orvillebright.org

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 61:34:1f:d7:63:49:69:f6:14:19:d8:9a:75:e5:2b:85 was issued on by ZeroSSL.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=orvillebright.org

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 61:34:1f:d7:63:49:69:f6:14:19:d8:9a:75:e5:2b:85
Serial Number (int): 129205760847261072421941795724946910085
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0c:92:f7:0d:6d:f7:8f:c6:bc:03:90:f8:46:01:bb:88:8e:9b:e1:27
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 7d:b7:53:38:50:a2:a0:9b:d6:2e:6d:bb:67:56:11:f1:d0:5f:f8:89
Fingerprint (sha256): cd:b6:a3:6d:cb:f3:3b:6b:77:e9:49:25:b4:24:04:e3:4e:7c:9f:2d:11:c4:f5:51:13:37:13:1b:f0:3e:90:c6

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate orvillebright.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for orvillebright.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orvillebright.org
admin.orvillebright.org
bright.cps.edu
www.bright.cps.edu
www.orvillebright.org

Other certificates including the domain name orvillebright.org

(limited to 100 certificates)
orvillebright.org
orvillebright.org
orvillebright.org
orvillebright.org
orvillebright.org
orvillebright.org
orvillebright.org

Certificate

The complete raw certificate details for orvillebright.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrVSmr4+Y7D0w1sp+dCt
YK5C/+79T1jYx5PW5Z7+XZd03tn27pRnsMpAElpl4KQ3IReVRweABhN1dPHo74of
ocaMtKRRRbROaSi5nYtGJ7S1jzdj/ZiH3ru6rRE0Nj27yaWiQ8pTSEDgCEr2E94O
T7L34U849r9y3bntVHKpomGVEZ7NChLjZJKhxtzTf4gQKWwbyKyzLrnbsF7HKJSc
+hsXdX3EhJR1YKeIRnwwj+rZyPnK0efLktyiyxQlTxuNoQQmGGA0hzFv2zfIwkKN
iBU8i8tv4HNsMH7hL0Loovjn3tmvvN3EfwfQnAiK1ubmyAZuXAV4GO5KvseSUsx2
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129205760847261072421941795724946910085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'orvillebright.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20035065727523623696837175701733823037352409252483874800381125218157112094432399447993270260775630902059443642877514352876812708061215645779733300534139486758193619019101310821502758043203969538668858155225714472564306566505342309508310598519806240159815648272700945900141708273897503455201478563835993615860599011243901915149646803984371302399311520952628854379100888711683325986901913424706117083670319152955995013041836315565490151178382916011727831059064698406374344603275486686613932853078396276822473165991405290727029001826780398964447457028134205538567026735174026812261380636591092149049778622554084351964701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c92f70d6df78fc6bc0390f84601bb888e9be127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5b6cdaee00000403004730450220768b108a5ad2d518fd9fd5ccea82d6b23f9c596bbc336d3169b18a3bf0420b3c022100e2dc942f970ee98d1b8c96bbc4e313499db9abed133d4788e82b50ecde683cfd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5b6cdb1600000403004730450220102815ff1305f82b51ddbccc94b1fb0a66eb2154730b9d3056b30f26c1912332022100a34da16770a254f3b2abad50c7237e07271734bdd42e3fd9b0a733691c623a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orvillebright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orvillebright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bright.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bright.cps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orvillebright.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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