*.cityofparkland.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 8a:93:ee:1d:1b:75:41:c5:58:b3:8a:81:0a:2c:1a:8a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cityofparkland.org,OU=Domain Control Validated+OU=PositiveSSL Wildcard

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8a:93:ee:1d:1b:75:41:c5:58:b3:8a:81:0a:2c:1a:8a
Serial Number (int): 184201560576123242313638849037388749450
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 11:68:19:f4:9f:3b:3f:60:21:c6:2f:04:fa:06:6b:75:e6:7b:35:93
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): c4:fa:a1:62:55:d5:4f:c4:c7:97:4c:b7:17:76:56:c4:64:26:c4:8a
Fingerprint (sha256): 97:f0:82:cc:09:53:15:4d:55:54:b1:a3:66:f0:38:b0:df:d1:13:33:9f:15:04:f1:c7:ab:5b:9b:2c:aa:29:cc

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.cityofparkland.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cityofparkland.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cityofparkland.org
cityofparkland.org

Other certificates including the domain name cityofparkland.org

(limited to 100 certificates)
exmail.cityofparkland.org
FH109-FW.cityofparkland.org
rec.cityofparkland.org
rec.cityofparkland.org
www.cityofparkland.org
*.cityofparkland.org
etrakit.cityofparkland.org
www.cityofparkland.org
rec.cityofparkland.org
imperva.com
mail.cityofparkland.org
PARKvEXCH1.cityofparkland.org
www.cityofparkland.org
www.cityofparkland.org
*.cityofparkland.org
ch-fw.cityofparkland.org
www.cityofparkland.org
FH109-FW.cityofparkland.org
208.63.22.130.cityofparkland.org
rec.cityofparkland.org
www.cityofparkland.org
www.cityofparkland.org
etrakit.cityofparkland.org
parkvrec31.cityofparkland.org
*.cityofparkland.org
rec.cityofparkland.org
rec.cityofparkland.org
etrakit.cityofparkland.org
exmail.cityofparkland.org
*.cityofparkland.org
mail.cityofparkland.org
www.cityofparkland.org
www.cityofparkland.org
www.cityofparkland.org
imperva.com
rec.cityofparkland.org
ch-fw.cityofparkland.org
rec.cityofparkland.org
www.cityofparkland.org
rec.cityofparkland.org
etrakit.cityofparkland.org
www.cityofparkland.org

Certificate

The complete raw certificate details for *.cityofparkland.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pnSh5oozl8I4IsXtFPo
ZqvZu0Uux/W0YnX6ARLR26LK7uqH+GOWQ2dDybCSMD/ZmxEJHbKxmI3Eh03ahbll
bbC0AnUZzF0fFHpAP421vXRpUntbvyxIa6GM2JVHgNSq4KnhCWzP/7Kfx7d8o4aU
k4YKV03sVVB9YJUrmtBS2BB5e7e4xEFa8QwDCD6AN47Kms5KA7QP69NA2tf3ScP2
gZHQgyttjkzL6ZPN5hXCd8sJFXQZvlogwwKIPDecr+EuwBlfmDXjqVEyglQjUmjz
f39SoX1XnKxApNCEdjeYuavHc1HAzMDBlyHyH7lFaBUOU8domHBXH6z/5Dfw/B+c
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 184201560576123242313638849037388749450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cityofparkland.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29615616005503810702697136215599596748369067662259786445635012771072090224838097138861204985412919204550381602990235949372863682800162416679836911336600915967230252005131630720169170159324718408636294209486239832101108895095034975146351875828545348802238832676420228366631542304781695991833302042112021231390631696772361608850212320421540116094600401131316194798924724811505045344847179352912479155866804418473932183972394474305056060882134742668068403276933024876478714533785614044597272404593059998776140272359676641924776559228155609822847402324059160406173476163166854314436682095263627902710773875043313318337683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							116819f49f3b3f6021c62f04fa066b75e67b3593
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityofparkland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofparkland.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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