riverside.kana.k12.wv.us

- Cloudflare, Inc. -

Issued by Cloudflare Inc RSA CA-2

About this certificate

This digital certificate with serial number 0e:01:a0:08:af:11:7e:f3:9e:15:7c:a6:7d:50:54:1a was issued on by Cloudflare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cloudflare, Inc.

Organization: Cloudflare, Inc.
State / Province: California
Locality: San Francisco
Country: US

Cloudflare, Inc.

Organization: Cloudflare, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:01:a0:08:af:11:7e:f3:9e:15:7c:a6:7d:50:54:1a
Serial Number (int): 18617630111390269399459996745348437018
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 19:fb:2d:7e:3d:09:06:3c:32:a9:b0:1f:c4:b5:0c:90:85:2f:c7:66
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a

Fingerprint (sha1): 56:13:fc:28:ac:71:6a:75:5e:b0:01:88:ea:b5:01:49:57:be:4b:69
Fingerprint (sha256): 33:ae:62:76:b0:1e:20:2c:f0:37:92:80:3f:c7:f5:9c:db:3d:bb:df:9d:af:ff:26:0e:8d:d6:50:ff:c2:dc:47

Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl

Check the revocation status for certificate riverside.kana.k12.wv.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for riverside.kana.k12.wv.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

riverside.kana.k12.wv.us

Other certificates including the domain name k12.wv.us

(limited to 100 certificates)
sso.k12.wv.us
roster.k12.wv.us
procket.rale.k12.wv.us
*.kana.k12.wv.us
admin.ninth.frenship.net
hayes.kana.k12.wv.us
boe.webs.k12.wv.us
boe.hancock.k12.wv.us
boe.hancock.k12.wv.us
boe.jack.k12.wv.us
sems.rale.k12.wv.us
eschool.mine.k12.wv.us
home.mono.k12.wv.us
wvlearns.k12.wv.us
gcw.kana.k12.wv.us
cpes.rale.k12.wv.us
res.mono.k12.wv.us
admin.ahs.ardmoreschools.org
procket.rale.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
kcs.kana.k12.wv.us
boe.hancock.k12.wv.us
wvlearns.k12.wv.us
admin.ahs.ardmoreschools.org
kcs.kana.k12.wv.us
intranet.kana.k12.wv.us
plad.k12.wv.us
boe.rale.k12.wv.us
etsts.wood.k12.wv.us
rocket.rale.k12.wv.us
*.jeff.k12.wv.us
sub.lewi.k12.wv.us
boe.hamp.k12.wv.us
boe.hamp.k12.wv.us
iforgot.kana.k12.wv.us
cia.cabell.k12.wv.us
sso.kana.k12.wv.us
home.mono.k12.wv.us
airwatch.roan.k12.wv.us
*.jeff.k12.wv.us
schoolforthedeaf.wvsdb2.state.k12.wv.us
boe.hancock.k12.wv.us
www.brooke.k12.wv.us
sid.resa7.k12.wv.us
procket.rale.k12.wv.us
*.k12.wv.us
reporter.kana.k12.wv.us
makakiloelementary.k12.hi.us
boe.jack.k12.wv.us
boe.ohio.k12.wv.us
owa.harr.k12.wv.us
boe.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
destiny.putn.k12.wv.us
*.jeff.k12.wv.us
www.wayneschoolswv.org
kcs.kana.k12.wv.us
rocket.rale.k12.wv.us
rocket.rale.k12.wv.us
sub.lewi.k12.wv.us
kcs.kana.k12.wv.us
www.bpbraves.net
iforgot.kana.k12.wv.us
*.sis.k12.wv.us
wvsdb.state.k12.wv.us
home.mono.k12.wv.us
mes.logan.k12.wv.us
owa.harr.k12.wv.us
eschool.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
warwood.ohio.k12.wv.us
boe.mono.k12.wv.us
enrollment.kana.k12.wv.us
wvsdb.state.k12.wv.us
alban.kana.k12.wv.us
wvlearns.k12.wv.us
cb.mono.k12.wv.us
bes.mono.k12.wv.us
boe.hamp.k12.wv.us
virtualschool.k12.wv.us
bethlehem.ohio.k12.wv.us
*.sis.k12.wv.us
boe.wayn.k12.wv.us
procket.rale.k12.wv.us
mms.mono.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
mitel.rale.k12.wv.us
boe.putn.k12.wv.us
jacksonmdm.jack.k12.wv.us
plad.k12.wv.us
south-nac.mcs.mono.k12.wv.us
el.westwoodisd.net
sems.kana.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
riverside.kana.k12.wv.us
vpn.harr.k12.wv.us
kcs.kana.k12.wv.us
boe.mcdo.k12.wv.us
wvdegps.k12.wv.us
destiny.harr.k12.wv.us

Certificate

The complete raw certificate details for riverside.kana.k12.wv.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyo0xSOC2z3LvCJlTovR
/OyaO1v9aWfzChN+roAYR0oWepASU7JKr/8WXQYZq+GWvDHMxpIbVDPbo9IKWC85
kuqcXSlsOr1CG8h6P1o1bwf+KaDozW43niZmB13HHiw+yUSPrsKEaeRG4Qiau1UX
J2YODs/NFjl++xhWVsOcz8k9HuLFu5Q/d/FOJGlX7j9uAUoOv1+qMThmL6dZ2MsS
C0lgVANazwASPmlUyYJQ3PkMfHLuKkzOKQrk0UlInZqBc35f4SSAN3QUAI+pkpeH
NdArcoMMoQ3SNnXMZYDkQx8x2k4edOWt9F2fehD7kRII6EeSqXiJwNKCwm9e4vM4
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18617630111390269399459996745348437018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'riverside.kana.k12.wv.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25142235308173294290618277849524158110141006953046596954723955269060193193525910059673403795212352168093619952800202106905933889159747936513596399745352318406692590180907329553522328716290035132337021217586572377618124364931403043280429440685539945644666796066029517701544876306372318266035382968502122317194940533869257003197255899259393100737776459998130153988601459782542772538142660895105819908727540464492371554370681093888665844520738020883459639670731793578280689925730416580949216723561014693235504874512693537297701091257322404861588377684941452426869560296408862095185567372009601724369811052838446339143867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19fb2d7e3d09063c32a9b01fc4b50c90852fc766
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverside.kana.k12.wv.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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