*.windham.k12.ct.us

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number bb:fc:9e:eb:58:02:ed:b8:47:da:89:2e:a3:fe:83:7f was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.windham.k12.ct.us

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bb:fc:9e:eb:58:02:ed:b8:47:da:89:2e:a3:fe:83:7f
Serial Number (int): 249877317286703833927600470025551381375
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 23:75:75:bd:c9:b0:b9:42:8f:ed:a4:92:eb:d5:d2:91:30:65:3b:7a
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 66:f4:75:17:40:66:02:e5:93:d8:78:aa:db:f6:da:d2:ab:e4:94:45
Fingerprint (sha256): 09:be:f0:a2:5a:5e:91:32:31:96:bd:35:e4:25:7a:94:b1:05:74:a4:40:4a:8d:24:25:b5:01:9b:10:ea:57:be

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.windham.k12.ct.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.windham.k12.ct.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.windham.k12.ct.us
windham.k12.ct.us

Other certificates including the domain name windham.k12.ct.us

(limited to 100 certificates)
admin.acsc.net
admin.acsc.net
academywest.hamadyhawks.net
*.windham.k12.ct.us
www.maywoodacademy.org
admin.betz.cheneysd.org
abilene.texasleadership.net
www.windham.k12.ct.us
abilene.texasleadership.net
abilene.texasleadership.net
desktops.windham.k12.ct.us
admin.acsc.net
fams.franklinlakes.k12.nj.us
abilene.texasleadership.net
admin.mes.mcduffie.k12.ga.us
windham.k12.ct.us
abilene.texasleadership.net
admin.eagles.lucernevalleyunified.org
admin.somonauk.net
admin.mvista.garvey.k12.ca.us
admin.altavista.unionsd.org
admin.acsc.net
admin.clarabartonhs.org
north.legacyprep.org
admin.acsc.net
admin.acsc.net
admin.bhs.burkburnettisd.org
www.lsusfw.org
abilene.texasleadership.net
admin.ec.sd44.org
arete.prsd.us
es-admin.markham.edu.pe
*.windham.k12.ct.us
sphsgoldeneagles.org
admin.bf.sd44.org
admin.bf.sd44.org
admin.acsc.net
bhswca.com
abilene.texasleadership.net
admin.acsc.net
*.windham.k12.ct.us
admin.benholtschool.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
abilene.texasleadership.net
www.markham.edu.pe
abilene.texasleadership.net
abilene.texasleadership.net
abilene.texasleadership.net
admin.altavista.unionsd.org
admin.acsc.net
admin.acsc.net
ps40.jcboe.org
abilene.texasleadership.net
ec.sd44.org
admin.betz.cheneysd.org
admin.boydisd.net
abilene.texasleadership.net
es.markham.edu.pe
admin.betz.cheneysd.org

Certificate

The complete raw certificate details for *.windham.k12.ct.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjrKrtUOpasOfAiarP0J
TEJ+7d40uFnPX076sq48FTCRX8daYiRXh4iWOY7eoKfCHgiqGePyZm30HeojU3gZ
Z6X92b3/KE0/Th6rG9PLejPxUHVasx9EYQN97IgFZOFXxO5QRLBH08/KGBXbYEmV
phwU6KtzvHD4s9lqyPrzkyFESv+ZrFJfWkz949dYAE320UMuxkGSD2tVY4kXLhD9
7e94XRhAH7rKWf3gj3LtBiQc9ATtdwf4PerVBcwZAxKAHLPnQZu8V8OGEOGucOnn
JSTclMUUfdoQItwVxvlapy662J4yvCDlorZp8VZU20AxhAdM3Uizo2ucipZZK35j
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249877317286703833927600470025551381375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.windham.k12.ct.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25024175665975182172010863176858063089144692165400930265364103796926755574052086015304819618128033910345044654568617439996831213638061889506257905665488378854237013711888993762796738582947608455752901327647907250578382985795633663654873785519694784297830418799656839657569259991479636668474550198580246305456105811296983774255840713727594043075233795064297285332848305998632313450272746067362429923168763700781249498745405531006858148278039852454186588586412566297933152985931607750291426160037138667315242309518335087161147655259344246672153445340648844070351763339797524063476697453111545217112696014454650369369011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							237575bdc9b0b9428feda492ebd5d29130653b7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windham.k12.ct.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windham.k12.ct.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00200552393d2df123ac8313c1ff1a46383dc293ee70effffa6631f551f4836f3b7734c9ac66fd1f15c2670cf0a52f1b76d6d27aee56b7b70a4380de73ea7031aa3a561abf6bf25cff5de60f9d30c8758f213e03ec56b205cadc79c52bb0933c174de757f1e6c1abcc344d3794ee307f7b94e4fc3b2d05d771f621818b17e76f404ddacc441bf1fb64b9b512aa55d9840367697fcfa7f30342ab0f8340326c0805db7b1851bf14111b33e3b360f071efc52c5d473d53f4a56a812da564d0ddd1917f4579ad49d8c36a08c0881c2537d97058d5622071413477a3f39250b2a53a42c7d0b924c7eecf9d685901f9d54d3eab1b50d4b69782107d1b9924ebf2efd65c