sanlorenzo.slzusd.org

- CloudFlare, Inc. -

Issued by CloudFlare Inc Compatibility CA-3

About this certificate

This digital certificate with serial number 01:f2:b6:82:d9:0b:5f:91:7d:e1:13:32:a6:be:e2:0f was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f2:b6:82:d9:0b:5f:91:7d:e1:13:32:a6:be:e2:0f
Serial Number (int): 2589465600931332241301189103546458639
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c2:3f:77:cd:5f:dd:56:d8:c4:c5:fd:36:68:1e:42:fd:df:86:48:d7
AuthorityKeyId: 97:49:c5:f6:84:14:73:df:73:ba:cc:a9:66:ba:f9:a6:3c:59:c6:ae

Fingerprint (sha1): 13:a5:77:80:88:1b:56:3a:03:85:32:2c:2c:ee:b7:66:1c:5f:ed:4a
Fingerprint (sha256): c4:ec:d2:92:65:42:68:d6:4a:84:26:d1:0e:68:4e:bf:58:41:6c:2a:c5:1e:84:53:4c:78:38:d5:02:d0:1c:7c

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl

Check the revocation status for certificate sanlorenzo.slzusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanlorenzo.slzusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanlorenzo.slzusd.org

Other certificates including the domain name slzusd.org

(limited to 100 certificates)
admin-adu.slzusd.org
admin-ahs.slzusd.org
bay.slzusd.org
admin.godwinschools.org
col.slzusd.org
admin.ajhs.dcs.edu
wmms.slzusd.org
hesperian.slzusd.org
admin.hs.gsd.wednet.edu
admin-wms.slzusd.org
admin.springcovesd.org
adult.slzusd.org
royalsunset.slzusd.org
hil.slzusd.org
admin-ahs.slzusd.org
washingtonmanor.slzusd.org
hillside.slzusd.org
adu.slzusd.org
www.hoganprep.net
adult.slzusd.org
bohannon.slzusd.org
hesperian.slzusd.org
del.slzusd.org
lorenzomanor.slzusd.org
colonial.slzusd.org
wilkeson.whiteriver.wednet.edu
www.slzusd.org
eastbayarts.slzusd.org
admin.fta.hasdpa.net
wrhs.whiteriver.wednet.edu
admin.eceap.gsd.wednet.edu
www.escalonusd.org
mtadams.wednet.edu
www.slzusd.org
admin.jamesmartinmiddleschool.wearecms.com
lorenzomanor.slzusd.org
slz.slzusd.org
admin.ms.gsd.wednet.edu
ncsd.net
stw.hasdpa.net
colonial.slzusd.org
newhorizon.bviu.org
bms.slzusd.org
grant.slzusd.org
admin.es.gsd.wednet.edu
admin-ahs.slzusd.org
admin.ajhs.dcs.edu
adult.slzusd.org
admin-wms.slzusd.org
day.slzusd.org
admin-adu.slzusd.org
bay.slzusd.org
admin-adu.slzusd.org
washingtonmanor.slzusd.org
delrey.slzusd.org
arroyo.slzusd.org
gra.slzusd.org
dayton.slzusd.org
admin.orchardviewschool.org
delrey.slzusd.org
admin-adu.slzusd.org
eastbayarts.slzusd.org
admin-adu.slzusd.org
naugatuck.k12.ct.us
www.slzusd.org
www.ranchitoelementary.org
grant.slzusd.org
corvallis.slzusd.org
admin-wms.slzusd.org
ahs.slzusd.org
corvallis.slzusd.org
hillside.slzusd.org
washingtonmanor.slzusd.org
washingtonmanor.slzusd.org
phs.parlierunified.org
royalsunset.slzusd.org
hillside.slzusd.org
ahs.slzusd.org
wms.slzusd.org
corvallis.slzusd.org
arroyo.slzusd.org
washingtonmanor.slzusd.org
adult.slzusd.org
hesperian.slzusd.org
admin-adu.slzusd.org
ahs.slzusd.org
admin-adu.slzusd.org
sanlorenzo.slzusd.org
admin-wms.slzusd.org
bay.slzusd.org
www.fhasd.com
sanlorenzo.slzusd.org
eastbayarts.slzusd.org
bms.slzusd.org
orchardviewschool.org
delrey.slzusd.org
hil.slzusd.org
phs.parlierunified.org
admin-adu.slzusd.org
bohannon.slzusd.org

Certificate

The complete raw certificate details for sanlorenzo.slzusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38GSGTD2IamLRFn8L6z7
iebRuE4kMoLtWdZwnPUe4DubwnKosm17nJNQrQwi0m40AkOahz1PHN3A5hIGRRwH
3h18eHquHGXahApuCYaOgGjjIhBbcA9tq3YxLfHnVK2vOzApN7fS9y8avDRowDuj
FjF13cpcff8ZBiAHS+s4s1Trzla/bcPbcJ4g7/uGVOiDNplHSurXyYFNiX+VJ8sk
DZL7kpvv5Gm9GswiW8iOVAgDRAVBCAa/qjF22B0GF44yGjrS3lcNnPVgrIw9sSH7
nH7tCeZ5Eq22cPC0Rr1P23fgbGBw0G0j0Ds4ZI3tzd/SxWIK4wkJvRqbdHiudtt6
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2589465600931332241301189103546458639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc Compatibility CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanlorenzo.slzusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28246595275658599980062007940348912312817503508736151799548102684649244977649667381749755626502410078373359186310830957573659444240619439384300723399417432304407202456746319569047449817931922423677528558530867021806462112271103971484824283881029470149770285517971506294886592086208687730025077824961746125872120107986771571995274503178437783167587916929101665915376310131885652230603579049650371318988661915357315227748406903966815086669141744616144764502317622536809627992581112771784261216483284030855417326971079280920545814021038254137808378307526448541884696131997948445237937628798716813354584704773132543294067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9749c5f6841473df73bacca966baf9a63c59c6ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c23f77cd5fdd56d8c4c5fd36681e42fddf8648d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanlorenzo.slzusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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