sl.powerschool.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e5:da:a2:cc:d1:e9:dd:16:6d:66:62:c8:80:35:5c:4a:d7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sl.powerschool.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:da:a2:cc:d1:e9:dd:16:6d:66:62:c8:80:35:5c:4a:d7
Serial Number (int): 426664422761350711418203891674661548477143
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:5a:de:c0:58:7e:32:e1:27:f9:53:6c:1f:2f:65:38:4d:c5:7a:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:4c:2d:8b:b0:64:27:c0:4c:f1:5a:42:2c:08:88:17:c8:f0:91:60
Fingerprint (sha256): 06:7b:be:19:b9:1a:cc:62:92:69:fd:d5:d8:cc:35:4e:18:66:e4:b0:8e:b1:f0:c9:9e:34:a7:02:26:c6:b1:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sl.powerschool.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sl.powerschool.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sl.powerschool.com

Other certificates including the domain name powerschool.com

(limited to 100 certificates)
secure07.stage.lithium.com
secure07.stage.lithium.com
support.themallschool.org.uk
powerschoolstg.powerschool.com
imperva.com
dallasisd.status.powerschool.com
bdsecurity.powerschool.com
statuspage.io
*.powerschool.com
dallasisd.status.powerschool.com
async-nsds-mcq.dev.nsds.powerschool.com
imperva.com
imperva.com
imperva.com
mylearning.ca.powerschool.com
powerschool.com
dallasisd.status.powerschool.com
ssl464296.cloudflaressl.com
imperva.com
sl.powerschool.com
imperva.com
alsdestatus.powerschool.com
alsdestatus.powerschool.com
alsdestatus.powerschool.com
apistatuscomm.chorus.co.nz
imperva.com
secure04.stage.lithium.com
status.activtrak.com
thinprint.powerschool.com
imperva.com
secure04.stage.lithium.com
freshservicesso.powerschool.com
dallasisd.status.powerschool.com
*.powerschool.com
impactstatus.validic.com
impactstatus.validic.com
secure06.lithium.com
dcss.powerschool.com
secure07.stage.lithium.com
dallasisd.status.powerschool.com
incapsula.com
secure06.lithium.com
secure04.stage.lithium.com
feature.admin.document-cloud.powerschool.com
incapsula.com
ssl871953.cloudflaressl.com
imperva.com
incapsula.com
imperva.com
imperva.com
estado.medios.com.ar
stewart.powerschool.com
estado.medios.com.ar
ccsd.powerschool.com
async-nsds-ai-powercoach.dev.nsds.powerschool.com
*.specialeducation.ca.powerschool.com
incapsula.com
*.businessplus.appsec.powerschool.com
imperva.com
*.registration-essential.powerschool.com
*.ca.powerschool.com
alsdestatus.powerschool.com
impactstatus.validic.com
dallasisd.status.powerschool.com
alsdestatus.powerschool.com
ssl464295.cloudflaressl.com
impactstatus.validic.com
secure11.lithium.com
secure06.lithium.com
csusa-ga2.powerschool.com
imperva.com
dallasisd.status.powerschool.com
*.reporting.powerschool.com
imperva.com
sl.powerschool.com
use2a-openvpn.powerschool.com
async-nsds-ai-chatbot.dev.nsds.powerschool.com
statuspage.io
secure11.lithium.com
apistatus.postnord.no
support.themallschool.org.uk
incapsula.com
*.ca.powerschool.com
apistatus.postnord.no
statuspage.io
incapsula.com
imperva.com
secure07.stage.lithium.com
incapsula.com
imperva.com
incapsula.com
apistatuscomm.chorus.co.nz
secure06.lithium.com
csusa-ga2.powerschool.com
imperva.com
secure06.lithium.com
async-nsds-ai-chatbot.dev.nsds.powerschool.com
impactstatus.validic.com
secure07.stage.lithium.com
imperva.com

Certificate

The complete raw certificate details for sl.powerschool.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pkFJA5IKXPROfOD+lx1
h5UchxFpH4pfZXHyTXk9rpsK/MxcOCIRh89Be4wBD6nYF9bg/+wXeBbdbweUe/hA
ufw1jqKgk6c1XseWJg+KWxAcCk1PfslpivzhcAmFkolMXGbiLK8XW63vwtfSFSb3
TaCSA+q9H3h5umcuqeh+q27elEEReeqTCv/6/fPN8xXAhBdAdy1N9wkEhTGtj/or
W1Gt+33ayX+EDn8hRSOlAyDVeSx9rjwJ20nAhp+U+0K8eMyM/CjS7onezb/IH3O8
AAi9hNfNz71thkSdwGK0c3mWRN4Qv9CJw3VqkfnjtmJI+uUDdhX6A9gOp7MOPKJl
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426664422761350711418203891674661548477143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 10:50:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 10:50:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sl.powerschool.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28100360716933511397128466413326820207028612904609619271894949509035899170035632811859150074172783424093079718430062289035727101179570126696808394148724718890986190815952850914842523277715142751593564251547120300607071638434475828407523555036444381432656787433804471726101030374833236808021528559474329771760198235658127092173611264074796683395042126172490055919551738251123807127125655743846838358697058241174458118823750914267734318619949757424937623168606586325918169584376949547418450132303504827297707858310082893679152768720580409518609907164718476346351738533300155669626280536298407446848272470146538209961359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d5adec0587e32e127f9536c1f2f65384dc57a53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.powerschool.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b1e936ccd00000403004630440220714ce1fc15557705f85f38825d57196c1aa33cabd1923898b07dc2efca43a67802204514c4b0e360b5bcee0b68a34b169e55ea08c70fb4f8a6b4f90145341240836c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b1e936d52000004030047304502202a5369f4982cb19a8f0f98e1dcf417e26dd111121471ad0a7434b4d0ebfc739a022100b4d8747f19d226ba4c04b00a7d3f6b54c31a87a4c1ca81cb28e0e29bd3f2468a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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