sts.ccsd1.org

Issued by Network Solutions DV Server CA 2

About this certificate

This digital certificate with serial number fd:63:c3:38:35:0e:af:96:8e:44:53:e3:5f:b0:79:a8 was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sts.ccsd1.org

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
State / Province: VA
Locality: Herndon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fd:63:c3:38:35:0e:af:96:8e:44:53:e3:5f:b0:79:a8
Serial Number (int): 336812679845648936327826697923016554920
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 19:3f:85:a8:78:e1:66:94:fe:34:d9:f6:ad:9e:e5:4f:fa:58:4f:ee
AuthorityKeyId: 51:ce:df:54:1d:b7:2c:57:ab:68:61:48:02:1a:d3:b2:85:ec:40:aa

Fingerprint (sha1): 17:57:bf:31:7d:5f:13:6b:fb:bd:57:f6:6d:a8:3f:fc:fb:f4:04:92
Fingerprint (sha256): a2:3c:20:d0:67:e7:56:09:ee:8a:32:87:c8:d4:cd:3b:d5:33:08:d2:99:56:cf:79:64:27:72:33:ba:66:4a:89

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl

Check the revocation status for certificate sts.ccsd1.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.ccsd1.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.ccsd1.org
www.sts.ccsd1.org

Other certificates including the domain name ccsd1.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sts.ccsd1.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMik3MY8f9Pp8Yk29DGG
V3FFW8DYLLFrMJk3h5DWqUyJWXRZEdawKSA32ZqyJ+mvjInHx6lnHSN9hDTrmn80
0JZ7T9yZ2xqdyPg8FZE625qBAR10tSMKUcIo2ixuBIUGk8RoqK5K8TYyUetDWy3t
/MVnROTlQZO7RoS8Y0jG1UIbBP50xnQuXIobXEvKnOfr5TGMCcmURXMvP9M2MzPM
N6M+4Lmk8C9FemOINCip6FPwKplNbRJoaV/old2YxSxB0070oNZMOVN7QOf8gHCU
x9EpjtiZjXNYdUAGlsozT483BFazyurHDqghN7WjBnesdqdwK4Izw8MGJ8AYWsod
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336812679845648936327826697923016554920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts.ccsd1.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22821836134798929569595196424341383040022429786030240224659618663598463307209291079770883097653821371679254257640251611053556011557843901145228295172884132971735053000625757954046265063802371093536569489836173852890921916641261006505381363333503428035281424555780819490625911467177718798649917627750857681024239281501513092369029305831633158305655956496522112111626573652657830032013455135004666861476245328389255815625313850381826682690784036282578862075990062764406091001460698960208281384286888333569183019835391731971621593179595977037739915979167384835569319444121318851977254677674652329126916353186020796800371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51cedf541db72c57ab686148021ad3b285ec40aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							193f85a878e16694fe34d9f6ad9ee54ffa584fee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.ccsd1.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sts.ccsd1.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001712c9615070000040300483046022100d7366fe4da7e9d2cade0d9a77ad05e3c57854482ff36f554514c219f9bba1566022100fe52bbe6740dcea24ed9997c719fd82a91fa06290ae42b9ffe41320af0d05f610076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001712c9614d90000040300473045022056986f8a55609e1445bc1b93f958820feb350769545a6ebf10c9ddaee5a4c0ad022100f1eb22eb763486db1e2a558793a7899721e727f68fe57a0ce164748333505411
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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