apps.kippneworleans.org

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0e:b8:10 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=EZISQGDgFAVYeaOukGAhbX6JulAr1bz9,CN=apps.kippneworleans.org,OU=GT13724581+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b8:10
Serial Number (int): 964624
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 60:0d:80:56:8a:bd:c4:b1:51:89:67:a7:a6:b7:a4:29:17:0b:d0:27
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 64:57:08:0e:17:6a:c2:24:d2:ce:23:b9:0c:99:84:40:0b:aa:43:c1
Fingerprint (sha256): 64:6b:7d:5e:c7:91:da:6c:26:e7:50:44:ca:ea:3c:f4:c1:e8:66:fe:5b:6f:7d:7e:8c:e3:d2:a1:3d:52:00:e9

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate apps.kippneworleans.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.kippneworleans.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.kippneworleans.org

Other certificates including the domain name kippneworleans.org

(limited to 100 certificates)
www.bradleyschools.org
give.kippneworleans.org
oce.lifeschools.net
kippneworleans.org
frederickadouglass.kippneworleans.org
ace.pusd.org
powerschool.kippneworleans.org
powerschool.kippneworleans.org
kippneworleans.org
give.kippneworleans.org
admin.armstrong.pusd.org
kippneworleans.org
admin.hes.huntingtonisd.com
kippneworleans.org
admin.ace.pusd.org
give.kippneworleans.org
kippneworleans.org
spanish.pusd.org
www.hwrsd.org
www.huntingtonisd.com
kippneworleans.org
admin.allison.pusd.org
bradleyschools.org
give.kippneworleans.org
ngc.lancasterisd.org
admin.eag.zcs.k12.in.us
morelandpreschool.moreland.org
es.moodyisd.org
www.hwrsd.org
admin.morelandpreschool.moreland.org
ms.moodyisd.org
admin.his.huntingtonisd.com
ngc.lancasterisd.org
admin.cvhs.cvsd.org
plummerpanthers.org
admin.aes.cherokee.k12.nc.us
admin.bookertwashington.kippneworleans.org
admin.cfn.edu.mx
secureaccess.knos.kippneworleans.org
admin.mhs.cherokee.k12.nc.us
www.hwrsd.org
frederickadouglass.kippneworleans.org
admin.centralcityprimary.kippneworleans.org
admin.aes.cvsd.org
admin.frsd12.org
latimer.moreland.org
admin.allison.pusd.org
frederickadouglass.kippneworleans.org
hsd153.org
admin.allison.pusd.org
admin.aes.cherokee.k12.nc.us
powerschool.kippneworleans.org
admin.cvhs.cvsd.org
ace.pusd.org
give.kippneworleans.org
admin.hs.gsd.wednet.edu
lightspeed.knos.kippneworleans.org
admin.bchs.bradleyschools.org
ms.gsd.wednet.edu
bookertwashington.kippneworleans.org
admin.rems.cherokee.k12.nc.us
admin.aes.cvsd.org
huntingtonisd.com
believe.kippneworleans.org
give.kippneworleans.org
admin.eag.zcs.k12.in.us
powerschool.kippneworleans.org
ace.pusd.org
admin.ahs.cherokee.k12.nc.us
frederickadouglass.kippneworleans.org
kippneworleans.org
riverview.durangoschools.org
give.kippneworleans.org
admin.nbfacademy.org
admin.allison.pusd.org
apps.kippneworleans.org
kippneworleans.org
frederickadouglass.kippneworleans.org
give.kippneworleans.org
webaccess.knos.kippneworleans.org
admin.frsd12.org
mishpms.hpisd.org
powerschool.kippneworleans.org
admin.allison.pusd.org
admin.allison.pusd.org
admin.oes.cvsd.org
ace.pusd.org
kippneworleans.org
admin.anderson.moreland.org
admin.allison.pusd.org
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
powerschool.kippneworleans.org
admin.ms.moodyisd.org
admin.believe.kippneworleans.org
webaccess.knos.kippneworleans.org
eceap.gsd.wednet.edu
admin.aes.cherokee.k12.nc.us
lightspeed.knos.kippneworleans.org

Certificate

The complete raw certificate details for apps.kippneworleans.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D6a48XQUdThpj6FaHOV
ODHW2DsKOZanD8I4mk5HdEK85RPlfmQwY7VrAOv0Gd+5L5whh9QUJL+DVj5g9nA1
XUfsvoF3IllDuAmndC6sD7Bjgmlv0ZJ1LrATIeCuBdAOz4Vtu7CaXRxvn5StHqWf
CZXuikzvdLrRZ6dFagqSj6rg/uVDLII6K3P+fsa54q4JCOAo3QeVps5E6kv7//PI
D+VKVBEWavDbehkRR2vARUodwKmXkLvxZtwOf7ItaYrtIDakrEUHQ69Ys3m0x+He
1P4kudQkkPPdhI2y6fI5WJcrcPm9/gb2XkrbdaBtnxRonRZzf5GKFpfXu4qPAhxK
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 964624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-24 10:56:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-26 13:42:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EZISQGDgFAVYeaOukGAhbX6JulAr1bz9'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT13724581'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.kippneworleans.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26288439127799439002255162293063732976996537209286117573644121581215671642388015671776133585166740260236188724235121282681174649449584631865105481280180211050577652413962079194923455280533390379442073972139153865571278716014652950156811641334919725113925042400832751766633825363529196984757783999741630673018238602302452144470021051619568118017491184360132585692497918025203616170230849855499627798740437364403473059068568824180498697846185869652992326094737422362464531848604453427194804098127801971523439251436934153952425551477748186522318116845662897396615282012043533393419904018867219721147752478971234424212071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.kippneworleans.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							600d80568abdc4b1518967a7a6b7a429170bd027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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