finance.lockhart.txed.net

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:39:0a was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=finance.lockhart.txed.net,OU=GT58863095+OU=See www.geotrust.com/resources/cps (c)12+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:39:0a
Serial Number (int): 80138
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): e0:69:3f:db:73:a6:1c:98:6c:62:ee:2d:9a:6d:f6:65:a3:70:16:64
Fingerprint (sha256): 1c:54:37:02:c0:21:ba:59:57:01:59:74:b9:85:ff:9a:c6:1e:cd:57:b8:3c:4f:23:54:b0:73:d6:15:a2:7a:65

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate finance.lockhart.txed.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finance.lockhart.txed.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

finance.lockhart.txed.net

Other certificates including the domain name txed.net

(limited to 100 certificates)
admin.allsaintsjupiter.org
eduphoria.comfort.txed.net
dobienews.scuc.txed.net
admin.ajh.brookhavenschools.org
www.giddings.txed.net
www.thorndale.txed.net
dobienews.scuc.txed.net
lsrocket.johnsoncity.txed.net
parish.sangabrielmissionchurch.org
ath.luling.txed.net
lsrocket.johnsoncity.txed.net
fhs.frenship.us
aceroschools.org
dobienews.scuc.txed.net
access.giddings.txed.net
*.mfisd.txed.net
admin.oahornets.org
dobienews.scuc.txed.net
www.jc.txed.net
*.mfisd.txed.net
www.oahornets.org
www.burnet.txed.net
dobienews.scuc.txed.net
*.mfisd.txed.net
bartlett.txed.net
harper.txed.net
thorndale.txed.net
dobienews.scuc.txed.net
*.mfisd.txed.net
*.mfisd.txed.net
es.luling.txed.net
lsrocket.johnsoncity.txed.net
admin.ajh.brookhavenschools.org
lsrocket.johnsoncity.txed.net
*.mfisd.txed.net
dobienews.scuc.txed.net
www.jc.txed.net
dobienews.scuc.txed.net
admin.allsaintsjupiter.org
dobienews.scuc.txed.net
dobienews.scuc.txed.net
lsrocket.johnsoncity.txed.net
dobienews.scuc.txed.net
dobienews.scuc.txed.net
*.mfisd.txed.net
hipponet.hutto.txed.net
dobienews.scuc.txed.net
admin.allsaintsjupiter.org
admin.allsaintsjupiter.org
dobienews.scuc.txed.net
*.scuc.txed.net
admin.7gc.owassops.org
*.scuc.txed.net
dobienews.scuc.txed.net
*.laketravis.txed.net
lsrocket.johnsoncity.txed.net
www.livingstonusd.org
*.libertyhill.txed.net
mail.comfort.txed.net
w2k3-dbs-skystu.wimberley.txed.net
*.libertyhill.txed.net
admin.rvs.monroe.k12.tn.us
eduphoria.scuc.txed.net
edwhite.org
admin.arthuracademy.org
admin.ajh.brookhavenschools.org
harper.txed.net
lsrocket.johnsoncity.txed.net
*.libertyhill.txed.net
eduphoria.scuc.txed.net
*.libertyhill.txed.net
*.mfisd.txed.net
admin.whitson.wsvsd.org
cp.livingstonusd.org
finance.lockhart.txed.net
*.libertyhill.txed.net
harper.txed.net
txed.net
dobienews.scuc.txed.net
admin.angelocatholicschool.com
txed.net
finance.lockhart.txed.net
admin.athlosbrooklynpark.org
admin.ath.luling.txed.net
admin.garvyschool.org
otsw.scuc.txed.net
adairsvillehigh.bartow.k12.ga.us
skyward.gonzales.txed.net
lsrocket.johnsoncity.txed.net
lgusd.org
erma.wimberley.txed.net
dobienews.scuc.txed.net
lsrocket.johnsoncity.txed.net
w2k3-dbs-skystu.wimberley.txed.net
finance.lockhart.txed.net
barracuda.scuc.txed.net
toltonacademy.net
skyward.gonzales.txed.net
admin.arthuracademy.org
aceroschools.org

Certificate

The complete raw certificate details for finance.lockhart.txed.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2upVKIsXvi6b9MCUeUAU
y5JZRUqM4FhfOaqVGhBv8wzIIzNhd0QZ8H3AkYav4pPKJr1pR2qJ5xLMBynDPb7+
fF63YLK/ZfX0ZM4RbDP1ZMMpYnQcgeYVxzZWLpmhVG8Lp6DAxX2Lj0Kmk24IgTkj
tksAfo+FdLl+DhN0LK0nzanL72R2LoSuq0Sqp++VTGKaF+0FgH/JTnoFQ9xO7gJA
er1Ugxh68azHvzKgwMtIGHpS+b1SXJvGtmLTkdIbFJq5vW2NQjcvJ/yGfTXn5GXj
1y2TPOPNu/JgaFyMlf6m7Hff8VScVL8HAqtN4pUnGlRtChoCjXa1EOzHv+FjwWUI
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-29 21:54:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-30 11:41:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT58863095'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finance.lockhart.txed.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27635504219009327051002381129347286019931452778644544854711274714522017035751408841595098536691831324744329700276193772727308542745880749739432762541011554088247162132442502783939571535345479685739301620746708826136037147657652731182334844341452220468806269101489740514163422923817518370554764747785686418511851735673999321291575923556569246694590256997592010639894446547288680562692953548535646506249930064510348908849163097386019966487640445256893358967440395877100650748377052942330718386683227658391280885821647443145020043681412729618197856578375697034179065259049111955155414714124035107532060951123414829303979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.lockhart.txed.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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