schools.wiaawi.org
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 0c:54:6c:fd:84:97:e5:6b:d0:8f:62:b2:b3:bc:7b:dc was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=schools.wiaawi.org
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:54:6c:fd:84:97:e5:6b:d0:8f:62:b2:b3:bc:7b:dcSerial Number (int): 16389099471533878990859333998722448348
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 37:48:7d:b6:3c:2b:34:e5:6a:a7:11:24:eb:cd:de:06:98:ad:a7:13
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 14:24:c9:b5:8c:c3:da:c7:b5:08:1c:13:0f:fe:d9:9e:98:46:94:55
Fingerprint (sha256): 4e:3c:a3:06:22:d7:e5:20:2d:78:50:66:5d:f1:94:ff:83:a5:4a:a7:48:98:53:5c:a6:3b:f0:f5:33:01:a9:aa
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate schools.wiaawi.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for schools.wiaawi.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
schools.wiaawi.org
Other certificates including the domain name wiaawi.org
(limited to 100 certificates)
mail.wiaawi.org
officials.wiaawi.org
officials.wiaawi.org
mail.wiaawi.org
officials.wiaawi.org
officials.wiaawi.org
mail.wiaawi.org
schools.wiaawi.org
vpn.wiaawi.org
vpn.wiaawi.org
boardmeetings.glenbrook225.org
www.wiaawi.org
mail.wiaawi.org
mail.wiaawi.org
www.wiaawi.org
mail.wiaawi.org
schools.wiaawi.org
officials.wiaawi.org
www.wiaawi.org
www.wiaawi.org
schools.wiaawi.org
halftime.wiaawi.org
boardmeetings.glenbrook225.org
www.wiaawi.org
www.wiaawi.org
www.wiaawi.org
boardmeetings.glenbrook225.org
schools.wiaawi.org
schools.wiaawi.org
halftime.wiaawi.org
www.wiaawi.org
mail.wiaawi.org
www.wiaawi.org
halftime.wiaawi.org
schools.wiaawi.org
halftime.wiaawi.org
mail.wiaawi.org
boardmeetings.glenbrook225.org
halftime.wiaawi.org
officials.wiaawi.org
officials.wiaawi.org
halftime.wiaawi.org
boardmeetings.glenbrook225.org
www.wiaawi.org
mail.wiaawi.org
halftime.wiaawi.org
www.wiaawi.org
officials.wiaawi.org
officials.wiaawi.org
mail.wiaawi.org
officials.wiaawi.org
officials.wiaawi.org
mail.wiaawi.org
schools.wiaawi.org
vpn.wiaawi.org
vpn.wiaawi.org
boardmeetings.glenbrook225.org
www.wiaawi.org
mail.wiaawi.org
mail.wiaawi.org
www.wiaawi.org
mail.wiaawi.org
schools.wiaawi.org
officials.wiaawi.org
www.wiaawi.org
www.wiaawi.org
schools.wiaawi.org
halftime.wiaawi.org
boardmeetings.glenbrook225.org
www.wiaawi.org
www.wiaawi.org
www.wiaawi.org
boardmeetings.glenbrook225.org
schools.wiaawi.org
schools.wiaawi.org
halftime.wiaawi.org
www.wiaawi.org
mail.wiaawi.org
www.wiaawi.org
halftime.wiaawi.org
schools.wiaawi.org
halftime.wiaawi.org
mail.wiaawi.org
boardmeetings.glenbrook225.org
halftime.wiaawi.org
officials.wiaawi.org
officials.wiaawi.org
halftime.wiaawi.org
boardmeetings.glenbrook225.org
www.wiaawi.org
mail.wiaawi.org
halftime.wiaawi.org
www.wiaawi.org
Certificate
The complete raw certificate details for schools.wiaawi.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIQDFRs/YSX5WvQj2Kys7x73DANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xODA5MjYwMDAwMDBaFw0xOTA5MjYxMjAwMDBaMB0xGzAZBgNVBAMTEnNjaG9v bHMud2lhYXdpLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPS6 u86SXA+FcUClQueuIAxVWLZOt3ibbReCTot4SwhbQsoVqbZ7TTNpUHo6j+A7t6NG qz2K1N9Ew2VVVwS6R5dYdOmwRQhJiZOAylPv7vYm3MlBXvKQim+Ru+4YNgxZni2z ZtYzkBSv6QLEr1i6vv7c0dsmTbedOEKc3y52NBYFKHS4972+0lrt5J/L4ByLRO9q MKeeavB7yK1SzwSlWHdEBeocVtlMmoM+AtUe9Ct38aKJPAxaRgsegr9DbYXCps94 uwjGPmXNZtHBNrq862CvHhbyyOp/OGHrlLayNUGhr91Hi8ZBlN10X4vcLlmk8feN /qoYCE2SAINOoIP74QcCAwEAAaOCAbcwggGzMB8GA1UdIwQYMBaAFFPKF1n8a8AD IS8aruSqqByCVtp1MB0GA1UdDgQWBBQ3SH22PCs05WqnESTrzd4GmK2nEzAdBgNV HREEFjAUghJzY2hvb2xzLndpYWF3aS5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRw Oi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFJTQUNBMjAxOC5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUF BzABhhpodHRwOi8vc3RhdHVzLnJhcGlkc3NsLmNvbTA9BggrBgEFBQcwAoYxaHR0 cDovL2NhY2VydHMucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNydDAJ BgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCeflnRzpidi2r9JWqUZKhPtr9eZwtvUkOHdrtIFzAQV50uj8eM4vtWfVaIbsVs q0ZvpSMuDv28pGg14sKn6/t6jgAfpKKa3MqA8Hqvm/QNh0G74zicO8Mx0H//lubz 3BNOZEd3e2ptYqxx0X7vc4OScTNOpRljc10ui+9CR8/S9cwCH2iXfR7/xJJRO7bB W92qMAciVVg9v3jCEH487eIKnv1fV4+0053yMQUfOHZTfXoaPfwt2NB3DH/sIkSc 1JieH3xlmuNAKOi2mKDHqU9C1hRaxgPWGBUJzvYk6H8Edvy1vB07oe5lN4kq20T4 s7TTaQ39qdD9D98JH9COjzfw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Lq7zpJcD4VxQKVC564g DFVYtk63eJttF4JOi3hLCFtCyhWptntNM2lQejqP4Du3o0arPYrU30TDZVVXBLpH l1h06bBFCEmJk4DKU+/u9ibcyUFe8pCKb5G77hg2DFmeLbNm1jOQFK/pAsSvWLq+ /tzR2yZNt504QpzfLnY0FgUodLj3vb7SWu3kn8vgHItE72owp55q8HvIrVLPBKVY d0QF6hxW2Uyagz4C1R70K3fxook8DFpGCx6Cv0NthcKmz3i7CMY+Zc1m0cE2urzr YK8eFvLI6n84YeuUtrI1QaGv3UeLxkGU3XRfi9wuWaTx943+qhgITZIAg06gg/vh BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16389099471533878990859333998722448348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schools.wiaawi.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30894228192061974535259730984258355725928603810002467803708070041328782821731761233496787519909009274152559885021270089605110296913565134263834608451099715390805577025099841676127896778615969800845882755935455545681589685916365432642973830976068201573046560029137221542652033100023993624514151284017570929288086180355928965830453617681622676250411877868426306410144758472436946695474562769346542037226249892998679387617221977079784661484140166043548844303066413924819750233258114941279435946985394445730162750133592651721296165348923708241597140415724164324910850485928370127177036915901691992404644120737667123765511 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37487db63c2b34e56aa71124ebcdde0698ada713 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.wiaawi.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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