lightspeed.kempisd.org

Issued by Network Solutions DV Server CA 2

About this certificate

This digital certificate with serial number 3f:6f:ad:4e:67:66:b9:35:58:c4:c4:4a:17:cd:4c:6a was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightspeed.kempisd.org,OU=Domain Control Validated+OU=nsProtect Secure Xpress

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
State / Province: VA
Locality: Herndon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:6f:ad:4e:67:66:b9:35:58:c4:c4:4a:17:cd:4c:6a
Serial Number (int): 84321223754406314778380859299827895402
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a0:1b:2c:dd:bc:5c:b8:ed:82:c4:d9:da:ac:74:75:40:2b:d5:30:fd
AuthorityKeyId: 51:ce:df:54:1d:b7:2c:57:ab:68:61:48:02:1a:d3:b2:85:ec:40:aa

Fingerprint (sha1): b9:97:e1:6d:47:4f:1e:db:22:fe:9a:ed:a8:d2:cf:0a:a1:ae:cc:98
Fingerprint (sha256): 79:94:47:c0:33:33:ce:6f:f4:ff:d0:19:08:19:f0:c0:dc:72:80:3a:d9:84:24:ce:76:72:02:0e:c2:39:74:14

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl

Check the revocation status for certificate lightspeed.kempisd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightspeed.kempisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lightspeed.kempisd.org
www.lightspeed.kempisd.org

Other certificates including the domain name kempisd.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lightspeed.kempisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX4PstFf7k+WHQMzFGE4
yZRTygfEZHeOBY1Y+U5+ULevmqkP/IDMv6YfguHD3r6fZT/aFaDVVB/RQ34rbZtr
ldb8PGzqOwGhRzyOrmxkvzmmuLpGaEf7wMAejn/0fdSqvRAtvJQN+Pa0xv3fTTx7
KAq2gge/98smIp0890L3385vS6xxK7FVYbKBv6HO5V87uB762wh/ZRm26pmHkj04
qa2nONSigccBpI+kSp7EdFHK8ZjZckIwa6Bx49gHni/Z+chHAu6bkmptw1HjyDdk
9rq5vwaImu/HkM1yUlsOJWYkuuLE6fAWqUG7mQjGDVsZb9pB56eQAli6EyJ6xw9h
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84321223754406314778380859299827895402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions DV Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsProtect Secure Xpress'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightspeed.kempisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24426156013325074708562593736945215086018116413303800282300610641348584195257219737504758729937863501758127488805693795610039521939697173764891850445854629339967172029606845748752685958009092340156116017780284985061464368332142244047314051601438032017909753028966756519148893923377641847716675250634613530274403742078073344240988064944506868583273996550168269298084003284961493752730739074900320668237949326969464272099608916468171320230964706827717562658497453160655207483468346006221119998144430149558826536179125637825512224573253767056942092987159723168042797758288658730661716557237130677255786268262773612831011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 51cedf541db72c57ab686148021ad3b285ec40aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a01b2cddbc5cb8ed82c4d9daac7475402bd530fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsDVServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsDVServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightspeed.kempisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightspeed.kempisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016961655ea00000040300483046022100e38810c3bffd3d083bc779a0f0acdb7f6a42a86f53c36d5620e21d6ce9ba84dc0221009de933d0fee12b68c7128a22240c4d6e08110aa6c0075e8b340eda3d1b9565530075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016961655ee60000040300463044022050a1ec0f40dfef5b0f7036dca32f5986cb683a447e22d987b95b2166000d55c902204d841d6f309ff30ea3e8bbe3705d2ad18f1accbb05e8e87eeddd63905c508064
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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