hs.franklintowne.org

- Cloudflare, Inc. -

Issued by Cloudflare Inc RSA CA-2

About this certificate

This digital certificate with serial number 08:a7:7a:e8:58:3a:a8:36:ff:a3:6e:b7:af:80:7f:76 was issued on by Cloudflare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cloudflare, Inc.

Organization: Cloudflare, Inc.
State / Province: California
Locality: San Francisco
Country: US

Cloudflare, Inc.

Organization: Cloudflare, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a7:7a:e8:58:3a:a8:36:ff:a3:6e:b7:af:80:7f:76
Serial Number (int): 11503430403865584944243097892779229046
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:74:60:dc:ad:8e:ea:76:c5:b8:27:05:8f:0a:56:f5:a1:a5:ea:64
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a

Fingerprint (sha1): 42:bd:0e:61:5d:ed:58:1e:10:b6:42:66:8b:37:7e:7f:b5:b4:9b:ff
Fingerprint (sha256): 31:dc:af:eb:8a:4a:87:6c:99:a8:6a:81:b8:09:e8:72:f5:31:b1:55:06:00:ac:9b:c3:f4:97:1b:be:45:d6:aa

Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl

Check the revocation status for certificate hs.franklintowne.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hs.franklintowne.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hs.franklintowne.org

Other certificates including the domain name franklintowne.org

(limited to 100 certificates)
*.franklintowne.org
*.franklintowne.org
abilene.texasleadership.net
mail2.franklintowne.org
admin.espanol.tecsalvord.org
abilene.texasleadership.net
abilene.texasleadership.net
raul.franklintowne.org
116elementary.org
hs.franklintowne.org
admin.germaincharter.org
admin.liholiho.org
fams.franklinlakes.k12.nj.us
116elementary.org
abilene.texasleadership.net
116elementary.org
raul.franklintowne.org
balloustay.com
abilene.texasleadership.net
admin.eagles.lucernevalleyunified.org
admin.somonauk.net
admin.eastview.gcschools.net
mail2.franklintowne.org
admin.clarabartonhs.org
raul.franklintowne.org
116elementary.org
*.franklintowne.org
raul.franklintowne.org
*.franklintowne.org
www.eshelmanelementary.com
116elementary.org
www.lsusfw.org
116elementary.org
abilene.texasleadership.net
hs.franklintowne.org
icdw.franklintowne.org
116elementary.org
116elementary.org
bhswca.com
abilene.texasleadership.net
*.franklintowne.org
reset.franklintowne.org
116elementary.org
es.franklintowne.org
admin.sierra.bcsd.com
116elementary.org
admin.sandiaprep.org
es.franklintowne.org
admin.lucernevalleyunified.org
abilene.texasleadership.net
abilene.texasleadership.net
*.franklintowne.org
*.franklintowne.org
cft.gcschools.net
abilene.texasleadership.net
abilene.texasleadership.net
es.franklintowne.org
admin.brightfutures.grandviewc4.net
116elementary.org
abilene.texasleadership.net
*.franklintowne.org
116elementary.org
116elementary.org
abilene.texasleadership.net
abilene.texasleadership.net
116elementary.org
mail2.franklintowne.org

Certificate

The complete raw certificate details for hs.franklintowne.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ugOdkc7EQNNXDYT2rx
KG7hvimoJitFrtt9oqKxnsUD0Vpck/cKKmpD7Gh50ee0JoUlq0UOdo+gQqZIAXp0
CG0Z6DEQLoa2kGs9RsSCQiBlka3F+pSVHL73mx6vBlfNmlxUc17ypIac74STw0NA
+PRSdajK6fnRdojo2OdKQ7itBvl/P1XXy77jN85gcQ3PMVMT8J6vODaupaJOc19b
VZGesFMTk3qIqga9n3lpFlYnjTJf/79ibgzbP7sqXMyiKisITLgTJncJ+n8vP89A
qtZvyGQs6Jw6KBB/xqDBub/D2jWJ0CVXWq5xdvQDHPViLz/hRHQFZB/RRgJAGEYO
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11503430403865584944243097892779229046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hs.franklintowne.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22200004928270033266716163430865802110463516783054842785123742825588850131799126297840925865466033247235272120829140013525124248289119601449302669509709714889679423984156271999265940299446071000685463218376855203764552086563136675834627637540944526658197661556718905553952666325439719629430884434774654253532444910374148280571508630171936009560259062642211649126134774356294080144136404225689856872437948744745724450850926311098817232584097553766035870309278482241117424757278170470390970679952963700156521052612912994141161768986599486260377890746287283012964319637112932476190371246063473533971859175936357667573417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f7460dcad8eea76c5b827058f0a56f5a1a5ea64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.franklintowne.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:26|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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