helpdesk.nkasd.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:aa:3e:80:5f:03:17:86:55:08:9c:70:54:7b:1c:0a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=helpdesk.nkasd.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:aa:3e:80:5f:03:17:86:55:08:9c:70:54:7b:1c:0a
Serial Number (int): 12847010108020205585292701216299228170
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:27:d1:f0:7b:1a:5e:e1:d2:fd:f5:32:a1:10:c1:a9:15:d9:9e:46
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 3a:80:ca:3c:9c:d8:99:ed:68:b2:a9:af:c7:ef:a4:19:0e:2d:2b:59
Fingerprint (sha256): f8:d4:50:73:b6:37:01:f2:da:8c:91:02:b4:41:4a:bd:1f:aa:c6:ea:6c:8f:e2:b6:00:6d:b0:eb:26:a4:c0:d8

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate helpdesk.nkasd.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.nkasd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.nkasd.com

Other certificates including the domain name nkasd.com

(limited to 100 certificates)
admin.badenpowell.edu.mx
mil.ldcsb.ca
skyward.nkasd.com
radon.nkasd.com
ble.lancasterisd.org
www.stgregsschool.org
occomets.org
skyward.nkasd.com
admin.bmj.scott.k12.ms.us
cloud.nkasd.com
view-vcenter.nkasd.com
view-vcenter.nkasd.com
gwc.lancasterisd.org
*.nkasd.com
ckcs.lskysd.ca
admin.badenpowell.edu.mx
helpdesk.nkasd.com
www.stetsoncharter.org
admin.bmj.scott.k12.ms.us
castaichighschool.net
admin.athletics.ambassadorhigh.org
radon.nkasd.com
gateway.nkasd.com
nkasd.com
cloud.nkasd.com
skyward.nkasd.com
admin.kcgpa.org
admin.amacarson.org
nkasd.com
helpdesk.nkasd.com
helpdesk.nkasd.com
admin.stjohn.k12.la.us
admin.badenpowell.edu.mx
fallbrookhs.org
skyward.nkasd.com
nkasd.com
*.nkasd.com
*.nkasd.com
ngc.lancasterisd.org
www.kcgpa.org
helpdesk.nkasd.com
hemetusd.org
helpdesk.nkasd.com
helpdesk.nkasd.com
admin.badenpowell.edu.mx
www.badenpowell.edu.mx
nkasd.com
compass.nkasd.com
nkasd.com
admin.nkasd.com
cloud.nkasd.com
admin.badenpowell.edu.mx
www.walshcps.org
admin.kcgpa.org
echobay.adsb.on.ca
cloud.nkasd.com
nkasd.com
nkasd.com
www.riversiderebels.net
www.occomets.org
olfcatholic.org
skyward.nkasd.com
admin.amacarson.org
helpdesk.nkasd.com
walshcps.org
admin.cdc.stjohn.k12.la.us
sslvpn.nkasd.com
helpdesk.nkasd.com
admin.uhs.cvsd.org

Certificate

The complete raw certificate details for helpdesk.nkasd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFux2p0iiR5KVtRrn1Ra
VG1m7jDU0dQNS6h+9/4UttAtnQwIQWifH9Br4CE4WyjJaYkrJwxPUHyxvWcCF77j
oBaWw81IOJ3YK84fVFvHdUkdH6QmB/jAaqGgrp8BhMCXETqaGwWZHi2W+UaBEf3R
QEPGjSVPqxgsLcpZj4P3PF41t+2Wo/7OK62y6C2e81ALg7KAqbG+4/gHq36HqIAr
sIMZBNsvhPgDG6AdXPKOfT268IgANYt0l4rKehmRIhCMfb+P7NXXY4hsXDcyuNWR
mMcNoWI49d5lwpeeVdBNUoo0S1kaeYt20OMixYnulcXYAJDI+GRwTBCP33YN0GuB
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12847010108020205585292701216299228170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.nkasd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17718579057781089531378973757158009447429551723093713462966212837786078371182258762406733679736936132153301646686993209692208175761240435111761007129674330152061746704008294282212500678522234948517106496331188046426745450783025247840930820584620324536681591911797809237102401814098047022950769944883185667643214013196263062353509235737240949455933916230936861324759457861645485819985273030163004906531268812059571711895454524018922259158873634418476619078454524780580287070119985881595549696529442154772255885736275767322495873902942110081016841545437031373912167646880523686604445238637074594311116247117766480069033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc27d1f07b1a5ee1d2fdf532a110c1a915d99e46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.nkasd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018ec8328de0000004030048304602210090b91dd67986865d1569e8d3d36956af71375557401f80e3cfeb2df25a005d31022100f64bedea449669de6fcb8e37d0c4bfaa0983cd0d285294bd984b536def2fe92c0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018ec8328dd70000040300483046022100db1185baf2b46872f8a13cb4a7a5f7247c01f271dddb76800186d7e43a497c0b022100c06d1ea4aa8b5830bffa0afcbfdc4685c39c469767977c4bd3b22c77a47cc111007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018ec8328de600000403004830460221009a9c1d03bfda188d23a25a1112acf11660db17876ad644ed202e4a0aa3e66b2b022100b635b007ab4f9b713163060fdc43c2d355c75ee88ecb56d2abe85c29166b601f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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