vpn.anoka.k12.mn.us

- ANOKA-HENNEPIN PUBLIC SCHOOL DIST. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 7b:58:a7:b8:97:96:4a:e0:1a:4e:c8:9a:d7:4c:35:cd was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

ANOKA-HENNEPIN PUBLIC SCHOOL DIST.

Organization: ANOKA-HENNEPIN PUBLIC SCHOOL DIST.
Organization unit: ISD11
State / Province: Minnesota
Locality: Anoka
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:58:a7:b8:97:96:4a:e0:1a:4e:c8:9a:d7:4c:35:cd
Serial Number (int): 163955367392395358597129246173370791373
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): e2:aa:12:90:72:db:76:3d:c6:4a:f7:ca:7d:a6:83:46:a1:21:37:97
Fingerprint (sha256): 32:d1:39:46:2e:3a:9e:63:59:6d:ec:40:40:27:cc:b8:49:22:be:e4:07:78:9d:24:2c:33:98:83:25:54:68:54

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate vpn.anoka.k12.mn.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.anoka.k12.mn.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.anoka.k12.mn.us

Other certificates including the domain name anoka.k12.mn.us

(limited to 100 certificates)
*.anoka.k12.mn.us
infofinderle.anoka.k12.mn.us
*.anoka.k12.mn.us
genesis.anoka.k12.mn.us
genesis.anoka.k12.mn.us
moodle.anoka.k12.mn.us
eepr.anoka.k12.mn.us
libguides.anoka.k12.mn.us
moodle.anoka.k12.mn.us
www.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
infofinderle.anoka.k12.mn.us
viewpoint.anoka.k12.mn.us
*.anoka.k12.mn.us
genesis.anoka.k12.mn.us
genesis.anoka.k12.mn.us
eepr.anoka.k12.mn.us
genesis.anoka.k12.mn.us
remote.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
*.anoka.k12.mn.us
libguides.anoka.k12.mn.us
dprs.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
ahzis.anoka.k12.mn.us
*.anoka.k12.mn.us
*.anoka.k12.mn.us
mealapplication.anoka.k12.mn.us
libguides.anoka.k12.mn.us
destiny.anoka.k12.mn.us
eepr.anoka.k12.mn.us
vpn.anoka.k12.mn.us
jss.anoka.k12.mn.us
genesis.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
jss.anoka.k12.mn.us
eepr.anoka.k12.mn.us
dprs.anoka.k12.mn.us
libguides.anoka.k12.mn.us
www.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
libguides.anoka.k12.mn.us
moodle.anoka.k12.mn.us
dprs.anoka.k12.mn.us
destiny.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
remote.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
helpdesk.anoka.k12.mn.us
dprs.anoka.k12.mn.us
genesisportal.anoka.k12.mn.us
eepr.anoka.k12.mn.us
mealapplication.anoka.k12.mn.us
videocall.ahschools.us
genesisportal.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
tpvcse.anoka.k12.mn.us
remote.anoka.k12.mn.us
libguides.anoka.k12.mn.us
mail.anoka.k12.mn.us
remote.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
libguides.anoka.k12.mn.us
helpdesk.anoka.k12.mn.us
moodle.anoka.k12.mn.us
remote.anoka.k12.mn.us
guest.anoka.k12.mn.us
genesis.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
moodle.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
remote.anoka.k12.mn.us
dprs.anoka.k12.mn.us
remote.anoka.k12.mn.us
genesis.anoka.k12.mn.us
ahzis.anoka.k12.mn.us
ahemployment.anoka.k12.mn.us
genesis.anoka.k12.mn.us
moodle.anoka.k12.mn.us
dprs.anoka.k12.mn.us
helpdesk.anoka.k12.mn.us
odyssey.anoka.k12.mn.us
ahemployment.anoka.k12.mn.us
destiny.anoka.k12.mn.us
moodle.anoka.k12.mn.us
Destiny.anoka.k12.mn.us
remote.anoka.k12.mn.us
ahemployment.anoka.k12.mn.us
dprs.anoka.k12.mn.us
libguides.anoka.k12.mn.us
genesis.anoka.k12.mn.us
ahconnect.anoka.k12.mn.us
genesis.anoka.k12.mn.us
jss.anoka.k12.mn.us

Certificate

The complete raw certificate details for vpn.anoka.k12.mn.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstT5YwFloEsEBZGDRoZ4
ZGBfsdajUzdrPDuALdCrSKOvYb4P2ZMFwh/L3PgWerdvMAlEHRjMPXwbZU4SwiiV
qkrnOZM78Gat1uyU0fVzi0LIg76skikZM5AF/iqBGvoTYoHcTZ2DhsjLYzgu5oRw
AoWUyLYO3VRa+jc03OmzuCfNyTCPM+h7GmrpyO/qvXDzfQc03ZABhgew0WgfEP0m
9Thy49QuH/A7QH4khcQOa0TJqwNcY34tqZ7ZWN1oj+xERepFfkUJmQECZdGAat5b
CjdTXkWKvvxPz2mn7lKTQ4qd5VtJWukcO6HPc+wbUmB2xzYnMEfcpf/C5xWhpVDz
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163955367392395358597129246173370791373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Anoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ANOKA-HENNEPIN PUBLIC SCHOOL DIST.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ISD11'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'vpn.anoka.k12.mn.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22575439759887159420190896730389435794483687194173893555724293154025317086085888743128012195443271091897697228653375699779317184818779746345254628235152124109167142201333108100366890619081538335368117257343241797581022681968710557598151520821956667857589198663508500235295159373323452569711214897035933820144419125803816043174833638759485936092672001118467573761552198309996250814983586788558007919173336770761253030684473446520540934220412421312557680571662199363117026843192440649199631438653097717133604174652610391342157152560602439740914369515866722559264667773442574424900335325792823687408241662501167937155877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.anoka.k12.mn.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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