mychart.ieccn.org

Issued by Network Solutions DV Server CA 2

About this certificate

This digital certificate with serial number d2:38:71:8a:8c:a3:7e:70:c5:eb:cb:6a:8d:fd:71:df was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mychart.ieccn.org,OU=Domain Control Validated+OU=nsProtect Secure Xpress

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
State / Province: VA
Locality: Herndon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d2:38:71:8a:8c:a3:7e:70:c5:eb:cb:6a:8d:fd:71:df
Serial Number (int): 279430950628207476646293072712990290399
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fa:5c:40:15:e8:f9:43:d8:bc:c5:6b:9f:a2:f6:59:cc:f5:59:e1:d2
AuthorityKeyId: 51:ce:df:54:1d:b7:2c:57:ab:68:61:48:02:1a:d3:b2:85:ec:40:aa

Fingerprint (sha1): 1b:15:7f:bc:5b:96:61:35:92:0e:95:39:da:fd:cd:c6:bf:9a:17:de
Fingerprint (sha256): ec:3c:8f:6c:1a:6d:dc:c6:50:46:5d:6f:30:9f:43:d7:c5:ed:ad:22:bf:90:5e:50:44:d7:44:5d:a6:02:50:22

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl

Check the revocation status for certificate mychart.ieccn.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mychart.ieccn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mychart.ieccn.org
www.mychart.ieccn.org

Other certificates including the domain name ieccn.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for mychart.ieccn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YzHZmw2JfDQZltMkDLM
d/qXee587C5lMlVT5cDi6DySxQx4ylhf5t4LR4oEPN9DELtNnZeFNcpJJQVrWIgH
Jhe4TuZbLk4xG1WGlNlwoYzEVj4rLA1770vcugASeiVqJzMlitwcBCzjpyLVbozw
JZuZC/1Wm84hVepH8GbRaZAF9cLU83wvsOA1ve4v/HmbVZfHgOUMxmxdFNZF1pf/
jP/uK3tNXSa8w0qjAFMQDU2iFDBI6fg1OQgOR7AqRXovQnbcg76kCjjW6Qz0yeUm
RQuMhG+Oib+H/xxAei1K9yMG/Zzu9Iir0VHvQig/YssLW4KQ5VcRK2SXnPgr82sn
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279430950628207476646293072712990290399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsProtect Secure Xpress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mychart.ieccn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27968086063685298444729935870384917659756940714868412145946472979456819036945155574231253945513872363943287497556234375752213583287539057158134677281460027820188090168733242024372204219523773885311268473564028810672117465813967230862376790980029375392758687793493162824634793706805590734069140785453989416893196316717268023936914488786003447982011724689641780798260455482346361483907824368636531907805425181322266420437875434124283247703705271813137519624982371828790195133480775539860285314466053180139275781448574227218939625424152714735732624613592952339192248926188014333601945037774388829203384371575246643996639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51cedf541db72c57ab686148021ad3b285ec40aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa5c4015e8f943d8bcc56b9fa2f659ccf559e1d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychart.ieccn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mychart.ieccn.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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