cmacan.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 68:43:47:c5:32:ba:65:a9 was issued on by Starfield Technologies, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmacan.org,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:43:47:c5:32:ba:65:a9
Serial Number (int): 7512927515669325225
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: e7:6d:68:9a:c4:d7:fe:c8:82:5c:1f:fa:30:25:c4:6c:77:0c:07:c8
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 31:19:83:6a:46:f3:d5:a8:c2:6b:e9:0a:e1:ed:c7:d1:ad:5f:b1:2c
Fingerprint (sha256): a1:d1:a9:09:89:15:5b:70:e5:25:01:14:1b:8f:42:91:69:94:9d:35:c5:f5:b7:c8:95:9a:9d:40:be:dd:98:ea

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-129.crl

Check the revocation status for certificate cmacan.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmacan.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmacan.org
www.cmacan.org
defenddignity.ca
faithhopeinaction.ca
histoiresmerveilleuses.ca
buyingsexisacrime.ca
extraordinarystories.ca
catalogue.faithhopeinaction.ca
allianceassembly.com
envisioncanada.org
ch.envisioncanada.org
choosechangecanada.org
fr.envisioncanada.org
mynmc.ca

Other certificates including the domain name cmacan.org

(limited to 100 certificates)
extraordinarystories.ca
mail.cmacan.org
testlab.cmacan.org
ssotest.cmacan.org
cmacan.org
extraordinarystories.ca
cmacan.org
cmacan.org
defenddignity.ca
extraordinarystories.ca
cmacan.org
mail.cmacan.org
extraordinarystories.ca
cmacan.org
defenddignity.ca
extraordinarystories.ca
cmacan.org
cmacan.org
cmacan.org
cmacan.org
cmacan.org
reportal.cmacan.org
cmacan.org
cmacan.org
cmacan.org
www.cmacan.org
extraordinarystories.ca
sni.cloudflaressl.com
mail.cmacan.org
mail.cmacan.org
mail.cmacan.org
cmacan.org
cmacan.org
cmacan.org
cmacan.org
*.cmacan.org
cmacan.org
cmacan.org
churchfinder.cmacan.org
mail.cmacan.org
vpn.cmacan.org
defenddignity.ca
mail.cmacan.org
cmacan.org
cmacan.org
cmacan.org
cmacan.org
cmacan.org

Certificate

The complete raw certificate details for cmacan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XchZI6m3vmO+//4yKpx
qL5Q7H/pbJYxFX904L5d4UFmQr5FBLC1BcnpJqDmiBeAIVmOKY6rCkrpoELS5Gqs
cw9nL/B0573UTgebUznD8bEpB+9e16kXvRJOZlsmXhOdB5zKmBIed5yC/NE+C4Xq
lJyKHLePR2Wz9O5HDorbTimVAdAekVftY8S8buQJN82jb6o/ogb+1VejBXCsvvRv
xotqJYqK3OI9lExJXs2iDAGcxy1o0qveHKhDxh4gyGTtWnR7z82Bv3tZKWASj5YV
LPs+hU2jl2L9poGL6aBM+IZDdfxXlBaBt98Frz96JJl9uuzKkTDn3AMTU6c4rU0e
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7512927515669325225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 13:13:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-26 17:42:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmacan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27452457587381577267488463707278332078200685914316826053458372976208368603772952009558121015174292674855500397199001973535987180367702742020793585005763585569378934425088601190376142556703534260463233891310855213608032072816517623386344577598879239100006291360065719335534616488999155625990993199985444220051659433308168515917812531295140763815410197065127784513002304188007621104528656567062167432372895173240651570301544046838112635588262817116226450136764848885518828713468998655511807422508098018006874405865184747393985089856708360200601847503609121248782875543097659016246850016381739507603333196886951857036821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-129.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmacan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmacan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defenddignity.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithhopeinaction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'histoiresmerveilleuses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyingsexisacrime.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraordinarystories.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.faithhopeinaction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianceassembly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envisioncanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.envisioncanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choosechangecanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.envisioncanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynmc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e76d689ac4d7fec8825c1ffa3025c46c770c07c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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