proxy.whiteriver.k12.sd.us

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 03:66:63:a6:93:88:cb:7d:ef:97:1b:55:03:ac:68:fe was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=proxy.whiteriver.k12.sd.us

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:63:a6:93:88:cb:7d:ef:97:1b:55:03:ac:68:fe
Serial Number (int): 4519319423010710238782187283065628926
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): ff:c0:13:72:3e:a2:29:61:1c:23:1b:8e:04:47:97:d4:b7:e1:9a:39
Fingerprint (sha256): 09:96:56:5f:a0:f2:df:02:df:e1:46:f2:77:65:51:38:83:32:50:89:78:a1:e9:e2:a5:1e:44:98:55:b9:c5:ef

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate proxy.whiteriver.k12.sd.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proxy.whiteriver.k12.sd.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

proxy.whiteriver.k12.sd.us

Other certificates including the domain name k12.sd.us

(limited to 100 certificates)
av026.k12.sd.us
www.platte-geddes.k12.sd.us
av026.k12.sd.us
www.spearfish.k12.sd.us
activities.madrid.k12.ia.us
www.canistota.k12.sd.us
activities.madrid.k12.ia.us
iroquois.k12.sd.us
www.desmet.k12.sd.us
schoolboard.brookings.k12.sd.us
sni43412.cloudflaressl.com
www.yorkprepsc.org
*.k12.sd.us
www.echs.k12.sd.us
www.flandreau.k12.sd.us
sp137.k12.sd.us
www.bp3374.k12.sd.us
www.flandreau.k12.sd.us
www.herreid.k12.sd.us
sni43412.cloudflaressl.com
admin.bakerschools.org
hoven.k12.sd.us
www.stfrancishigh.net
www.lead-deadwood.k12.sd.us
www.northwestern.k12.sd.us
winner.k12.sd.us
www.waubay.k12.sd.us
sni43412.cloudflaressl.com
*.harrisburg.k12.sd.us
huron.k12.sd.us
mail.ysd.k12.sd.us
www.tristatetigers.k12.sd.us
www.centerville.k12.sd.us
www.littleeagleschool.k12.sd.us
www.echs.k12.sd.us
lightspeed.dellrapids.k12.sd.us
admin.amschool.edu.sv
www.ges.sf.k12.sd.us
summit.k12.sd.us
www.parker.k12.sd.us
www.hoven.k12.sd.us
byod.dellrapids.k12.sd.us
sems.sf.k12.sd.us
abo.k12.sd.us
www.littleeagleschool.k12.sd.us
we.ysd.k12.sd.us
sp137.k12.sd.us
huron.k12.sd.us
www.csd.k12.sd.us
iroquois.k12.sd.us
ace.sf.k12.sd.us
www.hoven.k12.sd.us
www.gayvillevolinsd631.sd.schools.bz
lpms.lincolnparkpublicschools.com
www.gayvillevolinsd631.sd.schools.bz
www.irene-wakonda.k12.sd.us
www.pullmanschools.org
madison.k12.sd.us
*.sf.k12.sd.us
activities.madrid.k12.ia.us
as2sslgroup6.rschooltoday.com
proxy.whiteriver.k12.sd.us
highmore-harrold.k12.sd.us
sni43412.cloudflaressl.com
www.deuel.k12.sd.us
proxy.whiteriver.k12.sd.us
activities.madrid.k12.ia.us
garretson.k12.sd.us
brookings.k12.sd.us
www.eureka.k12.sd.us
sems.sf.k12.sd.us
dl036.k12.sd.us
webster.k12.sd.us
www.platte-geddes.k12.sd.us
www.csd.k12.sd.us
www.woonsocket.k12.sd.us
www.lyman.k12.sd.us
www.parker.k12.sd.us
suiweblink.dellrapids.k12.sd.us
www.ipswich.k12.sd.us
www.desmet.k12.sd.us
aberdeen.k12.sd.us
www.beresford.k12.sd.us
lightspeed.dellrapids.k12.sd.us
newell.k12.sd.us
sni43412.cloudflaressl.com
www.mclaughlin.k12.sd.us
www.rosholt.k12.sd.us
www.hoven.k12.sd.us
andescentral.k12.sd.us
www.viborg-hurley.k12.sd.us
summit.k12.sd.us
lightspeed.brandonvalley.k12.sd.us
sni43412.cloudflaressl.com
summit.k12.sd.us
sp137.k12.sd.us
lightspeed.dellrapids.k12.sd.us
activities.madrid.k12.ia.us
sni43412.cloudflaressl.com
lsp.westcentral.k12.sd.us

Certificate

The complete raw certificate details for proxy.whiteriver.k12.sd.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHsZEalYrr8K9XMMOD7r
OOVgcYRvnzquZPqNsnZg66Aa3axGveZ+LHitYzSS2gnjX5XJ7X9vJa9GJ4gMD6bk
92XZZgFVst5hZZKgl2wCHwZPJQ+AnRPlysk1XL4c0wJseRboKXze0dvTq0dvuvMd
f0gPasOBk3Tc9QR3i8AO7jW7tKHk8xUv9tkTiWRPazfTNannwqmvZZ2mfxO4/1sn
3lWm2anrrs04Ljf1k2B0uxkPd3WoSOQHtDaUckl9VDDWV4a+IgTqYH6C3DlVBOJZ
H4jmWA0yrI7KPsyqBYsyQPkCPaiA3GtvVRNEasbYws9d9+6EEtaXhjd7EPX1BJ0w
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4519319423010710238782187283065628926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'proxy.whiteriver.k12.sd.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22783596743463463182041326248107226059414115376539333778224124815545263725849228223314872729810435351816537189924201178105919959527127137641715341974426677774695864406180973867093461985713847736009551735259024325925279466281021659073831050544916422434593250247215960750268928902798779279584862137832126455833100299095024261902985356229539248113142179586186734222642418369988771060963229452152178770802772485133579333361484885675308385461055000529895815854133495902478197711942736375204648248704544626590131595638063273389159047054949931784448110680841167905702903754059144297096321617431394497269423248792621164605499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.whiteriver.k12.sd.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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