www.desmet.k12.sd.us

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 60:7a:49:53:5c:68:ca:2c:2e:57:e9:23 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.desmet.k12.sd.us,OU=Domain Control Validated,C=US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 60:7a:49:53:5c:68:ca:2c:2e:57:e9:23
Serial Number (int): 29858396163333913299058682147
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 11:97:eb:a0:bf:8d:82:8e:ae:05:67:03:03:db:6b:8b:3b:1c:32:e5
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 91:e8:f0:a7:20:f1:a0:56:95:eb:70:36:77:d4:0e:68:fb:ac:8a:fe
Fingerprint (sha256): 01:5d:2e:a7:d5:a8:3e:b7:37:0d:6d:15:a7:48:cc:b8:44:39:16:2a:d9:72:35:1c:74:af:53:63:ee:63:17:6f

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.desmet.k12.sd.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.desmet.k12.sd.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.desmet.k12.sd.us
desmet.k12.sd.us

Other certificates including the domain name k12.sd.us

(limited to 100 certificates)
av026.k12.sd.us
www.platte-geddes.k12.sd.us
av026.k12.sd.us
www.spearfish.k12.sd.us
activities.madrid.k12.ia.us
www.canistota.k12.sd.us
activities.madrid.k12.ia.us
iroquois.k12.sd.us
www.desmet.k12.sd.us
schoolboard.brookings.k12.sd.us
sni43412.cloudflaressl.com
www.yorkprepsc.org
*.k12.sd.us
www.echs.k12.sd.us
www.flandreau.k12.sd.us
sp137.k12.sd.us
www.bp3374.k12.sd.us
www.flandreau.k12.sd.us
www.herreid.k12.sd.us
sni43412.cloudflaressl.com
admin.bakerschools.org
hoven.k12.sd.us
www.stfrancishigh.net
www.lead-deadwood.k12.sd.us
www.northwestern.k12.sd.us
winner.k12.sd.us
www.waubay.k12.sd.us
sni43412.cloudflaressl.com
*.harrisburg.k12.sd.us
huron.k12.sd.us
mail.ysd.k12.sd.us
www.tristatetigers.k12.sd.us
www.centerville.k12.sd.us
www.littleeagleschool.k12.sd.us
www.echs.k12.sd.us
lightspeed.dellrapids.k12.sd.us
admin.amschool.edu.sv
www.ges.sf.k12.sd.us
summit.k12.sd.us
www.parker.k12.sd.us
www.hoven.k12.sd.us
byod.dellrapids.k12.sd.us
sems.sf.k12.sd.us
abo.k12.sd.us
www.littleeagleschool.k12.sd.us
we.ysd.k12.sd.us
sp137.k12.sd.us
huron.k12.sd.us
www.csd.k12.sd.us
iroquois.k12.sd.us
ace.sf.k12.sd.us
www.hoven.k12.sd.us
www.gayvillevolinsd631.sd.schools.bz
lpms.lincolnparkpublicschools.com
www.gayvillevolinsd631.sd.schools.bz
www.irene-wakonda.k12.sd.us
www.pullmanschools.org
madison.k12.sd.us
*.sf.k12.sd.us
activities.madrid.k12.ia.us
as2sslgroup6.rschooltoday.com
proxy.whiteriver.k12.sd.us
highmore-harrold.k12.sd.us
sni43412.cloudflaressl.com
www.deuel.k12.sd.us
proxy.whiteriver.k12.sd.us
activities.madrid.k12.ia.us
garretson.k12.sd.us
brookings.k12.sd.us
www.eureka.k12.sd.us
sems.sf.k12.sd.us
dl036.k12.sd.us
webster.k12.sd.us
bonhomme.k12.sd.us
www.platte-geddes.k12.sd.us
www.csd.k12.sd.us
www.woonsocket.k12.sd.us
www.lyman.k12.sd.us
www.parker.k12.sd.us
suiweblink.dellrapids.k12.sd.us
www.ipswich.k12.sd.us
www.desmet.k12.sd.us
aberdeen.k12.sd.us
www.beresford.k12.sd.us
lightspeed.dellrapids.k12.sd.us
ysd.k12.sd.us
newell.k12.sd.us
sni43412.cloudflaressl.com
www.mclaughlin.k12.sd.us
www.rosholt.k12.sd.us
www.hoven.k12.sd.us
andescentral.k12.sd.us
www.viborg-hurley.k12.sd.us
summit.k12.sd.us
lightspeed.brandonvalley.k12.sd.us
sni43412.cloudflaressl.com
summit.k12.sd.us
sp137.k12.sd.us
lightspeed.dellrapids.k12.sd.us
arlington.k12.sd.us

Certificate

The complete raw certificate details for www.desmet.k12.sd.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7nEbbWciP/nmFsZqIdt/
EV4orCBay/RmaZlzoqSyO2NYWj6Qt+sMrWwowJAZbLtYbK/cbtTQJ0ZNLbxFG42x
maO9oGh9CIVAqlNHl5lgchbrZcfD9DQcRNix/BqrCu4eupU6/8UAlEKStSw9vl6Q
w3aQUC0Zu66bSUnwWZB9hTyJOqSYX516C+83TcU195BazLtRIhpwQh/7/cwBSg0U
2Bh7/A51PK0WTlQTyrYtJgkjo9Hewah2erucnISSG6/TLzYim6u8W7jfK+orWMGN
Pfsu8hoKMzwzoGK1ttPt/dHHUVuOGM3B+TX2WDlnGW7LEZgTjmeI1RYo3N5ftTMm
Hq2B4efRMHlC21BcCpdazhDT9P8aFQHi4/QRexOISnRb8+fbkqvm5fdOLi8EHXT/
wkCCK1cUw2oNJNpZBCPVbhwxH5gdGSwqhZV8FQJoH2wJ6B7oK7KVz75h+HvxmzqN
yxNw5bGQYYzsrfPhoIERZGZGHu8zvX16TIPDYXiE/NWDj2c80snzIB5w1T2Qz1b6
akg2CnJbIqxBQYKY8Utr4gJn7dv8o18bHIurFrXYaZkVGTV3vpzg+RZGG+L5QgP+
qvp2zCNZPJFjNYhUe1d1XIqYRo9lA8HwjNWp+sx0l8wlpHKbq74CbsLy1kqnLR2w
OHLXMHRQ/4g9ENrlENjo/gECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29858396163333913299058682147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 14:25:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 14:25:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.desmet.k12.sd.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 972757775942781861238839071295531696730860457472955499767774392164589476161275242872790025880206099297609916230235589451979231351502197450951033729261749843048430332386550734531555901811912626090542528750405018700697840030868281162146329805391287354932688237580962730386522926335198880944235817042252404946368749865627319190713518936733765803697670010583753807902156425726056544573063361041912048178977716632706346163639697556143702401622831374254670598623076999444399355569492767877187236660244836467730992107876433292460804457454450432132026086933055925151268084189180753828886045969757948403646574333643137579000740558968217955123109192798212361528465672367721569892845929797200158364577258689779283536805737575101127508721561550949205345475496446269173247259862280396738232196385474811684486683723117155576174531940898330463730883976664695839435324524317538864386797136301070843425920833636024597468410732568934763919885939107102766537000686073559104011125071450278357674644312228232352693965085769629910806059466856907516715980759909118348135651786590632938774588347590501317045979970755725457587714511706903903729119222788428274837549765893418609547717735432257213890010392450371872935756256190151192873900061400618054592298497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desmet.k12.sd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmet.k12.sd.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1197eba0bf8d828eae05670303db6b8b3b1c32e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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