washington.osd.wednet.edu

- Cloudflare, Inc. -

Issued by Cloudflare Inc RSA CA-2

About this certificate

This digital certificate with serial number 0f:be:06:3c:58:c5:66:70:22:ee:21:9b:36:90:79:b6 was issued on by Cloudflare, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cloudflare, Inc.

Organization: Cloudflare, Inc.
State / Province: California
Locality: San Francisco
Country: US

Cloudflare, Inc.

Organization: Cloudflare, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:be:06:3c:58:c5:66:70:22:ee:21:9b:36:90:79:b6
Serial Number (int): 20925082815516051109536722649646922166
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9f:8f:98:cb:2d:58:e4:89:4f:25:62:68:5c:1f:df:c0:19:6d:b1:2c
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a

Fingerprint (sha1): f5:23:a4:57:de:a4:2e:be:fe:b2:f0:60:a7:0c:d5:2c:4f:70:fc:95
Fingerprint (sha256): 0b:b0:98:70:c1:b8:58:0d:8e:21:27:2f:c0:cc:18:92:02:80:29:a5:70:78:b0:ff:9c:37:a8:65:3a:91:31:5c

Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl

Check the revocation status for certificate washington.osd.wednet.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for washington.osd.wednet.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

washington.osd.wednet.edu

Other certificates including the domain name wednet.edu

(limited to 100 certificates)
warden.wednet.edu
admin-adu.slzusd.org
tech.sw.wednet.edu
renplace.osd.wednet.edu
hoodcanal.wednet.edu
library.mukilteo.wednet.edu
webauth.wsd73.wednet.edu
Payment.ycs.wednet.edu
www.rochester.wednet.edu
ehs.enumclaw.wednet.edu
cas.osd.wednet.edu
www.edmonds.wednet.edu
*.upsd.wednet.edu
Radius.centralia.wednet.edu
library.adserv.osd.wednet.edu
*.osd.wednet.edu
www.inchelium.wednet.edu
bke.enumclaw.wednet.edu
www.rainier.wednet.edu
hyak.oesd.wednet.edu
wireless.camas.wednet.edu
www.bradleyschools.org
tech.centralia.wednet.edu
psc.upsd.wednet.edu
mail.psd267.org
www.mtbaker.wednet.edu
destiny.sno.wednet.edu
nemo.adserv.osd.wednet.edu
waterville.wednet.edu
payments.monroe.wednet.edu
vpnportal.sno.wednet.edu
us-east-1-san2.blackboard.com
swiftclassroom.com
brown.osd.wednet.edu
safari.camas.wednet.edu
triton.oesdmail.wednet.edu
www.sw.wednet.edu
www.orondo.wednet.edu
heart.rochester.wednet.edu
www.tucna.wednet.edu
www.qsd.wednet.edu
nemo.adserv.osd.wednet.edu
ems.enumclaw.wednet.edu
sts.mukilteo.wednet.edu
courseguide.issaquah.wednet.edu
mccleary.wednet.edu
warden.wednet.edu
aspen.mukilteo.wednet.edu
*.gfalls.wednet.edu
SSD-EXCHCAS.sno.wednet.edu
www.klickitat.wednet.edu
admin.eceap.gsd.wednet.edu
ltes.dieringer.wednet.edu
mail.cusick.wednet.edu
bes.gobearsgo.net
tukwila.wednet.edu
touchbase.cksd.wednet.edu
ssdmedia.sno.wednet.edu
cougarmail.lwsd.wednet.edu
calendar.royal.wednet.edu
mail.camas.wednet.edu
psd.wednet.edu
cas.osd.wednet.edu
heart.rochester.wednet.edu
vpnportal.sno.wednet.edu
vpn.highland.wednet.edu
mtadams.wednet.edu
rhs.rochester.wednet.edu
meridian.wednet.edu
mtbaker.wednet.edu
files.enumclaw.wednet.edu
vpn.wsd73.wednet.edu
ohs.onysd.wednet.edu
gfes.comalisd.org
nemo.osd.wednet.edu
tls.automattic.com
*.whiteriver.wednet.edu
view-cs01.wsd73.wednet.edu
www.monte.wednet.edu
wmms.slzusd.org
lwe.edmonds.wednet.edu
washington.osd.wednet.edu
www.eatonville.wednet.edu
printcenter.mukilteo.wednet.edu
wsd73.wednet.edu
*.camas.wednet.edu
edmonds.wednet.edu
www.edmonds.wednet.edu
nemo.osd.wednet.edu
renplace.osd.wednet.edu
qsd.wednet.edu
mail.republic.wednet.edu
www.davenport.wednet.edu
psd.wednet.edu
wrsd.wednet.edu
slhs.edmonds.wednet.edu
www.mccleary.wednet.edu
library.adserv.osd.wednet.edu
admin.hs.gsd.wednet.edu
filter.qsd.wednet.edu

Certificate

The complete raw certificate details for washington.osd.wednet.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPaCyVQVW2BuwnUyktcg
yTLrRXJo0SHqpgJ5plSAl280WuBIBvJdoB/AL0LJvTsdIGAf+QoSDPZpCfBYf6M2
OBPnmvbvJ2gV4BTJjsV5VXJSaaxPed6UE/rIkIzXNBCRUmx4pg9O36RCdIINzMiK
fqnGr8oB8WdQSRNU/I/KhpGJ+ZOhWbgbSeho5IDOtnyrvy05lZHFOueetxGRLCXe
tQTk0g/qhqQA6idzCz0zJdrb71gs0EGX1bTkV6sIZyyaG6w7mESb6wQohCkxn+0b
zbtkeS+1HldD3d9vyBsWg5FLKqAAH9Yd163wscTi91/yVosY1Xa06r/Cejerc3Sx
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20925082815516051109536722649646922166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'washington.osd.wednet.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18804828182705365592975506523159229335694480497535880896078196172326535538626786353604996232433379170189857923532439832967983010610582769176792491439007560095291254477540732798552222745281893845501682865177705034332255844316075045783622780718790798754894726156077574655016146457162638467260613033114235362672287078658858129931874944115264677860993538717163377580976465791521431460931517521714224642808565720967336779994248267438613120570388757477568047473577185408986221915084365515954612994657295978823508918332289056938898143860618090481662886862033040790726731276379098769016162870807383204430376948358923249037813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f8f98cb2d58e4894f2562685c1fdfc0196db12c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.osd.wednet.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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