esphac-test.killeenisd.org

- Killeen Independent School District -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:20:ca:a7 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Killeen Independent School District

Organization: Killeen Independent School District
State / Province: Texas
Locality: Killeen
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:20:ca:a7
Serial Number (int): 1277217447
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: c7:0c:cc:3b:52:ce:93:4e:2c:ae:33:fa:1e:e4:74:11:c1:59:da:0b
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 50:aa:15:df:e0:1d:da:ba:48:51:f1:48:35:9a:72:c7:8f:5d:e9:64
Fingerprint (sha256): 10:c4:7a:92:86:a8:5c:4d:8d:a7:f3:30:1a:fe:b3:ec:55:66:96:a7:0c:eb:a2:aa:64:bb:65:72:31:d6:29:fd

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate esphac-test.killeenisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esphac-test.killeenisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esphac-test.killeenisd.org

Other certificates including the domain name killeenisd.org

(limited to 100 certificates)
webvpn.killeenisd.org
espsms.killeenisd.org
techhelpdesk.killeenisd.org
mobile.killeenisd.org
www.killeenisd.org
jac.killeenisd.org
webvpn.killeenisd.org
lync.killeenisd.org
reporting.killeenisd.org
mealapps.killeenisd.org
help.killeenisd.org
*.killeenisd.org
esphac-test.killeenisd.org
webvpn.killeenisd.org
transfinder.killeenisd.org
owa.killeenisd.org
techhelpdesk.killeenisd.org
www.killeenisd.org
espsms.killeenisd.org
idbadges.killeenisd.org
old.killeenisd.org
jac.killeenisd.org
*.killeenisd.org
mail.killeenisd.org
espsms.killeenisd.org
esphac.killeenisd.org
www.killeenisd.org
facerec.killeenisd.org
*.killeenisd.org
webvpn.killeenisd.org
www.killeenisd.org
kisdjss.killeenisd.org
eduphoria.killeenisd.org
espsms.killeenisd.org
www.killeenisd.org
eforce.killeenisd.org
sso.killeenisd.org
schools.killeenisd.org
pwreset.killeenisd.org
schools.killeenisd.org
ibossreporter.killeenisd.org
www.killeenisd.org
ibossreporter.killeenisd.org
exceed.killeenisd.org
ftpfiles.killeenisd.org
lync.killeenisd.org
jac.killeenisd.org
old.killeenisd.org
sso.killeenisd.org
mealapps.killeenisd.org
www.killeenisd.org
mealapps.killeenisd.org
*.killeenisd.org
reporting.killeenisd.org
webvpn.killeenisd.org
prime.killeenisd.org
old.killeenisd.org
timeclock.killeenisd.org
kisdjss.killeenisd.org
www.killeenisd.org
pwreset.killeenisd.org
library.killeenisd.org
webstage.killeenisd.org
esphac.killeenisd.org
share.killeenisd.org
help.killeenisd.org
eduphoria.killeenisd.org
sso.killeenisd.org
owa.killeenisd.org
lync.killeenisd.org
*.killeenisd.org
pwresetstaff.killeenisd.org
espsms.killeenisd.org
help.killeenisd.org
testreporting.killeenisd.org
www.killeenisd.org
reporting.killeenisd.org
help.killeenisd.org
payments.killeenisd.org
help.killeenisd.org
*.killeenisd.org
library.killeenisd.org
*.killeenisd.org
old.killeenisd.org
schools.killeenisd.org
kisdjss.killeenisd.org
eweb.killeenisd.org
owa.killeenisd.org
sso.killeenisd.org
www.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
prime.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
*.killeenisd.org
eduphoria.killeenisd.org
office.killeenisd.org
webvpn.killeenisd.org
espapp1-test.killeenisd.org

Certificate

The complete raw certificate details for esphac-test.killeenisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7IjJLrJ4+QQrDrqs8oa
4MjyJKRJ2SFprGPgpOYObm3EUrisPqqWadG8SL6CKDZ+3yylvoSnZL71eg0iL2J1
XmCFqsrY2OmbX4ETDPxPxq2W0XrQELuty/OlnLNozqSu5pD/PgsJUYzNe67mFe9g
5QrWU5vcgqx0s9ABR71TO45RxIY1ZnYudrqe/O1vAVnkB6cgLDj9qwLRowyZj5ue
0fxRsugSNcNj0TLlArfqgr6MLn7AQd5ze+O5oHRUP1tLSf9FX56ZTB3Ks8ciyxqL
ISmD2ImQdxBQKXrZl9FZLGVSjesXx5Vw+ozNaXg7JfDm8lphfn1IuexrhClZ/1YY
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277217447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-16 13:37:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-17 01:50:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen Independent School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esphac-test.killeenisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20664686475785750463584305322929495144668568213643387156851702397755418043926568588117149320379223183166799710002310595635424917407240278074236128186198196356885371988907452240253416459991724908388380770910507968047097175578018737355156549688585963070110738524080036158968423031023383066188074016553143913804732632328298666979975738904726109520196719589884601473721392291055472927561311314376143922909607236486153084312054249346920161352162493420323993157761046779513086904269401205465097410084481076025660299661165924106574577901614332128734535744429071370164956214486785264562245372417688898638975345948509523548279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esphac-test.killeenisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c70ccc3b52ce934e2cae33fa1ee47411c159da0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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