www1.swrdc.wa-k12.net

- Washington School Information Processing Cooperative -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 07:8a:f5:b6:22:58:7a:49:c7:a8:93:6a:c2:13:23:3a was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Washington School Information Processing Cooperative

Organization: Washington School Information Processing Cooperative
Organization unit: Systems and Network Management
State / Province: Washington
Locality: Everett
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:8a:f5:b6:22:58:7a:49:c7:a8:93:6a:c2:13:23:3a
Serial Number (int): 10026116557480142874189125294855758650
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 5c:ae:a7:c1:4a:24:ec:43:d1:fe:c7:cd:3a:54:87:fd:40:dc:c0:8e
Fingerprint (sha256): 63:40:81:b1:22:cc:50:17:e5:28:04:f2:f7:43:72:14:c7:77:c1:ba:4c:09:6b:b7:80:3d:1d:47:7b:7e:8f:8c

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate www1.swrdc.wa-k12.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www1.swrdc.wa-k12.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www1.swrdc.wa-k12.net

Other certificates including the domain name wa-k12.net

(limited to 100 certificates)
preview.ieponline.wa-k12.net
esd189-web.wsipc-remote.wa-k12.net
www2.bethel.wa-k12.net
www1.ncrdc.wa-k12.net
www1.kent.wa-k12.net
esd105-web.wsipc-remote.wa-k12.net
www2.wrdc.wa-k12.net
www2.prodcopy.tsd.wa-k12.net
www2.previous.tsd.wa-k12.net
www03.nwrdc.wa-k12.net
www2.auburn.wa-k12.net
www2.final.tsd.wa-k12.net
www03.crdc.wa-k12.net
www02.nerdc.wa-k12.net
www02.wrdc.wa-k12.net
www2.cloverpark.wa-k12.net
www2.crdc.wa-k12.net
www2.kent.wa-k12.net
www1.wsipc.wa-k12.net
www2.bethel.wa-k12.net
esd105-web.wsipc-remote.wa-k12.net
www01.nwrdc.wa-k12.net
www1.evergreen.wa-k12.net
www2.lakewashington.wa-k12.net
www2.cloverpark.wa-k12.net
www2.kent.wa-k12.net
www2.saas.wa-k12.net
www2.swrdc.wa-k12.net
www2.crdc.wa-k12.net
www2.evergreen.wa-k12.net
www2.franklinpierce.wa-k12.net
tools.xeponline.wa-k12.net
www01.nerdc.wa-k12.net
www1.bethel.wa-k12.net
www2.nwrdc.wa-k12.net
rdweb.cloverpark.wa-k12.net
www2.bethel.wa-k12.net
www2.cloverpark.wa-k12.net
rdweb.franklinpierce.wa-k12.net
tools.xeponline.wa-k12.net
www1.nerdc.wa-k12.net
rdweb.evergreen.wa-k12.net
www03.crdc.wa-k12.net
www2.scrdc.wa-k12.net
easytrac.wa-k12.net
www05.nerdc.wa-k12.net
xeponline.wa-k12.net
www02.wrdc.wa-k12.net
www2.saas.wa-k12.net
www2.evergreen.wa-k12.net
www.qdev.wa-k12.net
www2.kent.wa-k12.net
www1.swrdc.wa-k12.net
www2.tlapreview.wa-k12.net
www2.edmonds.wa-k12.net
www2.wsipc.wa-k12.net
www.ieponline.wa-k12.net
www1.ncrdc.wa-k12.net
www2.longview.wa-k12.net
www6.ieponline.wa-k12.net
www1.nerdc.wa-k12.net
easytrac.wa-k12.net
www03.nwrdc.wa-k12.net
api.franklinpierce.wa-k12.net
www05.nerdc.wa-k12.net
rdweb.bethel.wa-k12.net
www03.nwrdc.wa-k12.net
www1.wsipc.wa-k12.net
www2.crdc.wa-k12.net
www1.wrdc.wa-k12.net
www1.kent.wa-k12.net
www2.franklinpierce.wa-k12.net
www2.crdc.wa-k12.net
www1.tla.wa-k12.net
esd189-web.wsipc-remote.wa-k12.net
www2.mukilteo.wa-k12.net
www.ieponline.wa-k12.net
www2.saas.wa-k12.net
www01.nwrdc.wa-k12.net
www.ieponline.wa-k12.net
www2.cloverpark.wa-k12.net
www.ieponline.wa-k12.net
www7.tsd.wa-k12.net
www2.wrdc.wa-k12.net
www05.nerdc.wa-k12.net
www1.crdc.wa-k12.net
www2.ncrdc.wa-k12.net
www8.ieponline.wa-k12.net
www2.scrdc.wa-k12.net
api.wsipc.wa-k12.net
esd101-web.wsipc-remote.wa-k12.net
www03.nwrdc.wa-k12.net
*.qtla.wa-k12.net
www2.tlamasters.tsd.wa-k12.net
www1.swrdc.wa-k12.net
www2.mukilteo.wa-k12.net
www2.crdc.wa-k12.net
www.ieponline.wa-k12.net
www.ieponline.wa-k12.net
www8.ieponline.wa-k12.net

Certificate

The complete raw certificate details for www1.swrdc.wa-k12.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtP2j0+auDN4jJtMb75y
qwd70xwNzXtDlALpL+yPtud0d2DVUESJaO/xm04FFP7NB/OGQfoHdKyYgHeymmMA
yROE/8kcXg91cdxzyFUsiDgtWpv/vapdwOypPhDQH/PvNfb/VBqSHoiI3JB4+a9J
6PquYIqiVXrZYhV+ZPlSCC7QQT8Mhm/HLJbNKg8l1sK+WjlHerhxLPux69H9SDlN
JBi1S/hsRxrZOS6BQw2Wd8H0BpetaNxG3JPozhmNKEDxvfPxVEiS0gBYByjrj5vM
oqX5mz5jv0SIB4gD6H8F4K7yp7rdaLYoyjYkSKFcNPAEomt6q/PEmNLaDoCeVwHs
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10026116557480142874189125294855758650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Everett'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Washington School Information Processing Cooperative'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Systems and Network Management'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www1.swrdc.wa-k12.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24089800855741901434671543450711599472604044119444469233273917838266945694730982851526135126856788716391560130272635776716588941116347702248424997020249515954166495827319245626511950943735733159240369576143544870301864592756340874603781393772239139706498556539470374886242357060389735331375465759081507416913013438302603609514244735414883557152718518147961771943605884255521948792011615738912114187898671733918825757754343172307161228683600333271579071249736769109820457084435654033540916799131654355482902121923481212198831020303011363368873824577552454308906619171559680400292664205676330709748284833048786695744597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.swrdc.wa-k12.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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