skyward.gonzales.txed.net

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:79:c6:24:d0:30:0b:d7:25:8d:bf:ce:f7:bc:f5:c8 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skyward.gonzales.txed.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:79:c6:24:d0:30:0b:d7:25:8d:bf:ce:f7:bc:f5:c8
Serial Number (int): 7278426732553633448799914036125562312
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ce:08:eb:04:96:b7:67:be:5a:ac:00:d8:6a:d6:96:0b:e9:47:45:22
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 20:3a:5d:ea:11:f5:da:8c:6b:c9:83:b8:be:fe:7b:ab:cd:ee:f1:bc
Fingerprint (sha256): 22:e3:ca:44:08:b8:d8:6d:fc:40:11:b9:de:22:ba:1a:69:bc:4d:bb:1e:b0:07:27:ac:39:a2:50:c2:7c:de:72

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate skyward.gonzales.txed.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skyward.gonzales.txed.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skyward.gonzales.txed.net

Other certificates including the domain name txed.net

(limited to 100 certificates)
admin.allsaintsjupiter.org
eduphoria.comfort.txed.net
dobienews.scuc.txed.net
admin.ajh.brookhavenschools.org
www.giddings.txed.net
www.thorndale.txed.net
dobienews.scuc.txed.net
lsrocket.johnsoncity.txed.net
parish.sangabrielmissionchurch.org
ath.luling.txed.net
lsrocket.johnsoncity.txed.net
fhs.frenship.us
aceroschools.org
dobienews.scuc.txed.net
access.giddings.txed.net
*.mfisd.txed.net
admin.oahornets.org
dobienews.scuc.txed.net
www.jc.txed.net
*.mfisd.txed.net
www.oahornets.org
www.burnet.txed.net
dobienews.scuc.txed.net
*.mfisd.txed.net
bartlett.txed.net
harper.txed.net
thorndale.txed.net
dobienews.scuc.txed.net
*.mfisd.txed.net
*.mfisd.txed.net
es.luling.txed.net
lsrocket.johnsoncity.txed.net
admin.ajh.brookhavenschools.org
lsrocket.johnsoncity.txed.net
*.mfisd.txed.net
dobienews.scuc.txed.net
www.jc.txed.net
dobienews.scuc.txed.net
admin.allsaintsjupiter.org
dobienews.scuc.txed.net
dobienews.scuc.txed.net
lsrocket.johnsoncity.txed.net
dobienews.scuc.txed.net
dobienews.scuc.txed.net
*.mfisd.txed.net
hipponet.hutto.txed.net
dobienews.scuc.txed.net
admin.allsaintsjupiter.org
admin.allsaintsjupiter.org
dobienews.scuc.txed.net
*.scuc.txed.net
admin.7gc.owassops.org
*.scuc.txed.net
dobienews.scuc.txed.net
*.laketravis.txed.net
lsrocket.johnsoncity.txed.net
www.livingstonusd.org
*.libertyhill.txed.net
mail.comfort.txed.net
w2k3-dbs-skystu.wimberley.txed.net
*.libertyhill.txed.net
admin.rvs.monroe.k12.tn.us
eduphoria.scuc.txed.net
edwhite.org
admin.arthuracademy.org
admin.ajh.brookhavenschools.org
harper.txed.net
lsrocket.johnsoncity.txed.net
*.libertyhill.txed.net
eduphoria.scuc.txed.net
*.libertyhill.txed.net
*.mfisd.txed.net
admin.whitson.wsvsd.org
cp.livingstonusd.org
finance.lockhart.txed.net
*.libertyhill.txed.net
harper.txed.net
txed.net
dobienews.scuc.txed.net
admin.angelocatholicschool.com
txed.net
finance.lockhart.txed.net
admin.athlosbrooklynpark.org
admin.ath.luling.txed.net
admin.garvyschool.org
otsw.scuc.txed.net
adairsvillehigh.bartow.k12.ga.us
skyward.gonzales.txed.net
lsrocket.johnsoncity.txed.net
lgusd.org
erma.wimberley.txed.net
dobienews.scuc.txed.net
lsrocket.johnsoncity.txed.net
w2k3-dbs-skystu.wimberley.txed.net
finance.lockhart.txed.net
barracuda.scuc.txed.net
toltonacademy.net
skyward.gonzales.txed.net
admin.arthuracademy.org
aceroschools.org

Certificate

The complete raw certificate details for skyward.gonzales.txed.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofk9UYTElIDew/3Bjar9
tuZZvmKJ6F0Z3FZyxozaZGwD4qiVfiRL/dDUgSl6qP2koXfClKuyM/C0a27fOu81
cTnLYqB70QzO2QGCK91zyup7lg/19qzlgz/mTaVHOGHK7uSlpWLoOVRIY4/llRfx
4EwAAd7i9PLyoou9CXuNFU/+VjtMk9ghJ9/EpE3S1idGQv+sE+PF2ceUBdTVCw2v
EgAmFKer+9H6JyuQA9Ao3AIMwMmfutW4nni0PqbYdzmJ2gZsZRW40wK3nmbXksRh
ImdvwK5JNbxS0p3qzlHncqgFQvuLLJJsycdkyBAGlgOF6dhiz4ZdiEJ7npJHEFXJ
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7278426732553633448799914036125562312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skyward.gonzales.txed.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20447271690091641802420488259199135434026520941194621039118834143536005508296977079214229677244917808194579339131268264589063524394402434589044524560019042127516965111881364665158088544905867613501260963326897930392408460187057088636001425685616068189354426920065378954493074310261349086527797346847219479416717161325850283385656282401621142089061305401960921758631953743441836909789676687668844998146278682113475596031286505796047701296171657964873834811900193793559447972155176814178042550291665578016231740129552736190817074018632003465301209747226891496065042880119629485985381884270279104041252599248044390992291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce08eb0496b767be5aac00d86ad6960be9474522
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyward.gonzales.txed.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016156fe6924000004030047304502203d51c9078a1b7534461cfdf535a37e114cd77a1f7fa226b303dfd5014d9139ac022100b803643d5a36d9c10a7fb080466d4f731087a0fe667301dba07be06008234b6d0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016156fe69c1000004030046304402200d976c82a810e25244c5293c0073f8e6e7654c9a0ee50c07c1d040db0e012fe4022033f45f080e005947fb07dd7ef78627938c9fffffd4ff3cf316264ab0f5c328da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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