www.bethunems.org
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number b1:37:12:50:b6:a3:9c:ea:74:3c:88:92:dd:d2:66:3f was issued on by ZeroSSL.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.bethunems.org
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate will expire on
Certificate Details
Serial Number (hex): b1:37:12:50:b6:a3:9c:ea:74:3c:88:92:dd:d2:66:3fSerial Number (int): 235559303059299459604924813049213380159
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 39:60:46:79:e6:c2:1c:50:0f:02:fb:5e:ce:1d:0b:73:3c:06:4f:d7
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): 62:e7:af:0a:6b:7b:31:60:1c:b5:de:18:84:e9:af:53:7d:5e:28:a3
Fingerprint (sha256): c6:7f:01:da:b0:3a:e0:49:0a:f9:bd:c6:eb:35:79:7e:8f:fe:ca:cc:02:c3:3a:f8:c2:94:51:c3:0c:a8:e9:a2
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate www.bethunems.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bethunems.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.bethunems.org
admin.bethunems.org
bethunems.org
admin.bethunems.org
bethunems.org
Other certificates including the domain name bethunems.org
(limited to 100 certificates)
www.bethunems.org
admin.adulted.esc20.net
www.bethunems.org
www.bethunems.org
www.bethunems.org
www.bethunems.org
www.bethunems.org
www.bethunems.org
high.troupisd.org
www.bethunems.org
admin.adulted.esc20.net
www.bethunems.org
www.bethunems.org
ael.esc20.net
www.bethunems.org
elc.usd458.org
www.bethunems.org
www.bethunems.org
admin.bethunems.org
www.bethunems.org
admin.adulted.esc20.net
www.bethunems.org
www.bethunems.org
www.bethunems.org
www.bethunems.org
www.bethunems.org
www.bethunems.org
high.troupisd.org
www.bethunems.org
admin.adulted.esc20.net
www.bethunems.org
www.bethunems.org
ael.esc20.net
www.bethunems.org
elc.usd458.org
www.bethunems.org
www.bethunems.org
admin.bethunems.org
www.bethunems.org
Certificate
The complete raw certificate details for www.bethunems.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlTCCBH2gAwIBAgIRALE3ElC2o5zqdDyIkt3SZj8wDQYJKoZIhvcNAQEMBQAw SzELMAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9T U0wgUlNBIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yNDA1MDUwMDAwMDBaFw0y NDA4MDMyMzU5NTlaMBwxGjAYBgNVBAMTEXd3dy5iZXRodW5lbXMub3JnMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZf95Ur9WvD+QbPz63+iTcDJDvF0 6mkiO4TfvYnH7G46V6JJ7fwKn/r4f5b4ghXv1sX8xLrQZuOwfYA571JpVDNKYXyR WbJAoaVgDhF8FQTx4t5+GwIg/32FtAn9Pg7b1p3MlNJkF17It2VT5RbzGeZvH0b+ Cqwxk7jWn8sL52O0FJqYB+eJ5PYKSNPUfx93Kp1f85UtLnjcwoGl87B52y4kn4Lk NIGNMBd0sSAnSeQHootZOpL9W482h8cYtQzbxlEEI78A/4LHJ9IGu/2cSPhKklS7 G3yf29/Oz1/fTqoGZbvq+XGWl7BXI1g/MNPxcCgiUZdWFzIPMJnH1UT+MwIDAQAB o4ICoTCCAp0wHwYDVR0jBBgwFoAUyNl4aKLZGWjVPXLeXwo+3LWGhqYwHQYDVR0O BBYEFDlgRnnmwhxQDwL7Xs4dC3M8Bk/XMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMB Af8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBA MDQGCysGAQQBsjEBAgJOMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5j b20vQ1BTMAgGBmeBDAECATCBiAYIKwYBBQUHAQEEfDB6MEsGCCsGAQUFBzAChj9o dHRwOi8vemVyb3NzbC5jcnQuc2VjdGlnby5jb20vWmVyb1NTTFJTQURvbWFpblNl Y3VyZVNpdGVDQS5jcnQwKwYIKwYBBQUHMAGGH2h0dHA6Ly96ZXJvc3NsLm9jc3Au