www.travisranchschool.org

- CloudFlare, Inc. -

Issued by CloudFlare Inc Compatibility CA-3

About this certificate

This digital certificate with serial number 0b:09:f1:23:f2:e2:ab:2e:d3:cf:48:9c:d5:e2:87:5d was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:09:f1:23:f2:e2:ab:2e:d3:cf:48:9c:d5:e2:87:5d
Serial Number (int): 14673129534230454102902347617118881629
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:51:72:08:85:5a:90:74:53:97:05:84:e5:cc:bc:7b:a9:87:f0:89
AuthorityKeyId: 97:49:c5:f6:84:14:73:df:73:ba:cc:a9:66:ba:f9:a6:3c:59:c6:ae

Fingerprint (sha1): 03:5e:7b:08:a7:f5:4d:e9:56:87:9f:a2:93:fb:dd:cf:5c:6f:98:a4
Fingerprint (sha256): f5:c8:d8:b3:e2:24:f7:44:22:aa:73:ec:c3:89:e5:a1:5f:4d:c6:38:03:0d:eb:a9:19:fc:8c:96:ce:86:51:5c

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl

Check the revocation status for certificate www.travisranchschool.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.travisranchschool.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.travisranchschool.org

Other certificates including the domain name travisranchschool.org

(limited to 100 certificates)
sunnyside.goldenruledallas.org
admin.marquettecatholic.org
admin.veca.gocats.org
www.dms.dover.k12.nh.us
admin.illinois.goldenruledallas.org
admin.bclc.burke.k12.ga.us
travisranchschool.org
admin.hedgescps.org
fes.comalisd.org
www.travisranchschool.org
desoto.goldenruledallas.org
www.hilltopprep.org
leonardeulerd.edu.mx
dover.k12.nh.us
admin.elementary.homercenter.org
pg.goldenruledallas.org
admin.alma.cv.k12.ca.us
burney.hattiesburgpsd.com
www.whitmanhs.org
admin.mabelpaine.org
desoto.goldenruledallas.org
admin.mabelpaine.org
painesville-city.k12.oh.us
admin.harding.bcsd.com
admin.woodley.hattiesburgpsd.com
admin.homercenter.org
admin.elementary.homercenter.org
gp.goldenruledallas.org
admin.elementary.homercenter.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
travisranchschool.org
travisranchschool.org
admin.lng.otsegops.org
admin.creekside.cv.k12.ca.us
ruggleselementary.org
admin.marshall.cv.k12.ca.us
elementary.homercenter.org
www.travisranchschool.org
admin.sunnyside.goldenruledallas.org
admin.allison.pusd.org
travisranchschool.org
www.marquettecatholic.org
admin.painesville-city.k12.oh.us
www.travisranchschool.org
admin.westsideusd.org
admin.wilmer.goldenruledallas.org
www.hedgescps.org
www.gocats.org
admin.hhs.hattiesburgpsd.com
admin.ghck12.com
www.travisranchschool.org
wilmer.goldenruledallas.org
admin.downtown.bcsd.com
admin.dover.k12.nh.us
www.travisranchschool.org
admin.wilmer.goldenruledallas.org
gfes.comalisd.org
admin.travisranchschool.org
admin.goldenruledallas.org
www.leonardeulerd.edu.mx
admin.wilmer.goldenruledallas.org
www.westsideusd.org
www.travisranchschool.org
westsideusd.org
admin.gp.goldenruledallas.org
admin.travisranchschool.org
www.irlandesmexico.com
cad.dcs.edu
www.mabelpaine.org
admin.marshall.cv.k12.ca.us
admin.highschool.homercenter.org
admin.travisranchschool.org
bde.dcs.edu
admin.palomares.cv.k12.ca.us
hort.bcsd.com
bchs.burke.k12.ga.us
admin.vannoy.cv.k12.ca.us
stanton.cv.k12.ca.us
diamondpoint.pusd.org
admin.hills.bcsd.com
clhs.comalisd.org
independent.cv.k12.ca.us
admin.elementary.homercenter.org
admin.philadelphia.pusd.org
www.travisranchschool.org
www.travisranchschool.org
www.travisranchschool.org
admin.monessenschooldistrict.com
ghs.goshenlocalschools.org
travisranchschool.org
illinois.goldenruledallas.org

Certificate

The complete raw certificate details for www.travisranchschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlcqdmcMexeZd0LLhPZi
GNlt8vOe+oH6IGZBxQL3UVkAzTfsY2L/UvncePb19aTgyyf91SOm1RENhgBr2sHh
pZHLDkIN173OzK6gFBmQh7KwMbRTyv5Zlyp9ZScIpeVSKNzhUENuz5ZnSdFEeisJ
RoKiXBEBnuFe+zljM5Odppatk9xrCTyYrQ8q0ExGi8VmxSCvUAWjJLNpW9N+PY2V
/QtTO+5mV985f9fld73puq2nR2s3D3E59Jel7yDU1q2KPjzaw8fjuLEgg02QpL1d
9G9l3Y7V4BhoXuhwV9mnf+er8KpOBVrDP6nd/sGVnM42beYD94YtF/WWWPXmBoeD
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14673129534230454102902347617118881629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc Compatibility CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.travisranchschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22008448156188291090668650341183150643809756357491369755217291449998254997039409110542257536535024520083194410097968964226090644889484732678423694542324863147368143480667247437289831003275604061253793236049855582028472083196195153210457922642276894065239793434447199455225636354888398684394759557919793389020669255303720751328612632827232080533322898869386821208224649662912092514160692835964194656775324766074626994968739630025221578299024811301181479410115599167972046469631059466773057353374579358842949458608928721363548433752867995535284010064073535098465725721233049905428281853305689833615319146430283184047061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9749c5f6841473df73bacca966baf9a63c59c6ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09517208855a907453970584e5ccbc7ba987f089
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travisranchschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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