popejohn.org

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 59:62:f9:fb:0d:4e:35:14:37:49:09:30:74:b5:3b:f4 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=popejohn.org

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:62:f9:fb:0d:4e:35:14:37:49:09:30:74:b5:3b:f4
Serial Number (int): 118815206927371878142268741833859611636
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 52:85:f1:87:c0:76:70:40:83:32:12:da:af:70:54:8e:b4:44:1a:57
Fingerprint (sha256): c9:f0:08:fa:58:a8:79:e1:7f:71:a7:ec:f1:a3:94:51:ae:cf:f7:ee:38:33:95:b8:b8:d4:38:59:58:eb:26:4d

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate popejohn.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for popejohn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

popejohn.org
www.popejohn.org

Other certificates including the domain name popejohn.org

(limited to 100 certificates)
www.popejohn.org
colegiobenedictino.edu.mx
ac21.clps.org
ac21.clps.org
northcatholic.org
popejohn.org
admin.crownpointelementaryschool.wearecms.com
admin.clp.clps.org
admin.banninghs.org
www.northcatholic.org
ac21.clps.org
popejohn.org
clps.org
ac21.clps.org
admin.banninghs.org
webmail.popejohn.org
ac21.clps.org
admin.fges.davidson.k12.nc.us
ac21.clps.org
popejohn.org
ac21.clps.org
admin.popejohn.org
admin.banninghs.org
popejohn.org
lionsden.popejohn.org
admin.banninghs.org
admin.banninghs.org
crumpton.mpusd.net
admin.olaclaremont.com
admin.mamustangs.org
revbrownschool.org
wingstopfoundation.com
popejohn.org
admin.revbrownschool.org
admin.hsp.clps.org
popejohn.org
finalsite.org
www.hoxieschools.com
ac21.clps.org
popejohn.org
lionsden.popejohn.org
admin.banninghs.org
ac21.clps.org
popejohn.org
bhas.bhusd.org

Certificate

The complete raw certificate details for popejohn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv0pnHFwD10IRB5LQ0GT
s8mfHOjBoasA7XTwoOI7sVmWv4B9izBE01FNVJQ/zMEft9+gUXztRAzxTvSPJ/03
lZYIIxmASIXwzK4da6rizEJQtsPkJI+DIiXvOFy3jr1GiAnMxRCHxfJzRaDnJD+H
VMoyfWmfwck9mZhP2xVyuG9yzruLmSxcVr7w7yzTJ/7TFUCFOf7Pj4FUk1aDvSnL
jCYSaM2UpcltoSIkdr0YIKDFBTY8h4GuLTOw7N9+VhYmixEXaTAufeGv7D7CO8fc
9/FB+OvakYoSQO0lm1ClTPH2pAO6yNzwiFmS/DMBCwFhm14tQrsm43ll6Doi1uN2
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118815206927371878142268741833859611636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'popejohn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26129929925967077339195091261150204084166226621854976664814943089591910107350681939105426039969921683997635116471607415838440114867210324202954813586017987042154122018027119023840169504766624869445991819973183261838201545493841128716642919649063127778325604109365855538321037128671511687272621790874259731345014905514443665406330078027443319995151370257077685857873226318078434907193407810681452424658059013633339785165951766552838536933565821283297336430314889594308665293966548403417443454270060737831702894692457555504793607418616036288099441991657693039147900854128780752913040651378566873530677744652010031117907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popejohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popejohn.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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