pwreset.killeenisd.org

- Killeen Independent School District -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number c4:57:51:12:81:9b:dc:06:00:00:00:00:50:e7:56:90 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Killeen Independent School District

Organization: Killeen Independent School District
State / Province: Texas
Locality: Harker Heights
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c4:57:51:12:81:9b:dc:06:00:00:00:00:50:e7:56:90
Serial Number (int): 260982061341932850935191230559872833168
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a1:66:a8:e0:a0:47:a0:54:8e:57:9c:1e:ba:82:6a:65:4b:05:59:4a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7d:72:fb:e9:ea:b6:f6:d1:75:ad:a3:4b:e2:76:d5:27:98:06:52:56
Fingerprint (sha256): 45:23:73:d9:1d:a8:fd:25:b2:82:e3:ec:de:39:3a:c6:ce:fc:06:ef:a2:33:8b:53:65:2a:2e:d2:3b:69:60:23

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate pwreset.killeenisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pwreset.killeenisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pwreset.killeenisd.org

Other certificates including the domain name killeenisd.org

(limited to 100 certificates)
webvpn.killeenisd.org
espsms.killeenisd.org
techhelpdesk.killeenisd.org
mobile.killeenisd.org
www.killeenisd.org
jac.killeenisd.org
webvpn.killeenisd.org
lync.killeenisd.org
reporting.killeenisd.org
mealapps.killeenisd.org
help.killeenisd.org
*.killeenisd.org
esphac-test.killeenisd.org
webvpn.killeenisd.org
transfinder.killeenisd.org
owa.killeenisd.org
techhelpdesk.killeenisd.org
www.killeenisd.org
espsms.killeenisd.org
idbadges.killeenisd.org
old.killeenisd.org
jac.killeenisd.org
*.killeenisd.org
mail.killeenisd.org
espsms.killeenisd.org
esphac.killeenisd.org
www.killeenisd.org
facerec.killeenisd.org
*.killeenisd.org
webvpn.killeenisd.org
www.killeenisd.org
kisdjss.killeenisd.org
eduphoria.killeenisd.org
espsms.killeenisd.org
www.killeenisd.org
eforce.killeenisd.org
sso.killeenisd.org
schools.killeenisd.org
pwreset.killeenisd.org
schools.killeenisd.org
ibossreporter.killeenisd.org
www.killeenisd.org
ibossreporter.killeenisd.org
exceed.killeenisd.org
ftpfiles.killeenisd.org
lync.killeenisd.org
jac.killeenisd.org
old.killeenisd.org
sso.killeenisd.org
mealapps.killeenisd.org
www.killeenisd.org
mealapps.killeenisd.org
*.killeenisd.org
reporting.killeenisd.org
webvpn.killeenisd.org
prime.killeenisd.org
old.killeenisd.org
timeclock.killeenisd.org
kisdjss.killeenisd.org
www.killeenisd.org
pwreset.killeenisd.org
library.killeenisd.org
webstage.killeenisd.org
esphac.killeenisd.org
share.killeenisd.org
help.killeenisd.org
eduphoria.killeenisd.org
sso.killeenisd.org
owa.killeenisd.org
lync.killeenisd.org
*.killeenisd.org
pwresetstaff.killeenisd.org
espsms.killeenisd.org
help.killeenisd.org
testreporting.killeenisd.org
www.killeenisd.org
reporting.killeenisd.org
help.killeenisd.org
payments.killeenisd.org
help.killeenisd.org
*.killeenisd.org
library.killeenisd.org
*.killeenisd.org
old.killeenisd.org
schools.killeenisd.org
kisdjss.killeenisd.org
eweb.killeenisd.org
owa.killeenisd.org
sso.killeenisd.org
www.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
prime.killeenisd.org
owa.killeenisd.org
webstage.killeenisd.org
*.killeenisd.org
eduphoria.killeenisd.org
office.killeenisd.org
webvpn.killeenisd.org
espapp1-test.killeenisd.org

Certificate

The complete raw certificate details for pwreset.killeenisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+FMsV9kHqubcgFXhIh
KbQzvqRqbhs+n0ZABvVDZVF+68KYuaxPVCtl/lvJXir8WPfbn7enZ5OrAkL/+bAc
HbUb9bPtGJyQPi4dkRcEAH6lmB6bw846gPMXSt2CsSv45ecpXPuURF6iO3EtrbAg
IEwuEs+vxsJPO1AiwCxR1ANWhaaU/HXtP16DZPXZ6iuO2vBwBu5N4ZIh5f323BNy
I+RA+yq4jaT09woCjhyoPDQoxyqAREx45A/nXpujMOugqyMskvIRUtT6BmQx5UNx
6uXSiCh7iMohqU2lWqRNN6biLN2AgIchmBD0sSmMIROWzl5b//93bHLe+mQKfA0C
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 260982061341932850935191230559872833168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 15:27:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 15:57:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harker Heights'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Killeen Independent School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pwreset.killeenisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17720465513663563071700073920493611566951775975006769581739453414258608346345625516945780186280813252041705721081084986772944138963109971004716076820433253565917817562693843037274886809968983036183098693970454420470143239023228617687700123248282946727763503448803968929324239494986309192721849403585670015517542183186767695085363655792305347734253945870646532550236682147769936119561330773238477765482357842495028701665057164119967055261371552965425762682598555299857453319659256331695370698899902565175500927841627338680875292527541696838866096511421399378435596306270306194088430400221354736761781197698380096930453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwreset.killeenisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a166a8e0a047a0548e579c1eba826a654b05594a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ebfacf0ac12e8b7ba7e7487d737b8673f77aea981b47c191fe9e40ad380ae79f1287e374d6b52ba0f1f09256c84eb7cd345d0356634b811ef3ba4cf48f6235196cf50d9bd6f32e3c19e5d2899ebd921936994555fc3712cec5db2fe1a7499718a0fd4193f3aba652cdb2b08ba3736932c0d0ef3b366c37d17ea3f3bc7cc56a26334b0c4e6dae26e874fbb0bdb9f60a3c0b3ea9ad082a6b302b6b983cdca4d6d43730b9694f212902fef015d70d0695aca5a1fc20ff6fbc7fd38422dba700a58aca6037665d7e1983ae365dd4f62191f5760de17085e7fae4c12b781fe3552b8d80b279fd1556b6cc42120fef74908ff70fb9f00e16b3df08aa970b20c26153d