skyward.bisdtx.org

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:55:9d:31:12:08:5b:38:8f:20:cb:ed:90:56:c6:9d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skyward.bisdtx.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:55:9d:31:12:08:5b:38:8f:20:cb:ed:90:56:c6:9d
Serial Number (int): 20382953395817767315213504798055122589
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:47:e4:f2:ef:c3:f4:1e:94:39:bf:35:9a:65:32:83:94:d9:2a:9f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 3e:c8:bb:55:5d:2b:d5:bb:c7:3c:d9:3e:e1:22:5c:dd:3c:e2:c5:2d
Fingerprint (sha256): 61:24:ab:e1:36:59:72:57:77:9c:06:87:2c:63:8a:84:d8:ee:10:2b:16:d0:45:78:d6:41:b9:19:98:43:bd:7f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate skyward.bisdtx.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skyward.bisdtx.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skyward.bisdtx.org

Other certificates including the domain name bisdtx.org

(limited to 100 certificates)
fsus-24a.freshservice.com
helpdesk.appareluae.com
admin.adulted.kcusd.com
helpdesk.appareluae.com
*.bisdtx.org
admin.adulted.kcusd.com
helpdesk.appareluae.com
skyward.bisdtx.org
*.bisdtx.org
skyward.bisdtx.org
admin.7gc.owassops.org
helpdesk.appareluae.com
admin.bhs.bcsdk12.org
fsus-24a.freshservice.com
helpdesk.appareluae.com
admin.agu.ealas.org
admin.bes.bisdtx.org
www.bisdtx.org
admin.burtontechnology.org
helpdesk.appareluae.com
fsus-24a.freshservice.com
a3-bisd.bisdtx.org
acrma8.org
fsus-24a.freshservice.com
helpdesk.appareluae.com
fsus-24a.freshservice.com
helpdesk.appareluae.com
helpdesk.appareluae.com
www.portrichmondhs.org
admin.burtontechnology.org
admin.alccobras.net
helpdesk.appareluae.com
fsus-24a.freshservice.com
admin.adulted.kcusd.com
skyfin.bisdtx.org
admin.adulted.kcusd.com
www.stlouis-batesville.org
helpdesk.appareluae.com
admin.ccti.pgsd.ms
helpdesk.appareluae.com
www.gvipreschools.org
helpdesk.appareluae.com
fsus-24a.freshservice.com
admin.chms.mx
admin.adulted.kcusd.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fsus-24a.freshservice.com
admin.cce.bisdtx.org
www.bisdtx.org
printshop.bisdtx.org
skyward.bisdtx.org
fsus-24a.freshservice.com
helpdesk.appareluae.com
*.bisdtx.org
bisd-a3.bisdtx.org
skyward.bisdtx.org
elementary.grovetonisd.net
helpdesk.appareluae.com
www.bisdtx.org
helpdesk.appareluae.com
admin.ccti.pgsd.ms
fsus-24a.freshservice.com
acrma8.org
helpdesk.appareluae.com
fsus-24a.freshservice.com
helpdesk.appareluae.com
fsus-24a.freshservice.com
helpdesk.appareluae.com
admin.cci.bisdtx.org
acrma8.org
printshop.bisdtx.org
ccti.pgsd.ms
*.bisdtx.org
helpdesk.appareluae.com
skyward.bisdtx.org
helpdesk.appareluae.com
fsus-24a.freshservice.com
skyward.bisdtx.org
aceroschools.org
fsus-24a.freshservice.com
acrma8.org
skyfin.bisdtx.org
skyfin.bisdtx.org
helpdesk.appareluae.com
www.bisdtx.org
helpdesk.appareluae.com
printshop.bisdtx.org
skyward.bisdtx.org
helpdesk.appareluae.com
fsus-24a.freshservice.com
fsus-24a.freshservice.com
helpdesk.appareluae.com
svhs.wvsd.com
fsus-24a.freshservice.com
lasgs.net
fsus-24a.freshservice.com
admin.agu.ealas.org
it.canoncityschools.org
skyfin.bisdtx.org

Certificate

The complete raw certificate details for skyward.bisdtx.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq0cODnZ2tIp57xJmA1i
v61Epvkxz0wVUFzL0XeC5OMRxuNucx1UWRHij5Q0N+T9TQvBIsAuddB+vvpXNdGH
otvweA7tP6dOwau+vRq97qNqlM2sfMQJvFsaHA8AywDSaQtvSteWNVxF5iGdwp+e
7dQnRtDTF2FIGNaDH6ZnWuud8u2ZiQnglHLihiI+XdJ0/4iP6zCFIsQOpvGfRHR8
V8XiZuKICnX65wfU4DPZxKpbNhzJ4NJBtkOCbzQd9USdvI+hAbvKb/e/hReE6MOe
kL1XQay5XSaXusuyiCzLUCDJ06+yV3QB8dJilNG4leBiZ4EXdELuXy0Q4G82WFAb
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20382953395817767315213504798055122589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skyward.bisdtx.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22555782121375124496968391402066010114612860539582871873135121838721851271331801815991985503596140474437658793679064980906380146268844220874794620853688459220939762644284848022959872443753676108552026548489452177986153085191945056162916333338062317075271515909912553469424011119188866511105310405657433013873671827767143121535101885362929622473766392395129775034278336958611937753488498077369996914234174029494316380187654235867036190995068341638355169500675206342614415846149389879761217490572986282343416232015486656976830768671181968298196372567870884192681091901952614464625595395929334740249980134153027268385629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3347e4f2efc3f41e9439bf359a65328394d92a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyward.bisdtx.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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