hawdo1.k12.hi.us

- Hawaii Department of Education -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:30:f4:d3:a7:c2:99:23:77:6a:21:2a:65:ef:38:d6 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hawaii Department of Education

Organization: Hawaii Department of Education
State / Province: Hawaii
Locality: Honolulu
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:30:f4:d3:a7:c2:99:23:77:6a:21:2a:65:ef:38:d6
Serial Number (int): 8229563900923999906433494229082650838
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c6:db:df:d0:87:11:06:14:6e:2b:db:fc:03:36:6a:76:7a:55:3d:50
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 3c:28:84:38:39:02:22:b8:6b:f1:ff:0d:f5:7f:c4:fb:12:bd:9a:87
Fingerprint (sha256): 0c:f5:d3:74:ed:c2:c2:ae:f7:1b:08:78:8c:49:8c:54:d7:62:52:d2:e8:e3:7a:66:a5:91:c5:6c:a3:22:0f:79

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate hawdo1.k12.hi.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hawdo1.k12.hi.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hawdo1.k12.hi.us

Other certificates including the domain name k12.hi.us

(limited to 100 certificates)
acsaregion13.org
www.colegioguadalupedetulpetlac.edu.mx
www.kaaawaschool.k12.hi.us
www.kis.k12.hi.us
registration.k12.hi.us
www.cks.k12.hi.us
lilinote.k12.hi.us
www.whis.k12.hi.us
*.budget.k12.hi.us
kahuluischool.k12.hi.us
www.ecsss.k12.hi.us
admin.allsaintsjupiter.org
pueo1.k12.hi.us
hs.unitedsd.net
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
fimportal.k12.hi.us
lokelani.k12.hi.us
CSDPMT2.k12.hi.us
www.maunawili.k12.hi.us
www.kulael.k12.hi.us
ociss1.k12.hi.us
admin.ahuimanu.k12.hi.us
rostersonline.k12.hi.us
mckinley.k12.hi.us
admin.sallasmahone.gocats.org
wes.bibbed.org
mauido2.k12.hi.us
www.kulael.k12.hi.us
www.pope.k12.hi.us
www.kuhioschool.k12.hi.us
kuhioschool.k12.hi.us
www.kuhioschool.k12.hi.us
0-3.texasdhhresources.org
admin.alhs.nyc
www.lehua.k12.hi.us
mokulele.k12.hi.us
m.ecsssonline.k12.hi.us
www.lihikaielementary.k12.hi.us
second.exteraschools.org
www.oahornets.org
www.cristoreysandiego.org
www.maunawili.k12.hi.us
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
traveler3.k12.hi.us
admin.akinseagles.org
admin.akinseagles.org
aliamanu.k12.hi.us
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
www.kulael.k12.hi.us
admin.ahs.ardmoreschools.org
www.ewa.k12.hi.us
kauaido1.k12.hi.us
www.helemano.k12.hi.us
www.doepassword.k12.hi.us
www.maunawili.k12.hi.us
servicelogs.demo.ecsssonline.k12.hi.us
academywest.hamadyhawks.net
hawdo1.k12.hi.us
admin.ahs.ardmoreschools.org
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
admin.alhs.nyc
admin.ahs.ardmoreschools.org
admin.allenparkschools.com
sunset.k12.hi.us
hphs.flo2.k12.sc.us
www.kapalama.k12.hi.us
admin.allsaintsjupiter.org
whitaker.bpsd.k12.ca.us
www.kulael.k12.hi.us
admin.milmauka.k12.hi.us
admin.mokapu.k12.hi.us
www.pope.k12.hi.us
admin.sd925.org
kekahaschool.k12.hi.us
admin.aechs.mcallenisd.org
ehr.k12.hi.us
admin.calmecaacademy.com
www.kauluwela.k12.hi.us
www.kuhioschool.k12.hi.us
admin.adulteducation.pleasantonusd.net
www.fernschool.k12.hi.us
admin.allsaintsjupiter.org
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
www.kaimiloa.k12.hi.us
digital808storytellers.k12.hi.us
standardstoolkit.k12.hi.us
admin.alc.ucboe.us
barbers.k12.hi.us
nes.k12.hi.us
lotusnotes.k12.hi.us
www.doepassword.k12.hi.us
ssesonline.k12.hi.us
puukukui.k12.hi.us
pauoa.k12.hi.us
www.kaimiloa.k12.hi.us

Certificate

The complete raw certificate details for hawdo1.k12.hi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWlVhHV2Snwb0/TCrsZr
l32hKsIFN8h3jQ5MeOdPrC7IgngqwZk0p33rqORL/tUjB2d05aiJ1/aHgm97me47
PHl0aJwdDakpsi/+hn5RG4lKmNQsx/kAzmo4KDyrHJrWBImBkPIHNlAfePfa4Tze
MAcx/Wp1MxsurhkbJqhvEKSjIMNZPxrhP8W77Uyc47V30cb4pN5OasjhfdlGFOXV
6h57oQ/VNwefdHZZcNt3xEZCeGwbbsD7hOsbJGgSHDuWfamGI6ymtVJ3ypLxoqZc
9999UICouZU+kT6yfDqhffbH0WWLAl+WmTaxSyAaBwdIoZNa9KhhJTNy4n4mkvsU
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8229563900923999906433494229082650838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hawaii'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Honolulu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hawaii Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hawdo1.k12.hi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23910981795739870031257979343407829006969438567516670765033072734885543531401568030554514016789207506554619778339570218780903936805162925806751589980683059054446944126552127534291489708106455484381005799530573522575153654380189762534995892894832436457258759938395780901930626788895550868139791411687281682463040868221882551490505036402404549292566091652082264642282714925984744247519184626446601758243987828010366607066264343347905542466134149429635113543934513070649028610095441241503537732884701348837276164610966741586516342026387134006342826114196125851858149968412459353418093269572207850109971607383974436606981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6dbdfd0871106146e2bdbfc03366a767a553d50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawdo1.k12.hi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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