*.htcsd.ca

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 0d:e4:bf:41:54:28:58:f6:cc:56:83:db:a7:4c:4c:b9 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.htcsd.ca

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e4:bf:41:54:28:58:f6:cc:56:83:db:a7:4c:4c:b9
Serial Number (int): 18467686745060225921938569064419708089
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 47:03:56:24:0f:0e:f6:bc:7e:45:07:4f:3d:26:f9:85:8c:12:de:ab
Fingerprint (sha256): a0:12:8e:9c:4c:3b:79:d3:ad:96:15:83:97:75:dc:68:14:74:8b:e0:ac:4a:e0:fd:1a:65:8d:46:07:63:03:82

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate *.htcsd.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.htcsd.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.htcsd.ca
htcsd.ca

Other certificates including the domain name htcsd.ca

(limited to 100 certificates)
citrix.htcsd.ca
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
admin.colegiogreenhills.com
christtheking.htcsd.ca
htcsd.ca
htcsd.ca
printshop.comoxvalleyschools.ca
vanier.htcsd.ca
stagnes.htcsd.ca
stmary.htcsd.ca
citrix.htcsd.ca
comoxvalleyschools.ca
elem.bicschools.net
*.htcsd.ca
stmary.htcsd.ca
citrix.htcsd.ca
*.htcsd.ca
stmichael.htcsd.ca
htcsd.ca
www.wexford.edu.mx
admin.wearedace.org
soss.sd53.bc.ca
*.htcsd.ca
stmargaret.htcsd.ca
*.htcsd.ca
adss.sd70.bc.ca
*.htcsd.ca
htcsd.ca
www.htcsd.ca
www.wearedace.org
*.htcsd.ca
phoenix.htcsd.ca
*.htcsd.ca
*.htcsd.ca
*.htcsd.ca
htcsd.ca
allsaints.htcsd.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
stmargaret.htcsd.ca
www.gpcsd.ca
stmichael.htcsd.ca
fatimaschoolwilton.com
sacredheart.htcsd.ca
www.theratnerschool.org
htcsd.ca
ined.comoxvalleyschools.ca
*.htcsd.ca
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
*.htcsd.ca
htcsd.ca
powerschool.htcsd.ca
jcsk8.org
admin.jcsk8.org

Certificate

The complete raw certificate details for *.htcsd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4VIS+9is0oiNccgomTC
2J3eE+/1TOfY2wyMhXgCzfW0E/4ore+fFY6kMR/T3gsNTHvryUSIturd/ezGom5W
cp2lUToGJ2FQN1XExxAavfQmgIgThi3bUqoGlVTPWRemyl2DvoxKbQsDXYHFINAP
HxUzhq4e1GOCkoj5Ro8D9G/jTRSoM9jyiEnBmww6y01zbAl/RwSmWy7SaN3sI3kn
5rrRA4bZm1BSVx/GosE8iY7JdFwrtEQHlgkkgo3KCzeVVOj/kL2KLG/QMowVpjAH
bH3oDHVreZ3ED53Leb8TsMp2baS3RkCVkxarbvHQVofLi47kEXn/HfYLZfm+uCx1
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18467686745060225921938569064419708089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.htcsd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24177240253803378867876915615190477192599252764353065771699331902872744732677225099322349718686606073820937701795929339179584137265647622932782007928132952564034322005187762587713736844767975632957073914382430109889303980128251172930383762886665710888835175219411346872961892134849751041230273770168047111627848768302880272550859919913007653085252012126426773380811570360952266600718748697437579186374204058935770272668630601825628614241866949792234752539933050565965229374125517328886086889154850493633716194312138387210988619013737734708836529688233070459048671419171508574743065041975074940949355776037099318048019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htcsd.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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