www.doepassword.k12.hi.us

- Hawaii Department of Education -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 08:d9:b9:70:cd:ee:52:30:48:42:6b:ff:d1:1b:9c:8f was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hawaii Department of Education

Organization: Hawaii Department of Education
Organization unit: eisb
State / Province: Hawaii
Locality: Honolulu
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d9:b9:70:cd:ee:52:30:48:42:6b:ff:d1:1b:9c:8f
Serial Number (int): 11764313567644801218401989450882849935
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 3f:42:dd:1f:33:17:b1:45:d1:93:cc:72:46:9c:97:6c:34:4c:3c:2f
Fingerprint (sha256): 0b:b6:5c:c1:57:53:15:05:97:cb:43:d8:90:87:50:3f:62:a6:d3:d8:43:22:d6:c2:04:18:e9:a0:1c:0c:ab:66

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.doepassword.k12.hi.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.doepassword.k12.hi.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

doepassword.k12.hi.us
www.doepassword.k12.hi.us

Other certificates including the domain name k12.hi.us

(limited to 100 certificates)
acsaregion13.org
www.colegioguadalupedetulpetlac.edu.mx
www.kaaawaschool.k12.hi.us
www.kis.k12.hi.us
registration.k12.hi.us
www.cks.k12.hi.us
lilinote.k12.hi.us
www.whis.k12.hi.us
*.budget.k12.hi.us
kahuluischool.k12.hi.us
www.ecsss.k12.hi.us
admin.allsaintsjupiter.org
pueo1.k12.hi.us
hs.unitedsd.net
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
fimportal.k12.hi.us
lokelani.k12.hi.us
CSDPMT2.k12.hi.us
www.maunawili.k12.hi.us
www.kulael.k12.hi.us
ociss1.k12.hi.us
admin.ahuimanu.k12.hi.us
rostersonline.k12.hi.us
mckinley.k12.hi.us
admin.sallasmahone.gocats.org
wes.bibbed.org
mauido2.k12.hi.us
www.kulael.k12.hi.us
www.pope.k12.hi.us
www.kuhioschool.k12.hi.us
kuhioschool.k12.hi.us
www.kuhioschool.k12.hi.us
0-3.texasdhhresources.org
admin.alhs.nyc
www.lehua.k12.hi.us
mokulele.k12.hi.us
m.ecsssonline.k12.hi.us
www.lihikaielementary.k12.hi.us
second.exteraschools.org
www.oahornets.org
www.cristoreysandiego.org
www.maunawili.k12.hi.us
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
traveler3.k12.hi.us
admin.akinseagles.org
admin.akinseagles.org
aliamanu.k12.hi.us
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
www.kulael.k12.hi.us
admin.ahs.ardmoreschools.org
www.ewa.k12.hi.us
kauaido1.k12.hi.us
www.helemano.k12.hi.us
www.doepassword.k12.hi.us
www.maunawili.k12.hi.us
servicelogs.demo.ecsssonline.k12.hi.us
academywest.hamadyhawks.net
hawdo1.k12.hi.us
admin.ahs.ardmoreschools.org
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
admin.alhs.nyc
admin.ahs.ardmoreschools.org
admin.allenparkschools.com
sunset.k12.hi.us
hphs.flo2.k12.sc.us
www.kapalama.k12.hi.us
admin.allsaintsjupiter.org
whitaker.bpsd.k12.ca.us
www.kulael.k12.hi.us
admin.milmauka.k12.hi.us
admin.mokapu.k12.hi.us
www.pope.k12.hi.us
admin.sd925.org
kekahaschool.k12.hi.us
admin.aechs.mcallenisd.org
ehr.k12.hi.us
admin.calmecaacademy.com
www.kauluwela.k12.hi.us
www.kuhioschool.k12.hi.us
admin.adulteducation.pleasantonusd.net
www.fernschool.k12.hi.us
admin.allsaintsjupiter.org
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
www.kaimiloa.k12.hi.us
digital808storytellers.k12.hi.us
standardstoolkit.k12.hi.us
admin.alc.ucboe.us
barbers.k12.hi.us
nes.k12.hi.us
lotusnotes.k12.hi.us
www.doepassword.k12.hi.us
ssesonline.k12.hi.us
puukukui.k12.hi.us
pauoa.k12.hi.us
www.kaimiloa.k12.hi.us

Certificate

The complete raw certificate details for www.doepassword.k12.hi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMFs/9MOKCJ6cxKjJoAH
qHbA+ZxQn8FSbRJG8hYbt9z5UvgRT43n8tKklnJv2+/eu65dCdNR72IbMm2SnlLZ
BS3N2TfkgY8vlhuwwDT8EDTmHVuktWbPj4RaZ3BrZG7mR7cTS8k4tUfSFZisZ4SO
/L4I6iBwbFVsVnd1IE6tD8py2z1TBB0bRJ//PKwgBfQD/UIhoCGsKtjLSHxCie6A
4mNaa55zdgXzN6CfY1tiSS1tDqlKwFoJd6WfZ0a60E3cOcV4lyLmmAIdSRiIcksV
OuE8464j2+qr9LCsNnYXZHdJE+ZA0YVML3jR1qun+42YFPbCva8mQKfLaNAowptG
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11764313567644801218401989450882849935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hawaii'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Honolulu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hawaii Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eisb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.doepassword.k12.hi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21303417040639857221437672397716282970663506546710012820183034468826226215149754440045386178768826492714855362171453020661619804397026083076448834810057338441352789421232978510905433430953016673307396860591635340795137681417526660621087628895059424507344632999200987601151050423594268452976565655043072181448289290121250896812562756784841186581166894617944399324369438988967697667685168944491989894396551020657229620363646857334597391529909646390782910821686913718054927774929401237069532940460987027445842963017097448813666202138761217368379426714040792286545146322006392476325024382343997975377575440886825974711817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doepassword.k12.hi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doepassword.k12.hi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001580ce54dd300000403004730450220220ad381ed18007ef47519df14746cc81d01c4a3dcc6956c2da45235f1a1b99f0221008e852073a8c77fafa1e8d4c196c287bd485d5bd5ef5a9b9382ed403429eea64600750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001580ce54def00000403004630440220414796d752d21c9213ca37ba9976f4ee1cb2edc6229c757ea857559135b31afa022010860d66f30af1133f932c19a285b339d3469639b179120898b64c7a86b96170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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