www.killeenisd.org

- Killeen Independent School District -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b4:04:b6:3b:ae:62:e5:7c:00:00:00:00:50:ec:a9:f9 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Killeen Independent School District

Organization: Killeen Independent School District
State / Province: Texas
Locality: Killeen
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b4:04:b6:3b:ae:62:e5:7c:00:00:00:00:50:ec:a9:f9
Serial Number (int): 239285504555698399527369587161935161849
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:6b:fc:03:eb:d2:61:d6:4d:aa:b1:76:b8:4e:88:4d:61:ca:96:7c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 16:ff:86:87:f9:cf:1f:d7:0f:10:f3:41:a8:2b:37:12:b1:ae:a1:df
Fingerprint (sha256): 1f:88:3b:5b:4a:cf:42:37:6c:f4:7d:b0:59:ab:80:fa:21:e4:4a:54:94:63:ff:66:b8:68:69:f8:9b:9a:71:9a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.killeenisd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.killeenisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.killeenisd.org
killeenisd.org

Other certificates including the domain name killeenisd.org

(limited to 100 certificates)
webvpn.killeenisd.org
espsms.killeenisd.org
techhelpdesk.killeenisd.org
mobile.killeenisd.org
www.killeenisd.org
jac.killeenisd.org
webvpn.killeenisd.org
lync.killeenisd.org
reporting.killeenisd.org
mealapps.killeenisd.org
help.killeenisd.org
*.killeenisd.org
esphac-test.killeenisd.org
webvpn.killeenisd.org
transfinder.killeenisd.org
owa.killeenisd.org
techhelpdesk.killeenisd.org
www.killeenisd.org
espsms.killeenisd.org
idbadges.killeenisd.org
old.killeenisd.org
jac.killeenisd.org
*.killeenisd.org
mail.killeenisd.org
espsms.killeenisd.org
esphac.killeenisd.org
www.killeenisd.org
facerec.killeenisd.org
*.killeenisd.org
webvpn.killeenisd.org
www.killeenisd.org
kisdjss.killeenisd.org
eduphoria.killeenisd.org
espsms.killeenisd.org
www.killeenisd.org
eforce.killeenisd.org
sso.killeenisd.org
schools.killeenisd.org
pwreset.killeenisd.org
schools.killeenisd.org
ibossreporter.killeenisd.org
www.killeenisd.org
ibossreporter.killeenisd.org
exceed.killeenisd.org
ftpfiles.killeenisd.org
lync.killeenisd.org
jac.killeenisd.org
old.killeenisd.org
sso.killeenisd.org
mealapps.killeenisd.org
www.killeenisd.org
mealapps.killeenisd.org
*.killeenisd.org
reporting.killeenisd.org
webvpn.killeenisd.org
prime.killeenisd.org
old.killeenisd.org
timeclock.killeenisd.org
kisdjss.killeenisd.org
www.killeenisd.org
pwreset.killeenisd.org
library.killeenisd.org
webstage.killeenisd.org
esphac.killeenisd.org
share.killeenisd.org
help.killeenisd.org
eduphoria.killeenisd.org
sso.killeenisd.org
owa.killeenisd.org
lync.killeenisd.org
*.killeenisd.org
pwresetstaff.killeenisd.org
espsms.killeenisd.org
help.killeenisd.org
testreporting.killeenisd.org
www.killeenisd.org
reporting.killeenisd.org
help.killeenisd.org
payments.killeenisd.org
help.killeenisd.org
*.killeenisd.org
library.killeenisd.org
*.killeenisd.org
old.killeenisd.org
schools.killeenisd.org
kisdjss.killeenisd.org
eweb.killeenisd.org
owa.killeenisd.org
sso.killeenisd.org
www.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
prime.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
*.killeenisd.org
eduphoria.killeenisd.org
office.killeenisd.org
webvpn.killeenisd.org
espapp1-test.killeenisd.org

Certificate

The complete raw certificate details for www.killeenisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h8zZo6dradZTaI0NLl1
sOPv2QHyxBj8UqalOY+ZdJJdBSF+qQfRUE0iziHDzJccSOcyC4bpxZItqNT+hbjI
VsgzqSO4PpXmHxqmoHWg9YEn50kCxBuOGNSNfq7hT14w8cpniBrEKNDqYVnGLyen
tRrHlvXcefTykfjvvvEp2gAAXTBb4WnRP+4RvmBWOtuFYgna+q96/LwxkPsibFQp
InbZTR3YsCt/dvwV1JmvexSgxi7rZGgAQd+U8WhIPuJafoyBfPQXHQGLkQBDM8l2
ziy8aRVbaVd9T9p35wQZJL4egxENZqKo0G7r5dG4e/3TNEsmpL9h2BnMp7VFPGqD
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239285504555698399527369587161935161849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 19:01:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 19:31:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen Independent School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.killeenisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525429722720814995140100750949142383120413339546440725685696791480171444756229754243068114392222211603756887748819724492343273570994891218414879174745481912587732596287885282428495419645887270076811773790568301836763899571065821521015154286488993346210096811971745206209206988809351003903537022707873938812392518280083256803319663745025590282516683503848632181396948189637584661106559938840728671993540892534888399676340463973370255535978423106984394399226594200503297886313678805485716529129439764432391899273795521412946539974696854759729757972040589310895875704564327744935640055329728989072274731557211718976467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.killeenisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killeenisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e16bfc03ebd261d64daab176b84e884d61ca967c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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