c2VjdGlnby5jb20wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY9GUX6lAAAEAwBHMEUCIFLf5xQsiHcW DYYi6hZnGOaHxLgVZnea5aUv1x9kFtM4AiEAwaUTDBE6D22u/kplhgYW76nX6zWv jCn3pjgy8ua0VpcAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAA AY9GUX7nAAAEAwBHMEUCIQDygWCUiEB5EJBAADGve47MUdXArbcwu/8qtGNXBQcH 8QIgfVfTMbzki/Ufh0LdYFuYsSZ36UbyEBF/OAZrz2mhRS4wQAYDVR0RBDkwN4IR d3d3LmJldGh1bmVtcy5vcmeCE2FkbWluLmJldGh1bmVtcy5vcmeCDWJldGh1bmVt cy5vcmcwDQYJKoZIhvcNAQEMBQADggIBADBRCCF60rgjZ+JZKHBKM2EwBiJlKud6 NHmPJLlrsPVi/Er6XwjwEvOQOVGKC9DlDxeDKmAu6ClScWAY263MWRsGwn4Zr7Li nTlSyzlR9lpMGoh6HdYDNU8L21Yhe5gTC6LAI2pqKY0XMdXD535tPrvvlOxhlgtV V7ln6KPuo9hWedpVGwz1xrltCO3fbo3ZGaVGfzbKhyUMAutD3vT3/OSH8DHuL/Qc x0YNXXF/n55MK1nLvVdS5XJ+FLi9wacE+BbErbfObIXpqKOjfKhSzEtmbVfnNYH+ N6KyUaft+MKzEd8Xj93T9WgeJm9vg/4uRxsFylFWnL7t4lGLWe0Re93TPkAYiQSc lIRwquwZI2wRZtO+YjlosYom61gW3p+qWboj0ZP+ESt9mcYLvS2nn3qLly3x00wi Pj4jVyfsyl+e5lmVAoqdujN9RBSar03HLs3NFex9gcZ+vZpuCB3kfr8E+v6gUEyG dkWDP9cUVTEFDM9hPjqexjRKhv3bWaRQevL3NM8BKqvLaRdjnnsP4rTuDANRSnDs OJ/waIUbYtoTkfc8XPp/meLYl2+GaQ+MVPngiAZVo/myu6v0PckWX3Y5ag4eUUaL HNIHjly16NCuQjk08iOknF01Edv5xjRUHpD20qkAiNJf89fUBgG7oCTkV1QxkBCE 4Yrkrttmuk25 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZf95Ur9WvD+QbPz63+i TcDJDvF06mkiO4TfvYnH7G46V6JJ7fwKn/r4f5b4ghXv1sX8xLrQZuOwfYA571Jp VDNKYXyRWbJAoaVgDhF8FQTx4t5+GwIg/32FtAn9Pg7b1p3MlNJkF17It2VT5Rbz GeZvH0b+Cqwxk7jWn8sL52O0FJqYB+eJ5PYKSNPUfx93Kp1f85UtLnjcwoGl87B5 2y4kn4LkNIGNMBd0sSAnSeQHootZOpL9W482h8cYtQzbxlEEI78A/4LHJ9IGu/2c SPhKklS7G3yf29/Oz1/fTqoGZbvq+XGWl7BXI1g/MNPxcCgiUZdWFzIPMJnH1UT+ MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 235559303059299459604924813049213380159 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bethunems.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16864644500617655418455088536725430968647546866515397436140738630048970951249221692337979094669342495096254813397543426480510781041311399374501086540407148410046905864910437299478739360860707369735160956887782987133246597828639568367835061340702218049407469799657448144939537003989023867173650018199440846087442637374761585800814117292173228892935611292905624293863731402572737027708761539651701536039427021895423614717106914421788697547695136540055082581156998623209097297394628740837447852788580743024081565659934158219254928003210346346212050638515564233375280863253370722044685485738744772430993658440224742899251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 39604679e6c21c500f02fb5ece1d0b733c064fd7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f46517ea50000040300473045022052dfe7142c8877160d8622ea166718e687c4b81566779ae5a52fd71f6416d338022100c1a5130c113a0f6daefe4a65860616efa9d7eb35af8c29f7a63832f2e6b456970076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f46517ee70000040300473045022100f28160948840791090400031af7b8ecc51d5c0adb730bbff2ab46357050707f102207d57d331bce48bf51f8742dd605b98b12677e946f210117f38066bcf69a1452e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bethunems.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bethunems.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethunems.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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