skyward.dpisd.org

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 33:06 was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=skyward.dpisd.org,OU=GT42314754+OU=See www.geotrust.com/resources/cps (c)14+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:06
Serial Number (int): 13062
Serial Number lenght: 14 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): 5b:3a:87:d3:6f:e5:c8:23:02:e8:4e:ca:05:e6:ab:47:06:9b:12:46
Fingerprint (sha256): e6:f0:51:c5:3c:7c:28:cd:79:74:e9:ef:77:9a:a6:05:4f:09:8c:16:44:c9:b6:84:36:11:1b:d7:fb:7b:cb:65

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate skyward.dpisd.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skyward.dpisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sky-web1.dpisd.org
sky-web2.dpisd.org
dpisd.org
skyward.dpisd.org

Other certificates including the domain name dpisd.org

(limited to 100 certificates)
cppm.dpisd.org
admin.bjh.dpisd.org
cppm.dpisd.org
adfs.dpisd.org
www.dpisd.org
skyward.dpisd.org
hrserv.dpisd.org
admin.dpjh.dpisd.org
mail.dpisd.org
cppm.dpisd.org
dpselfserve.dpisd.org
dpisd.org
sc.dpisd.org
schoolobjects.dpisd.org
*.dpisd.org
dpjh.dpisd.org
webmail.dpisd.org
*.dpisd.org
www.dpisd.org
casper.dpisd.org
webmail.dpisd.org
admin.ce.dpisd.org
adfs.dpisd.org
adfs.dpisd.org
www.dpisd.org
portal.dpisd.org
skyward.dpisd.org
dpisd.org
casper.dpisd.org
admin.nc.dpisd.org
dpselfserve.dpisd.org
www.dpisd.org
www.sanmiguelcristorey.org
dwjh.dpisd.org
dwe.dpisd.org
ecc.dpisd.org
dpisd.org
hrserv.dpisd.org
admin.bjh.dpisd.org
dpisd.org
*.dpisd.org
dpe.dpisd.org
admin.painesville-city.k12.oh.us
daep.dpisd.org
admin.dpisd.org
www3.dpisd.org
*.dpisd.org
dpisd.org
admin.bjh.dpisd.org
dplibrary.dpisd.org
admin.bjh.dpisd.org
adfs.dpisd.org
adfs.dpisd.org
dpisd.org
bjh.dpisd.org
dplibrary.dpisd.org
dpisd.org
www.dpisd.org
www.dpisd.org
tyler.dpisd.org
mail.dpisd.org
webmail.dpisd.org
admin.bjh.dpisd.org
dpisd.org
office.dpisd.org
vpn.dpisd.org
*.dpisd.org
dpisd.org
casper.dpisd.org
webmail.dpisd.org
casper.dpisd.org
skyward.dpisd.org
admin.pwe.dpisd.org
admin.de.dpisd.org
admin.goliadisd.org
dpisd.org
chestnut.painesville-city.k12.oh.us
dwjh.dpisd.org

Certificate

The complete raw certificate details for skyward.dpisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-29 01:07:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 07:59:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT42314754'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skyward.dpisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871155545451087248502633913180466089747660405043370796786804689732221957165812790011100388306503367858038910198308263381671969269317097868762859667789355366683589903061067322637810482833329833483978731609003838483772345213408863136047882067783075736839721240026316168682618659780292819953850987409169858292016212498073906018730369159778865072146371172945263408526356167739890101283767503570396652230957669077234699173738563040059160805389908509713125990262438796425431494779854735086668444665600684880210822611227204551049165040575125137544575241286791997285193847725523692958135287616619640525858914790711456708182525633850984917096966576932118170764047598892568483028604148060088658928091273126670015035417624769230305789822032840729325428018694267853720309932572111698857636773720479145296859425390947775904252481658661873410449932733415009068269230093850711428441442545155686432494989699001998303082450942505410255184947046499592038286740787523623673692492184236009228627405699033187909056841782564267651786575183826591521802590121554304087789874836615638313000874201555177488994964633296567012307945962936929021496711324015889825461880581514999905681212109457342957681295442266130934581927435306319393361788008600570645932954689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sky-web1.dpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sky-web2.dpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyward.dpisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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