vpn.scrsd.org

- Scranton School District -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1c:54:51 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Scranton School District

Organization: Scranton School District
Organization unit: Scranton School District IT Department
State / Province: Pennsylvania
Locality: Scranton
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1c:54:51
Serial Number (int): 1276925009
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 64:a5:ac:4d:b6:f3:29:b8:00:66:52:55:a7:8d:dd:1d:77:68:5f:a9
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): bf:2e:3a:8f:2a:55:d1:43:32:c6:c1:ac:eb:6d:b9:73:54:e6:7e:06
Fingerprint (sha256): 08:41:c0:18:07:b9:00:bc:d1:c6:0f:08:d2:70:d1:45:3e:9b:2e:93:b8:2b:4b:ca:30:2b:3c:92:68:5a:1d:07

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate vpn.scrsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.scrsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.scrsd.org

Other certificates including the domain name scrsd.org

(limited to 100 certificates)
school.lexnyc.com
adams.scrsd.org
barnes24.org
vpn.scrsd.org
10.bellevilleschools.org
www.ps086.com
high.cusd1.com
www.sunland.mx
10.bellevilleschools.org
68thstreetes.com
admin.dsdk12.net
adams.scrsd.org
admin.whitson.wsvsd.org
admin.ecacademy.scrsd.org
cpa.confluenceacademy.org
cce.leusd.k12.ca.us
admin.jhe.dcs.edu
willard.scrsd.org
adams.scrsd.org
admin.mcduffie.k12.ga.us
admin.newtownhighschool.org
adams.scrsd.org
adams.scrsd.org
10.bellevilleschools.org
adams.scrsd.org
hs.humphreyscountysd.org
wolcs.org
meadowsschool.org
www.mustangsla.org
www.rfm.rcschools.net
admin.bfes.wilkescountyschools.org
68thstreetes.com
higgins.mccomb.k12.ms.us
10.bellevilleschools.org
sandiaprep.org
admin.sandiaprep.org
scrhac1.scrsd.org
admin.stedschool.org
admin.alturaprep.org
shagirls.com
compass.gobearsgo.net
www.regentsas.org
wright-es.weatherfordisd.com
admin.ecacademy.scrsd.org
68thstreetes.com
admin.ecacademy.scrsd.org
adams.scrsd.org
collegeachieveasbury.org
*.scrsd.org
admin.ecacademy.scrsd.org
adams.everettpublicschools.org
cs.newton-conover.org
adams.scrsd.org
68thstreetes.com
lafayette.everettpublicschools.org
10.bellevilleschools.org
scrhac1.scrsd.org
10.bellevilleschools.org
*.scrsd.org
adams.scrsd.org
www.montrosechristiancdc.org
scrhac1.scrsd.org
admin.ecacademy.scrsd.org
steam.erusd.org
mac.gcsd.ms
admin.benchmarkbobcats.org
wsis.scrsd.org
admin.bfes.wilkescountyschools.org
www.186streetschool.com
vpn.scrsd.org
www.scrsd.org
www.uplifths.org
admin.ecacademy.scrsd.org
jis.jarrellisd.org
admin.alturaprep.org
scrhac1.scrsd.net
10.bellevilleschools.org
www.rebsamen.mx
adams.everettpublicschools.org
10.bellevilleschools.org
webster.everettpublicschools.org
scrhac1.scrsd.org
adams.scrsd.org
admin.pleasanthillschools.com
adams.scrsd.org
10.bellevilleschools.org
68thstreetes.com
www.northvilleschools.org
admin.ecacademy.scrsd.org
www.shagirl.com
adams.scrsd.org
www.gracepointschool.org
www.sandiaprep.org
admin.nshahs.org
admin.ecacademy.scrsd.org
www.barnes24.org
mes.leusd.k12.ca.us
admin.ecacademy.scrsd.org
adams.scrsd.org
steam.erusd.org

Certificate

The complete raw certificate details for vpn.scrsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykavZSB8ckCmriWySmns
vrYD8QIxFHDoDTWFzfTtOSDZ5RouRLkDFBZPurM2/LUZbuslbbJAk3q0Zd3uC3Pt
yg9bIhV+n9UFSO732lQuzbEvLR77f3LaOPmALFaun/ynl8HtgplZ5azl+w9WSmEk
6ADRGg1gGMF8k/Ky8BuhUOjpcm5fB+FcJ6Ti+javaRb2rztIUVJGudQLAiNa/Kvz
LGWz5ATosNQX9Z9wRvo2b1OLjtrC7KSm8twQZtbrUgYpcw5TeYO/lUmWXDE6bSQ5
KjRDPOxKi3RgjwemHKdK5fPlf1zoyyXtHXYchnQlBb1VW3D2rF29ndDIN1C/1Onq
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276925009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-01 16:59:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-02 07:19:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scranton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scranton School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scranton School District IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.scrsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25534993743217896670458903414031884291053922188744519574177237256654358900741380239640104692140659332157725082713556134887779644363240028011864608059361043328578233353439250122707383643726694451222110325623054187873807552538892932475207455093455643490472198730327655665698136339767941060469285763890949300505912112761675134224298078363624486141602569672837745271953468300775558851077057555442673448275244604266986079239589260358820347176570419276355553933419108337303988872389010594103439056468606597276114497359340868254517671765939430394076823056723351921498037679497094474007776891208495006909986337837855112030771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.scrsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64a5ac4db6f329b800665255a78ddd1d77685fa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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