*.thescholr.com

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 61:c1:9e:7d:48:9a:d4:f3:5f:04:8f:78:5b:b9:53:18 was issued on by SSL Corporation.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.thescholr.com

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:c1:9e:7d:48:9a:d4:f3:5f:04:8f:78:5b:b9:53:18
Serial Number (int): 129940443431541853565402284695332934424
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:26:7c:ef:71:03:2e:8c:2a:54:da:91:2a:5c:a1:bc:be:2a:ec:13
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 4d:ac:a6:99:dc:da:b8:a6:20:95:d0:01:48:0d:4a:c9:d6:6a:54:f4
Fingerprint (sha256): 9e:1f:12:12:05:09:dc:53:dd:da:55:f6:f4:73:70:a3:b2:9b:8f:38:02:83:91:eb:a0:d8:eb:e1:eb:ba:3f:ef

Issuing Certificate URL: http://www.ssl.com/repository/SSLcomRSASSLsubCA.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate *.thescholr.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.thescholr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thescholr.com
*.costaspanagopoulos.com
costaspanagopoulos.com
osprojectsite.org
partnership.one
socialscience.one
theopenscholar.com
thescholr.com
transbioinfolab.org
www.tobiaswille.net
*.theopenscholar.com
sebastiankoehler.eu

Other certificates including the domain name thescholr.com

(limited to 100 certificates)

*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
thescholr.com
*.thescholr.com
thescholr.com
*.thescholr.com
*.thescholr.com
thescholr.com
*.thescholr.com
*.thescholr.com
thescholr.com

thescholr.com


thescholr.com
*.thescholr.com

*.thescholr.com
*.thescholr.com
thescholr.com
*.thescholr.com
n-print.org
thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
*.d8.theopenscholar.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com

*.d8.theopenscholar.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com

*.thescholr.com
*.thescholr.com
*.d8.theopenscholar.com
n-print.org
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
thescholr.com
*.thescholr.com

*.thescholr.com
*.thescholr.com

*.d8.theopenscholar.com
*.thescholr.com
*.thescholr.com

*.thescholr.com
*.thescholr.com
*.thescholr.com
thescholr.com
*.thescholr.com
*.thescholr.com
sites.broadinstitute.org
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com
*.thescholr.com

Certificate

The complete raw certificate details for *.thescholr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliVhS9cpC8RNl2CmDjlW
JmW1F/EJAhqII2I9Z04ar9yT05bzYq3w3tuuoHMA5OcL7bLnWXk2P94Z8okmnO1s
Gda7iunlbDYXLOgiWPnFohQnrkSTb6vpdNjIpuZwmTwe8aRzongHnQ7uz1Rldnq/
EN/Zh8o7X8U8VgBz3SuJG3Q6X01auY/VrYc5Ijr6Ij85gKbtgCr+T7Mh+UnmfV4O
rJEPpzPIEQPnkzZ/v7v64fPTvNNLD5/KwXYWuPMtwAg7aNAgHYcsxesnAEHsRG0q
/ZjBrPc4JOlV8tgp3Ve/7GP6jQsKAiL2fkcZR5+W9DdNPcq0siDuh2SVrJkEkRcb
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129940443431541853565402284695332934424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 18:21:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 18:21:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.thescholr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18954178541212349511202880427382887873443478523763804835121038199298311468928888145483093470545395624726266704103710901596120345801328972580057192737639134160239914718202161947945655985879487017210793525306429944329395065211909577610456900417983359200875018424082977195235306854912483810650361676742151951477323716498819954142993355330980324949927388581048268815680368830628898528364451943557573554991661063832819873916344170294544539891589484484843996727304443765810760072399217648651107460807481901964422463148131514890204454202108927084529565043910461900043792762908295946341858760266411721740239907181834150550467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcomRSASSLsubCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thescholr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costaspanagopoulos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costaspanagopoulos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osprojectsite.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialscience.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theopenscholar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescholr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transbioinfolab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tobiaswille.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theopenscholar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebastiankoehler.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.1.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e267cef71032e8c2a54da912a5ca1bcbe2aec13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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