mail.wapatosd.org

- Wapato School District -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:e1:70:57:08:83:1f:49:8f:ca:fd:ab:f3:81:bd:58 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wapato School District

Organization: Wapato School District
State / Province: Washington
Locality: Wapato
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e1:70:57:08:83:1f:49:8f:ca:fd:ab:f3:81:bd:58
Serial Number (int): 9145913293239976293201992885393800536
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 48:1c:44:72:d7:a3:07:9b:64:35:f8:4f:60:47:fe:64:e8:9a:d0:04
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 15:a9:a8:d1:dc:fe:d2:b1:78:2e:73:b4:3f:b3:e7:c6:92:34:8a:6d
Fingerprint (sha256): 07:b1:3e:ac:28:bf:54:de:a3:e4:1f:a6:c0:98:4b:fd:d4:05:e9:cf:1e:6b:71:48:2c:dc:3b:a9:ff:04:c2:e1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate mail.wapatosd.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.wapatosd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.wapatosd.org
wopr.wapatosd.org
adfs.wapatosd.org
autodiscover.wapatosd.org
legacy.wapatosd.org
proteus.wapatosd.org

Other certificates including the domain name wapatosd.org

(limited to 100 certificates)
6gc.sangerisd.net
mail.wapatosd.org
mail.wapatosd.org
wapatosd.org
*.wapatosd.org
6gc.sangerisd.net
wapsd-expressway-edge.wapatosd.org
admin.bullskin.casdfalcons.org
admin.wapatosd.org
6gc.sangerisd.net
simcoe.wapatosd.org
www.wapatosd.org
mail.wapatosd.org
admin.olaclaremont.com
wapatosd.org
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
adams.wapatosd.org
wapsd-expressway-edge.wapatosd.org
wapsd-expressway-core.wapatosd.org
6gc.sangerisd.net
wms.wapatosd.org
adams.wapatosd.org
6gc.sangerisd.net
satus.wapatosd.org
whs.wapatosd.org
6gc.sangerisd.net
mail.wapatosd.org
*.wapatosd.org
wapatosd.org
admin.thomasolaeta.school
6gc.sangerisd.net
pace.wapatosd.org
satus.wapatosd.org
mail.wapatosd.org
wapatosd.org
mail.wapatosd.org
6gc.sangerisd.net
whs.wapatosd.org
wapatosd.org
camas.wapatosd.org
adams.wapatosd.org
wapatosd.org
6gc.sangerisd.net
6gc.sangerisd.net
6gc.sangerisd.net
wapatosd.org
mail.wapatosd.org
6gc.sangerisd.net
ADFS.WapatoSD.org
wapatosd.org
li.centralunified.org

Certificate

The complete raw certificate details for mail.wapatosd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTkKNjYat6tl53PrU12d
0m3EWyQyXsc6z/jnu4OoTvsDdNOZpqO0E4/d5Av5Dj8ZTbus+aUDTRSyLHSZ+fC/
NUHUA89xg+WaMu/5zPRW/lShOSTwmwJOXZFik+DjacUQFujC3ebDk8FIJ7N3yofM
XAgy061Lt0hO32JGk18u9CyAzXkn/Ps3mPD1m+TaGG45jHSBnu70qtubE5tcTJVA
dEGA49ewFevV2BB+IY/tYIA3Ow+oGeRyuwlzMzFv9PzubbdB5EgHEReWMpOVnIte
aEF3K5bIXRz1byPaVkRZhLPUDXTPE+UpHHrFuwXrCBGkpc9DAdVY3wyVMvjsxIxk
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9145913293239976293201992885393800536
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wapato'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wapato School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.wapatosd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20352494517469474933975920434587149764321460625143881609392910312627028455687302382504309926132419105837852469229414837936909556251498585640674014897957694648278066214931920279644905813491834805811006498274408700859693680005078138471795448719442197452810570733760422744515794226371577879394145433299505173459476446036711582123904018128658987025197365706361105178646574394974819576485533099254698002846282542616339499697265531318460510177310514069214569840561537547055033327431332740595470004303303730458529356741687576527854312324542461901238627722485499868813422965028735818026572606562353699219757833948690262025433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							481c4472d7a3079b6435f84f6047fe64e89ad004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wapatosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wopr.wapatosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.wapatosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wapatosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.wapatosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proteus.wapatosd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a2316695426c1abcaf68c57b24eab801936d219b2be23b3452de7a7d13b5b526479e53e6d3077f54730fefcc6dd2730207e928e0364c26ce5ebd7f50e26771803719dd5fc0987b96e9a41dc49739c85baeeb39aad7cfdce8274199e8463a718e87934b3e247ef7c3340c3c50985d18da457633112fed4e082207cf4c95af6f1bbad14c4880c84ea9e680fe0949577fd85eb8633af0f039f45773486c497b9fd15c1ec658781e28d09cf399613174dd2b407475a827bb6a2d0e35fb23e35812abef1872fed0c2ab57fc55c8d1aa1957f3181fb396d1442aac1554413fb08675c3611ae27a14601475f6851174c2e8eb0268b1df822e1ed765fcd5febfe8e812f