*.nkasd.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:03:95:90:51:08:2e:db:3c:a5:1c:52:7f:37:d8:4d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nkasd.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:03:95:90:51:08:2e:db:3c:a5:1c:52:7f:37:d8:4d
Serial Number (int): 2677066395109960856801949120575559757
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1a:94:b2:bf:cd:5b:e6:22:0a:f8:fd:34:ad:79:e1:8e:f4:a1:ed:c8
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 69:34:26:11:08:8f:26:c3:08:7c:4c:ad:ed:60:be:26:81:45:f6:df
Fingerprint (sha256): 3d:5e:9e:fa:3f:84:f0:6a:c7:8c:37:92:29:8e:27:ce:88:b0:6e:a0:cd:29:1d:39:99:c9:5c:06:79:7b:b5:cf

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate *.nkasd.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nkasd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nkasd.com
nkasd.com

Other certificates including the domain name nkasd.com

(limited to 100 certificates)
admin.badenpowell.edu.mx
mil.ldcsb.ca
skyward.nkasd.com
radon.nkasd.com
ble.lancasterisd.org
www.stgregsschool.org
occomets.org
skyward.nkasd.com
admin.bmj.scott.k12.ms.us
cloud.nkasd.com
view-vcenter.nkasd.com
view-vcenter.nkasd.com
gwc.lancasterisd.org
*.nkasd.com
ckcs.lskysd.ca
admin.badenpowell.edu.mx
helpdesk.nkasd.com
www.stetsoncharter.org
admin.bmj.scott.k12.ms.us
castaichighschool.net
admin.athletics.ambassadorhigh.org
radon.nkasd.com
gateway.nkasd.com
nkasd.com
cloud.nkasd.com
skyward.nkasd.com
admin.kcgpa.org
admin.amacarson.org
nkasd.com
helpdesk.nkasd.com
helpdesk.nkasd.com
admin.stjohn.k12.la.us
admin.badenpowell.edu.mx
fallbrookhs.org
skyward.nkasd.com
nkasd.com
*.nkasd.com
*.nkasd.com
ngc.lancasterisd.org
www.kcgpa.org
helpdesk.nkasd.com
hemetusd.org
helpdesk.nkasd.com
helpdesk.nkasd.com
admin.badenpowell.edu.mx
www.badenpowell.edu.mx
nkasd.com
compass.nkasd.com
nkasd.com
admin.nkasd.com
cloud.nkasd.com
admin.badenpowell.edu.mx
www.walshcps.org
admin.kcgpa.org
echobay.adsb.on.ca
cloud.nkasd.com
nkasd.com
nkasd.com
www.riversiderebels.net
www.occomets.org
olfcatholic.org
skyward.nkasd.com
admin.amacarson.org
helpdesk.nkasd.com
walshcps.org
admin.cdc.stjohn.k12.la.us
sslvpn.nkasd.com
helpdesk.nkasd.com
admin.uhs.cvsd.org

Certificate

The complete raw certificate details for *.nkasd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJZ0CausOhn0WpxkFzf0
4HSEgHbQGAqkaYCu6OMVKgT9JAJsECz3PlPFq+9M5n7HfOtbpizVNVzhXgYSRJUA
KA60XvjXxWZR8wrq1gQ/gzYuDAEgQn8IAwmzan7cvELH2yOlSWDHkqRm3v0Z0z0a
6zBWOyU7saep/SHmKgUeYCrvJlUFn1zF+ZbOamQXyka7Flr29xurLNEsEu+49xEF
QqY5UXQYKIUOBkYVZcagBi8R0elRlKrqsEFiEftjRYinp/C2ytOmoCQBLinTmtpn
fAgrAH51hEkStEZ+X9qJ//hSpPR8kRdfD1pqfPI9dob2MIBrE+jSdI/+LnjkM8Bx
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2677066395109960856801949120575559757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nkasd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24311945827330022025492774745487205042503591983034890395499365269377537381009720009065194146324291264525190841662931479111456574528841810772960985213421090805333601842886060776331104625293462709275797182282420743187671057291048479791510214325403991590286980410769605887800684837475323430611187206710208359436892816120740930706650891890828720839582238660822455043227050702729358405964860477852659364354449815086546386259094446201262935905803806025089030358585589821105705320850002781542456658543394444233749510264235838691917891549334117456334939856556010504399217924608348640026890549076052191945068505075482540142941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a94b2bfcd5be6220af8fd34ad79e18ef4a1edc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nkasd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkasd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00251fc9e8cc2f616312d151b52c56961864113b5c13ebab8d058027d5c1908d3664bfe75ce14d40c9f16f7e4e6451be35ad170ed018a17480d4a50d448d3a235562b21bb50ea816b3372d19047c8c964daba3756c674b41498b9b2a04e6e4374fb651f2ba31bfbd414e4da8eccdc23a723132a87062270ba34fdfcf6fb9bafa372d74ce0d52d301bf8a64c1d6fa23fdde2ba91b4f9c0c7371f0b0d407d75130e54cb2dcb8b0971fe88e98833de776a03321c726c47944a841dc8f3e46274cd321859768eaa18845e56a86ac0a90b1fa271aab73001a282ea10575b4355a0047a8b5f3a411972bf67eec4330f9307632a8785000f8d8f2e0e8a675b6f34d17e781