vpn.evsd90.org

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 7b:c3:55:f4:ff:f9:33:00:56:32:ff:77 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=vpn.evsd90.org

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:c3:55:f4:ff:f9:33:00:56:32:ff:77
Serial Number (int): 38302802663451723872601309047
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 95:7e:f6:39:ae:ec:1c:24:77:bd:0d:0d:50:d7:09:69:8c:c7:8d:3e
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 1e:18:11:97:7e:69:47:be:07:7d:48:25:8d:13:65:29:d4:55:37:f7
Fingerprint (sha256): 21:7b:4e:a9:93:de:9f:f7:69:d3:8d:42:f6:ce:83:dd:9d:09:8a:ce:bd:8c:7e:db:83:f7:92:e1:17:52:92:2c

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate vpn.evsd90.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.evsd90.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.evsd90.org

Other certificates including the domain name evsd90.org

(limited to 100 certificates)
admin.aceacademycharter.org
acsaregion14.org
eastvalleycentral.evsd90.org
admin.ccs.coloma.org
vpn.evsd90.org
expressway-edge.evsd90.org
eastvalleyelementary.evsd90.org
acsaregion14.org
cms.wvsd.org
eastvalleyhigh.evsd90.org
evsd90.org
www.sgisd.net
vpn.evsd90.org
sfrschool.org
eastvalleycentral.evsd90.org
acsaregion14.org
st.louisschool.org
acsaregion14.org
admin.altavista.unionsd.org
eastvalleycentral.evsd90.org
vpn.evsd90.org
admin.eastvalleyelementary.evsd90.org
evsd90.org
expressway-core.evsd90.org
owa.evsd90.org
owa.evsd90.org
acsaregion14.org
admin.aceacademycharter.org
matterhorn.evsd90.org
admin.nes.mcduffie.k12.ga.us
www.ekhla.org
acsaregion14.org
admin.sd44.org
vpn.evsd90.org
admin.altavista.unionsd.org
www.cristoreyorangecounty.org
qhs.burnetcisd.net
admin.lisbahamas.com
evsd90.org
admin.altavista.unionsd.org
admin.altavista.unionsd.org
acsaregion14.org
admin.elementary.mypagosaschools.com
matterhorn.evsd90.org
admin.eastvalleycentral.evsd90.org
admin.moxee.evsd90.org
evsd90.org
terraceheights.evsd90.org
acsaregion14.org
evsd90.org
admin.bes.burnetcisd.net
sgisd.net
acsaregion14.org
vanalstyneisd.org
moxee.evsd90.org
admin.moxee.evsd90.org
admin.aceacademycharter.org
admin.altavista.unionsd.org
acsaregion14.org
vpn.evsd90.org
www.arapaho.k12.ok.us
admin.d124.org
admin.altavista.unionsd.org
acsaregion14.org
owa.evsd90.org
admin.vanalstyneisd.org
acsaregion14.org
admin.hs.notredameacademy.org
www.evsd90.org
owa.evsd90.org
admin.altavista.unionsd.org
www.evsd90.org
admin.altavista.unionsd.org
admin.st.louisschool.org
admin.tes.mcduffie.k12.ga.us
sgisd.net
www.evsd90.org
admin.altavista.unionsd.org
www.evsd90.org
admin.aceacademycharter.org
admin.aceacademycharter.org
admin.evsd90.org
admin.aceacademycharter.org
admin.nes.mcduffie.k12.ga.us
admin.athenour.unionsd.org
admin.altavista.unionsd.org
eastvalleyelementary.evsd90.org
athenour.unionsd.org
d124.org
admin.carlton.unionsd.org
admin.aceacademycharter.org
admin.bes.burnetcisd.net
svts.wvsd.org
owa.evsd90.org
matterhorn.evsd90.org
terraceheights.evsd90.org
admin.bes.burnetcisd.net
earlylearning.wvsd.org
admin.ms.vanalstyneisd.org
eastvalleyelementary.evsd90.org

Certificate

The complete raw certificate details for vpn.evsd90.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XIa6JWnnTrxNmN0DvKG
5RYYeZuPaaFHTLvpR3w6kTW5F5u58VqNZU6fxs8pZ40j4aakJp5WoR2UA2nQJsVb
nAaUXs5rs1W/LGM3W3Y6J22OHynUxTE1tMXtlrXSG4UX7zST897yPvLkeEcSfTk0
OieNz/k+94xIsfcgglRYwXUwCHflOogEMIDmgbJa8118kBM5KpcFV8H4MgJkpJfa
6a2cGiCzpQH1zlmH/Kl9nJ+WVnm9P33PFt8PDY5tTn1aiYTJYuFphumS+XZlGO7v
IThhsF66QBFdvUpNE8qx8jHklo+I+A9Z61FVOW2EzIXOajDHqBIa58ayUb+42DmE
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38302802663451723872601309047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 19:45:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-19 19:45:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.evsd90.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27954932725071495020132012804944047186214296861916653901682403068144217042889450762495798704112066218617870763146359521574597376826265090103172028593674340596315733260300260169546510144408301708774778639338856826435018574185943323008125580601786729397578871360760469056664200802660038451491464627118673928094537617746414195913687051370729732721883981905973475885005282986050622589246150987204350780674926910318740305522562930611282162789538223713136965467009553652915253761551427854514309588077209811378607573917214095692557262640846006147237725022137271662756818462528942340559730420023883169606285025793216685376673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.evsd90.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							957ef639aeec1c2477bd0d0d50d709698cc78d3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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