smclassroom.alexandercsd.org

- Wayne-Finger Lakes BOCES -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:92:f2 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wayne-Finger Lakes BOCES

Company registration number: Nr3AAAmFiHI-3rbItU7cIBcpYfDEm4pb
Organization: Wayne-Finger Lakes BOCES
Organization unit: W-FL BOCES (EDUTECH)
State / Province: New York
Locality: Newark
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:92:f2
Serial Number (int): 103154
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 27:7a:38:0e:5d:86:a9:22:30:63:90:ea:6e:88:5f:dd:f0:df:e1:c7
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 6f:ea:34:0e:75:1a:28:de:e8:e7:fe:9d:5c:02:0c:4a:01:f4:62:d1
Fingerprint (sha256): 5a:b0:45:d4:4d:13:30:72:85:5a:dc:86:62:e8:86:47:66:0e:0a:e0:3e:ee:98:77:c2:35:ad:09:1a:03:9c:ba

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate smclassroom.alexandercsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smclassroom.alexandercsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smclassroom.alexandercsd.org

Other certificates including the domain name alexandercsd.org

(limited to 100 certificates)
alexandercsd.org
alexandercsd.org
sv.gvusd.k12.ca.us
acatitlan.edu.mx
acatitlan.edu.mx
admin.adulted.erusd.org
bps.berrienschools.org
admin.jww.jubileeacademies.org
acatitlan.edu.mx
alexandercsd.org
admin.berrienschools.org
aak.potsdam.k12.ny.us
excel.dcs.edu
centerpreschool.centerusd.org
fcctc.franklincountyschoolsms.com
landrum.sbcisd.net
smclassroom.alexandercsd.org
acatitlan.edu.mx
acatitlan.edu.mx
aak.potsdam.k12.ny.us
dudley.centerusd.org
admin.bes.berrienschools.org
alexandercsd.org
admin.middlehigh.alexandercsd.org
aak.potsdam.k12.ny.us
alexandercsd.org
clinksso.alexandercsd.org
admin.centerpreschool.centerusd.org
instructionaltech.sbcisd.net
smclassroom.alexandercsd.org
aak.potsdam.k12.ny.us
alexandercsd.org
ochoaprep.erusd.org
alexandercsd.org
acatitlan.edu.mx
aak.potsdam.k12.ny.us
acatitlan.edu.mx
aak.potsdam.k12.ny.us
mta-sts.alexandercsd.org
aak.potsdam.k12.ny.us
admin.elementary.alexandercsd.org
alexandercsd.org
aak.potsdam.k12.ny.us
admin.erusd.org
alexandercsd.org
acatitlan.edu.mx
aak.potsdam.k12.ny.us
acatitlan.edu.mx
aak.potsdam.k12.ny.us
www.centerusd.org
erhs.erusd.org
aak.potsdam.k12.ny.us
tiegerman.org
aak.potsdam.k12.ny.us
middlehigh.alexandercsd.org
aak.potsdam.k12.ny.us

Certificate

The complete raw certificate details for smclassroom.alexandercsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2RWfE2AqFh86eRi4wG6
lMK6msy9ms9yW+jolDoiYguT8vxTULALc4pXC0EKRktgIn/ShyWHowFqCFDmYnDy
bMg/11VyDkl305UpCMT3QpQYoMA23b8Q/h35YEX3FxVM7apG9e0HBVqaCZLmsd5U
gty5oh9ns/4XB57JfCSoUI3m4MF5Sf3IXUavhL1ZxMHFNOol+7JJcq5/5DdPIpEG
Xb5wvRiS3d30J8/DmZ+3sd5FYgqUBGUwdLWbbIvkCwqSA0KhWfRlUTIeDKttPI3A
VwCerQ+Lv7xalsKgmPqkxjzlhJ2koai3SoFGFDpGK9NP7EaRowE5fPlrflg2tNsF
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-28 21:08:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-01 01:15:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nr3AAAmFiHI-3rbItU7cIBcpYfDEm4pb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayne-Finger Lakes BOCES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'W-FL BOCES (EDUTECH)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smclassroom.alexandercsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22141181799195237869527955518403121595930882666235538311524665486375161306067901695660247917083262158050828394024769439807431556577290482398055003873602632278918209822756661214744634704005996726764990649793089351215295941754162045773724436533062613561681146361226412421506760264591405681559405131905779619967252712536200373018742364508519569305578527066487952249753639481750855649428440981736117663178591670403751964290181630722439665696093368180035251310884277912532740876403345525276344982233705636419051444565254990607733157062463966225206445284910269587989730990754705896348053914140494392000658727950284299633963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smclassroom.alexandercsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							277a380e5d86a922306390ea6e885fddf0dfe1c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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