OV SSL/TLS Certificate for fts.nemours.org Issued to The Nemours Foundation

Certificate is witin its validity period

Issued by Corporation Service Company (Corporation Service Company RSA OV SSL CA)

About the fts.nemours.org OV SSL/TLS Certificate

This certificate with serial number 06:b2:b0:9a:80:22:1e:49:40:ee:99:82:1f:22:03:90 for fts.nemours.org was issued on by Corporation Service Company.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for fts.nemours.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Corporation Service Company

Organization: Corporation Service Company
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:b2:b0:9a:80:22:1e:49:40:ee:99:82:1f:22:03:90
Serial Number (int): 8903178760411292203288590336175244176
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 25:2b:08:5e:37:5f:a6:09:f5:d4:c6:bb:f1:55:84:61:4a:4d:d5:85
Authority Key Identifier: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (SHA-1): a8:39:db:82:34:80:cb:d2:1f:90:ed:60:67:e8:be:47:82:48:7a:38
Fingerprint (SHA-256): ae:a7:d6:e6:72:5a:0b:f2:1c:3e:8c:b8:4c:1a:7b:b1:c7:a7:c0:95:ad:0d:7b:e1:08:d2:56:a5:01:96:d0:53

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate fts.nemours.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for fts.nemours.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for fts.nemours.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1ipuEs3zKJRYSkc+B7b
gHhNWnFW4IFdk+ihxiyZwkNGDuRVIHO3sR2/l3k20t2BzCBi0Z/RU/TpMQqAXSCK
F++N7gYKxoT37Tr3yC6d1VXsyRQsbnu5LLxBfsMHae3nzQYdx0h0eLnaTgN8/inJ
lHbnnMetG3B2O4jsl84Ro+hqTF9rEcR7ehZu8ftzK5qWzBm6jdZ/fqhLZAu6+8Qe
ZsCcDvG0y8bpr5oLziaNeQ8aULVMroVjKfSxMb2pbT3Bvx84mwd/FR++Kgy4bGw/
TSjhuOWD198H4nBSbnRcDmJ2weEAMf7NBfziPZedKp1X1U3yjG8exImUSCt8QuGb
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8903178760411292203288590336175244176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Nemours Foundation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fts.nemours.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16580939289763952618701034616917910920685869970877110883138368517516245951919328063903395223645292115995242365361110522896724350575428280383079244053816379837082395000812131084791062344374103486931872025029473879598176342100870880212300556408546127602704382829777132500001000566487391117695606629170776070779096550643809871769186498221274672597539680351907006755392166859932338872174941456431351715706265250001788724899016877797448154948039863882431561826810136592102187827922196062564277972701302311064893791068277564924988167797201905385318925398622019311174205245417390768760977812418836357968348121413052962806607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							252b085e375fa609f5d4c6bbf15584614a4dd585
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fts.nemours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fts.nemours.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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