*.southredford.org

- South Redford School District -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 05:3f:67:57:f5:2f:5e:29:0f:28:62:f0:5e:b0:1a:ee was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

South Redford School District

Organization: South Redford School District
State / Province: Michigan
Locality: Redford
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:3f:67:57:f5:2f:5e:29:0f:28:62:f0:5e:b0:1a:ee
Serial Number (int): 6975350737932679947777051647030598382
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): de:48:64:85:f2:42:2b:42:1e:a7:f3:b6:50:7c:cf:e7:14:84:b7:57
Fingerprint (sha256): 20:58:60:e3:4d:7d:2c:59:47:20:69:25:ca:d4:ea:f5:41:3d:51:ae:cc:eb:f6:ae:70:f1:55:e6:af:2f:87:0a

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.southredford.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.southredford.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.southredford.org
southredford.org

Other certificates including the domain name southredford.org

(limited to 100 certificates)
www.aghseagles.org
addams.southredford.org
palomares.cv.k12.ca.us
jacksoncoschools.com
admin.newmillenniumacademy.org
soar.southredford.org
www.goodshepherdschool.us
sradfs.southredford.org
mountalvernia.org
lb.comalisd.org
sacredheartacademyhempstead.org
webadmin.br.elanco.org
admin.pierce.southredford.org
admin.wq.mtpcsd.org
bufordhs.org
gfes.comalisd.org
fisher.southredford.org
www.aspirapa.org
vandenberg.southredford.org
southredford.org
acsa17.com
admin.waldorfhighschool.org
admin.ecrhs.pylusd.org
admin.proctor.cv.k12.ca.us
admin.rowlettacademies.org
admin.crps.coltsneckschools.org
admin.jcles.org
admin.lincoln.mtpcsd.org
admin.rowlettacademy.org
admin.asacharterschool.com
aghseagles.org
admin.hilltopprep.org
envirostudies.org
www.collegeachievecentral.org
admin.collegeachievecentral.org
topazschool.org
www.rowlettacademy.org
stem2.hcisd.org
admin.lincoln.mtpcsd.org
mms.mpsdnow.org
admin.uachs.org
vandenberg.southredford.org
admin.ahs.alcoaschools.net
ventureacademy.pylusd.org
admin.wps.dover.k12.nh.us
chs.comalisd.org
admin.magnoliaheights.com
vpms.icefps.org
cses.comalisd.org
bhs.ballingerisd.net
admin.advantageacademy.org
www.alarqamislamicschool.org
www.lakeview.pylusd.org
camden.cuhsd.org
admin.independent.cv.k12.ca.us
www.bayheadschool.org
*.southredford.org
www.junctioncity.k12.or.us
eaglescholars.southredford.org
bcas.burke.k12.ga.us
castaichighschool.org
tpes.comalisd.org
admin.melrose.pylusd.org
svms.comalisd.org
admin.fisher.southredford.org
admin.gctech.edu
crps.coltsneckschools.org
admin.crma5.org
junctioncity.k12.or.us
columbian.tiffincityschools.org
edwhite.org
admin.pylusd.org
admin.soar.southredford.org
admin.creekside.cv.k12.ca.us
admin.soar.southredford.org
www.mountalvernia.org
lisawesthigh.lisaacademy.org
canyon.cv.k12.ca.us
admin.vandenberg.southredford.org
jefferson.southredford.org
admin.woodsboro.pylusd.org
admin.compton.bcsd.com
cdc.inglewoodusd.com
raak6.richardallenschools.com
admin.dms.dover.k12.nh.us
admin.rosedrive.pylusd.org
www.ohds.org
www.cumbresbogota.edu.co
admin.holyfam.org
admin.hills.bcsd.com
aes.alcoaschools.net
admin.idlewildelementaryschool.wearecms.com
admin.stbarnabasparish.org
admin.mes150.org
sle.slvusd.org
www.anacondaschools.org
www.msdathletics.com
www.fasdk12.org
ballingerisd.net
southredford.org

Certificate

The complete raw certificate details for *.southredford.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhibvyz2azNcY7nNoG38
W6eKXIBDajdjOMXjED8XNdbE7H8PiAnYqkkmitZS7UxM1TjrdHmApzlCokGzo/oq
KxLkXbFrBtjmm1fARK9XBym5k7e/EEYwV3psjB3rXDAHhpcvJ3VU+4x0n7fqtIIq
r+MrI32keDtEfyi1j+HgDo+RsLiUrRattfjxeeo2lOFk6LmzrOnfTeNUtq74eL9A
L0Y4j8MehpJjtctkxArbocEo7oGlmc94cR6BL3QbWDW21nlDQB8H5IbVvP98mkar
QY3L5HC3z9P0yon87tw0O+WdWhs2J1ddQlvP6hpXdLGiULiL5MndGIuGD8tKCHd0
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6975350737932679947777051647030598382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Redford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'South Redford School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.southredford.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23997412790890011842663670961604436060745658613279566168283300146834444046459861998316983563911626647491096443297592404669162139123047718632012292465984634504378364351745834568765320667702992418145272005246505722522302878472121567485808213762063677325709067036952233863160393383667953814117335717921008069164421664483036326639691136875519186251548054308983906081453755655138217992914553020752812408187955452123972375646612131210426434400470251046443676173417859339250003098721955177073777685601946743897548427331421731327067250765614695218387743984018008609192783176383279995250347199210669587804899913349247058539707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southredford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southredford.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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