*.sbunified.org

- Santa Barbara Unified School District -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:d5:36:2a:c4:0f:f9:14:c4:1c:04:85:bd:10:fd:1f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Santa Barbara Unified School District

Organization: Santa Barbara Unified School District
State / Province: California
Locality: Santa Barbara
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:d5:36:2a:c4:0f:f9:14:c4:1c:04:85:bd:10:fd:1f
Serial Number (int): 15728565822881787740722089088380894495
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fe:c1:ca:16:cd:c7:05:e2:ab:ad:1c:28:8a:68:6c:f7:74:bf:16:21
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 11:e2:f9:f6:70:a2:19:d5:05:64:c3:f7:ae:5d:ce:9a:3e:df:70:36
Fingerprint (sha256): 05:db:b7:6a:06:bc:bd:f5:61:ac:4e:9c:9a:6e:34:c3:54:e7:6d:ff:4c:e5:ae:72:c9:4d:89:ac:74:f9:67:7c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.sbunified.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sbunified.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sbunified.org
sbunified.org

Other certificates including the domain name sbunified.org

(limited to 100 certificates)
ssl378718.cloudflaressl.com
ssl6521.cloudflare.com
ssl378719.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl378718.cloudflaressl.com
lacuesta.sbunified.org
admin.castlerockknights.org
my.sbunified.org
ssl378718.cloudflaressl.com
ssl6521.cloudflare.com
ssl378719.cloudflaressl.com
*.sbunified.org
*.sbunified.org
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl276687.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
admin.bayhaven.org
ssl276689.cloudflaressl.com
www.tvcscougars.com
ssl378717.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl378719.cloudflaressl.com
admin.castlerockknights.org
ssl6521.cloudflare.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
*.sbunified.org
*.sbunified.org
ssl378719.cloudflaressl.com
admin.bayhaven.org
my.sbunified.org
shepherdstown.mbgsd.org
*.sbunified.org
ssl378718.cloudflaressl.com
server.sbunified.org
*.sbunified.org
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
adams.k12k.com
ssl276689.cloudflaressl.com
ssl378717.cloudflaressl.com
tsa.tomballisd.net
ssl378718.cloudflaressl.com
www.sbunified.org
ssl378718.cloudflaressl.com
ssl276688.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
adams.k12k.com
ssl378719.cloudflaressl.com
ssl378717.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl378719.cloudflaressl.com
adams.k12k.com
admin.castlerockknights.org
ssl378717.cloudflaressl.com
ssl378718.cloudflaressl.com
adams.k12k.com
admin.bayhaven.org
ssl378717.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
sbca.sbunified.org
ssl276687.cloudflaressl.com
ssl378717.cloudflaressl.com
ssl276687.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
*.sbunified.org
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
sbhs.sbunified.org
ssl378718.cloudflaressl.com
selfservice.sbunified.org
ssl378717.cloudflaressl.com
sni.cloudflaressl.com
adams.sbunified.org
www.gocats.org
ssl378719.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl6521.cloudflare.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
admin.bayhaven.org
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
sbjh.sbunified.org
ssl378717.cloudflaressl.com

Certificate

The complete raw certificate details for *.sbunified.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15728565822881787740722089088380894495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Barbara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Barbara Unified School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sbunified.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750214471188263824680037499941461404383918392952605357205188385884622733235508187263891650649508124064818873726836081158403906275370132124337083802741221536791798437203391854395765394980482781432533844373673546145042044311104153487878202267627436546222077734999441953573560241620380195858898620602191736982423855806684443890331814003404467273823243762901128902973906112128333570958986560000767893223900610435788145650799492851689105185300755488217303646801126480650207736933789338804220102677644770458918432284078318934175533559447148737658532845897544266271816002768341688329738049929095024512108722391156787898735538440962766226130556151930155728119917972548212754137072930087183576793423980841460280495294222321434874726752577293715342548154904191918389314507003701939601238037176918678086498767599376096118603375166131047761094317246715364030957083415968572329063327064562650270886623477755351480358112513462215041659834267811936778311206040996303112943893115905113098512706239801288562044983997627648315829869902372266968575746372399773843615382275092953478928694381728884395584647642284402333750278352433986353066354107169233209194392921368219920475192964155444081793431186262086221055519654654704634732712719439445030444270501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fec1ca16cdc705e2abad1c288a686cf774bf1621
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbunified.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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