exchange.kcusd.com

- exchange.kcusd.com -

Issued by Starfield Secure Certification Authority

About this certificate

This digital certificate with serial number 43:14:3b was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

exchange.kcusd.com

Organization: exchange.kcusd.com
Organization unit: Domain Control Validated

Starfield Technologies, Inc.

Company registration number: 10688435
Organization: Starfield Technologies, Inc.
Organization unit: http://certificates.starfieldtech.com/repository
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:14:3b
Serial Number (int): 4396091
Serial Number lenght: 23 bits, 3 octets

SubjectKeyId: d6:89:2b:c0:20:af:4c:d7:f9:35:b8:14:44:a1:21:ca:cf:e1:07:23
AuthorityKeyId: 49:4b:52:27:d1:1b:bc:f2:a1:21:6a:62:7b:51:42:7a:8a:d7:d5:56

Fingerprint (sha1): cb:f5:f3:6a:e3:3f:0b:3f:0b:c2:4f:5a:eb:30:cc:35:1d:47:c7:b7
Fingerprint (sha256): 2e:59:1b:09:e5:48:16:e1:c1:22:83:b3:87:0f:17:f2:cf:b6:1f:0a:51:d0:ea:be:fe:b4:45:ee:16:47:90:e7

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sf_intermediate.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com
CRL Distribution Point: http://certificates.starfieldtech.com/repository/starfieldextendedissuing2.crl

Check the revocation status for certificate exchange.kcusd.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange.kcusd.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.kcusd.com
www.exchange.kcusd.com

Other certificates including the domain name kcusd.com

(limited to 100 certificates)
*.kcusd.com
ems.kcusd.com
powerschool.kcusd.com
aceroschools.org
admin.adulted.kcusd.com
wheatley.tisd.org
*.kcusd.com
*.kcusd.com
admin.kcusd.com
admin.adulted.kcusd.com
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.7gc.owassops.org
admin.ccti.pgsd.ms
admin.rvs.monroe.k12.tn.us
admin.ccti.pgsd.ms
powerschool.kcusd.com
admin.ccti.pgsd.ms
aceroschools.org
pa-3050.kcusd.com
pa-3050.kcusd.com
acrma8.org
bartsch.kcusd.com
exchange.kcusd.com
kcusd.com
fac.kcusd.com
admin.adulted.kcusd.com
www.portrichmondhs.org
exchange.kcusd.com
admin.alccobras.net
*.kcusd.com
admin.ccti.pgsd.ms
admin.adulted.kcusd.com
admin.adulted.kcusd.com
admin.adulted.kcusd.com
www.stlouis-batesville.org
rvs.monroe.k12.tn.us
aceroschools.org
admin.ccti.pgsd.ms
admin.wayside.bcsd.com
aceroschools.org
admin.lasgs.net
admin.adulted.kcusd.com
admin.adulted.kcusd.com
admin.chms.mx
admin.adulted.kcusd.com
admin.adulted.kcusd.com
aceroschools.org
admin.upstreamcollaborative.org
admin.stanthonyeagles.org
*.kcusd.com
admin.ccti.pgsd.ms
www.chms.mx
elementary.grovetonisd.net
admin.ccti.pgsd.ms
acrma8.org
admin.rockyriverhighschool.wearecms.com
reed.kcusd.com
cpa.confluenceacademy.org
acrma8.org
*.kcusd.com
ccti.pgsd.ms
aceroschools.org
rhs.kcusd.com
acrma8.org
admin.sqhs.monroe.k12.tn.us
admin.adulted.kcusd.com
powerschool.kcusd.com
svhs.wvsd.com
greenwoodscharter.org
aceroschools.org
lasgs.net
admin.centroculturaljalilgibran.edu.mx
lincoln.kcusd.com
it.canoncityschools.org
www.marissa40.org
vapa.mvusd.net
admin.adulted.kcusd.com
kcusd.com
powerschool.kcusd.com
admin.ccti.pgsd.ms
comfortisd.org
www.trinitystelementary.com
admin.charlottelearningacademy.org
admin.churchill.edu.mx
admin.adulted.kcusd.com
wms.csisd.org
admin.adulted.kcusd.com
bhs.bisdtx.org
ssl.kcusd.com
vpn.kcusd.com
admin.chms.mx
*.kcusd.com
acrma8.org
powerschool.kcusd.com
kcusd.com
pa-3050.kcusd.com
admin.adulted.kcusd.com
www.centroculturaljalilgibran.edu.mx
admin.adulted.kcusd.com

Certificate

The complete raw certificate details for exchange.kcusd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDH1YxaMnu8CLNvvUALY3TdNYb0
dwQfSzxYFmJjAQNqKMS7o8hI+fbhTI9KkMzHPyGskryyFX6xsGiwtD81Fh7xEj1o
wTiKiAgizvMZhNWD3aOkMuMl8uS501Xl9F9yu+CrYwBvWo83BYJtFXiJ2dlpNO0q
tvccen5SP2g59N4+bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4396091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.starfieldtech.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10688435'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-02-07 18:10:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-07 18:10:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange.kcusd.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange.kcusd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 140328328380965861187835817174134886290416339336520249222236287110415131493316361930879612489209534037453376477218175264336433175613196073819971428705918022133073889252893807010099237355498000996672558662136790502357490310859455764067691934368226323194623643739671882969732538460343981353674711200402446892653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/starfieldextendedissuing2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.starfieldtech.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sf_intermediate.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6892bc020af4cd7f935b81444a121cacfe10723
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 494b5227d11bbcf2a1216a627b51427a8ad7d556
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.kcusd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchange.kcusd.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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