153812318591702773739797088886244273948886359960678407886531749595519834778570764699699549619103109445327435731369552066112071616882421947528034286472576930690682249746680147038230096015446410146402076302094118627272139746510444511163398129356146976104768226769257288733353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0435ad78b93bd53096d5717bdd1296de679d8fef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cace1d1803771e1cf37c58b29a70a8088016f4ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.myc3church.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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