forms.cvcs.org

- Capistrano Valley Christian Schools -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 44:87:e2:66:5a:e1:d5:e6:4b:e5:04:70:11:b4:32:05 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Capistrano Valley Christian Schools

Organization: Capistrano Valley Christian Schools
Organization unit: Hosting
State / Province: California
Locality: San Juan Capistrano
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:87:e2:66:5a:e1:d5:e6:4b:e5:04:70:11:b4:32:05
Serial Number (int): 91093055723246152125403861862839497221
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): cd:3f:0a:19:80:72:0b:4e:31:4d:92:d7:3f:09:34:21:9c:05:dc:ba
Fingerprint (sha256): 4b:7d:49:a3:ce:2a:3f:d6:0a:aa:88:41:b5:97:ac:cb:8c:71:65:a2:b6:be:86:09:5f:85:3b:36:64:21:f5:62

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate forms.cvcs.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forms.cvcs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forms.cvcs.org

Other certificates including the domain name cvcs.org

(limited to 100 certificates)
academy.ndasla.org
res.rsu14.org
academy.ndasla.org
forms.cvcs.org
academy.ndasla.org
eastprimary.kiskiarea.org
cvcs.org
cvcs.org
admin.e3civichigh.com
www.cvcs.org
cvcs.org
admin.e3civichigh.com
forms.cvcs.org
mms.madisonmohawks.org
admin.e3civichigh.com
cvcs.org
admin.e3civichigh.com
hanak12school.org
www.lasallesancristobal.edu.mx
forms.cvcs.org
admin.e3civichigh.com
academy.ndasla.org
admin.dmc.lockhartisd.org
kohalahs.org
sgmission.org
apps.cvcs.org
admin.mms.madisonmohawks.org
academy.ndasla.org
forms.cvcs.org
admin.dmc.lockhartisd.org
academy.ndasla.org
admin.e3civichigh.com
ais.academyisd.net
es.unitedsd.net
admin.mas.mpusd.net
komarek94.org
www.ps28q.org
admin.e3civichigh.com
admin.elementary.ndasla.org
admin.e3civichigh.com
admin.hs.unitedsd.net
apps.cvcs.org
highschool.kiskiarea.org
forms.cvcs.org

Certificate

The complete raw certificate details for forms.cvcs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPHUEw/RjzyBeys+7sUl
w6bgCpHWFfGSdJ2jvz/n5bK5bknCTWBqwfSw11Cu8gCV5nbJEcJkXmt5Iq42XHi4
J5WGBJf5OCkXsMp4erYhqVAon1Bx1aXan+VL3soa7il77rYasNKVXV9HA60sG6+o
oH4IThtHyV0TLjev9fZ+ccE5SGohv0U+OZhCult41JWrWjpiFIhWYlorzdcJVj0U
mKNS/RqdG5Iy08zwZA9VtoXleFGAPVsivJhpohiqc5IxMfCPH7ykTLzCYNrTlpXu
F0zOljwr2Q+tx/tLMsiWkc5FqE5fS2Wm3LKbKDn3s0wA4c+2iXxzI1GCow3S4Zz8
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91093055723246152125403861862839497221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Juan Capistrano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Capistrano Valley Christian Schools'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'forms.cvcs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24357004589853470567788677247292208759817246515516379814354449873187819549415805977330246953515017775731220355613093682210182242697533397714172414960474388240862817119604074504545829124618444092558588798790740879677722056850459639617320965085815079653680398022534506078321782930171603630235436744411112890178620761800491810091051560699951377891845855155766693457238206878944271119968795137913733332893961210631014714703784373908492940567932395058574040778821444672628158762761933620174252841541342688084741549574820428678047245158289074461223807767868257864386051748428469364187696298586646253657403351791828985511113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.cvcs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015919b9788e000004030046304402202616340563293f755ee4760587745332b54b957c317937c0f5201dacb0e73a0702201cc0e35b8e62c916b83d303e68fdcaefa04fd3f6b20c84483e24891d4ba2dce6007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015919b978d70000040300473045022069d20a7b2e0d9a056daf5f3f453f7d19aee50eb4aba9196f158cd56d9dbafb73022100e7c2758423e58c035cffbf860992f3caafa17d771faa96a3e8fe72ed6fa0db9f007500bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015919b979850000040300463044022053d703c32481b501ff1d29756f7fdd2a4f556bea9685df11f168d54790f430c3022039f0cd5e50b46e236aba9ac7954e97c9475d4ae44860fc9a45116a85f1df74ae007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015919b978a50000040300473045022100bfdb1effed64aa7d8048ad4e01a2d16bc7f2b46489878f779e7af3fffe6d14be02206eeede64e316f02a40d9f860f39408f72b468487544572a2ad022b79c3790f5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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