apply.magnet.ccsd.net

Issued by R3

About this certificate

This digital certificate with serial number 04:03:9a:b5:23:1a:35:d6:ff:d5:a3:a8:0f:41:a4:2f:0b:17 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apply.magnet.ccsd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:03:9a:b5:23:1a:35:d6:ff:d5:a3:a8:0f:41:a4:2f:0b:17
Serial Number (int): 349675632456847004802083340886274988772119
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:84:dc:fd:a4:7d:41:c1:55:b9:e8:3e:05:e6:d9:a4:fc:a5:9a:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:76:c0:c2:d1:90:82:db:4a:46:fe:59:08:64:ba:0e:d0:b6:78:07
Fingerprint (sha256): a2:22:00:fb:34:9e:cb:98:7a:82:a2:45:dc:08:b9:0a:be:d5:22:a7:2a:45:66:af:31:18:63:82:a4:02:79:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apply.magnet.ccsd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apply.magnet.ccsd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply.magnet.ccsd.net

Other certificates including the domain name ccsd.net

(limited to 100 certificates)
*.sems.ccsd.net
mail.securitysystems.ccsd.net
info.securitysystems.ccsd.net
*.ccsd.net
famis.ccsd.net
email.axioshq.nv.ccsd.net
info.securitysystems.ccsd.net
famis.ccsd.net
sems.hrd.ccsd.net
parentlink.ccsd.net
*.sems.ccsd.net
campus.ccsd.net
campus.ccsd.net
mail.securitysystems.ccsd.net
erp-sx-s12.erp.ccsd.net
magnet.ccsd.net
*.ccsd.net
*.compass.ccsd.net
parentlink.ccsd.net
sems.hrd.ccsd.net
ccsd-win-jf01.ccsd.net
*.sems.ccsd.net
*.ccsd.net
effm.ccsd.net
*.ccsd.net
shared.compass.ccsd.net
secure.ccsd.net
ccsd-win-jf01.ccsd.net
kiosk.olr.ccsd.net
*.ccsd.net
erp-sx-s17.erp.ccsd.net
*.ccsd.net
info.securitysystems.ccsd.net
shared.compass.ccsd.net
*.sems.ccsd.net
www.lunt.ccsd.net
*.tiss.ccsd.net
riverdeep.ccsd.net
sems.hrd.ccsd.net
*.ccsd.net
mail.securitysystems.ccsd.net
ccsd-win-jf01.ccsd.net
shared.compass.ccsd.net
cm.ccsd.net
*.ccsd.net
nsweb.ccsd.net
ccsd-ftp.erp.ccsd.net
shared.compass.ccsd.net
shared.compass.ccsd.net
magnet.ccsd.net
*.hcm.ccsd.net
everyday.ccsd.net
ccsd-ftp.erp.ccsd.net
mail.securitysystems.ccsd.net
*.hcm.ccsd.net
mail.securitysystems.ccsd.net
www.bryan.ccsd.net
famis.ccsd.net
*.ccsd.net
riverdeep.ccsd.net
*.ccsd.net
magnet.ccsd.net
myaccount.ccsd.net
riverdeep.ccsd.net
magnet.ccsd.net
hrd6.ccsd.net
magnet.ccsd.net
*.sems.ccsd.net
ccsd.net
*.tiss.ccsd.net
*.ccsd.net
apply.magnet.ccsd.net
cm.ccsd.net
ccsd-win-jf01.ccsd.net
erp-sx-s12.erp.ccsd.net
everyday.ccsd.net
ccsdmagnet.org
mail.securitysystems.ccsd.net
*.ccsd.net
magnet.ccsd.net
mail.securitysystems.ccsd.net
*.ccsd.net
magnet.ccsd.net
magnet.ccsd.net
parentlink.ccsd.net
nsweb.ccsd.net
erp-sx-s17.erp.ccsd.net
email.axioshq.nv.ccsd.net
apply.magnet.ccsd.net
ccsdmagnet.org
facilities2.ccsd.net
apply.magnet.ccsd.net
ccsd-win-jf01.ccsd.net
*.ccsd.net
bffm.ccsd.net
erp-sx-s17.erp.ccsd.net
*.tiss.ccsd.net
campus.ccsd.net
campus.ccsd.net
*.ccsd.net

Certificate

The complete raw certificate details for apply.magnet.ccsd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349675632456847004802083340886274988772119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 20:05:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 20:05:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apply.magnet.ccsd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753295146629573952780604942637977691689500270782987377987331723905012474880458952202724941792663502990678299712641348117396983102974140573866854976057476428852179258666213418383359021921302422541440890161946276000608280087897915828157046642798077372781214410109911168744071778384666265819138652071366133491307191671366726367009187158790156557312500615955867115141212922461632566816460923416198475023068572592369124852198677538656913571668225711299264111823350281204042280540965410747893976725790771562411642242549846085783519706544349692016848777042633517354212648729166755563175138070313272079496475809311100450888029147471922143175022598559533547106118656679636586120998866870069530791570383621586185818046825184440223718559958394231630815910684179572112472256493027891057306551115202546283738657309096071874969068321100084757293953834997529516025843882727035716281992552841189359229256792502852873784737043946707447424597420018400191249668254072941781886569705796527596308620282246491228688072284487976554476969309582947169371010163310548674328627552588950172521264557292515644033858061077354587923154466375195934363001256813002113552840090626881747740775073287232189799540697981564674944407618887780156395570517549925842015763239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6984dcfda47d41c155b9e83e05e6d9a4fca59a77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.magnet.ccsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018da9704e85000004030047304502201009d2805dd30426c4cebbb22f2ca79c05ec5e9e060e537d97c20ba59ec3deae02210092b4aca69baf4365adc91490eb00fdebd88e58314761bea02d164e0dd990350000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018da9704ede000004030047304502210090e03c183ba7f3ef73a60b8b27a8103a703d0d73abbb99b128f6b3bc23906d2f02203dee539dd4ff6a635e374d21ed87ab1478246622d348a080a202fed462a66e50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006930cf6c36d0a7f34205edb81ee96867fd059b1b4fc63f05778e4a0b0e24ed2ba456e3d02f0c37702bcb173323d6f2b1657c10ea3afacf969b1df17e0b9a864f69f4c56a9d29ba3d93f521ab03b27ec9b1bfb1dbc3f97d6980147866b17b410605620c488d254183d4d05a0c20068833028d65e18b2f86231813f7e3c9aa31b4e629631bc62b969c218fdb0105dbe1414e85f10bea05192bb8567626950afc0782ec6117e09c37414959f2699a6b690006ba42bd6d383eae6da7bfb245f0bc1198794532b6815a900ef57cf9d6041c6d4910bf446e8ea73c9dad5c807eb14b713ea00d9f6c7c3303557787314d6c011d225d5afcb4b9bfd2b8c260730fb0de3