*.schoology.com

- Schoology -

Issued by Verizon Akamai SureServer CA G14-SHA1

About this certificate

This digital certificate with serial number 35:18:db:68:fc:90:eb:df:cf:8c:8c:da:5d:e2:58:82:e7:e1:52:df was issued on by Verizon Enterprise Solutions.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Schoology

Organization: Schoology
Organization unit: Secure Link SSL Wildcard
State / Province: NY
Locality: New York
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 35:18:db:68:fc:90:eb:df:cf:8c:8c:da:5d:e2:58:82:e7:e1:52:df
Serial Number (int): 303130842054131374795167519367778792811618456287
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 4d:b3:5c:92:30:30:77:73:5e:02:f4:52:0e:62:57:03:ee:ca:0d:b7
AuthorityKeyId: dd:6c:80:7c:ba:b5:32:17:a5:84:41:40:f0:d2:04:66:13:2f:a9:90

Fingerprint (sha1): 54:10:e1:21:3a:96:ea:64:e9:38:3b:1f:75:ee:2a:a2:2c:39:9d:8e
Fingerprint (sha256): 06:c7:1e:45:f9:8d:89:3f:ac:43:3e:e5:55:ae:73:3c:00:bd:62:83:12:72:0f:04:e8:ba:4e:75:12:04:20:d8

Issuing Certificate URL: https://cacert.a.omniroot.com/vassg141.crt
Issuing Certificate URL: https://cacert.a.omniroot.com/vassg141.der

Revocation information

OCSP Server: http://vassg141.ocsp.omniroot.com
CRL Distribution Point: http://vassg141.crl.omniroot.com/vassg141.crl

Check the revocation status for certificate *.schoology.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.schoology.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.schoology.com

Other certificates including the domain name schoology.com

(limited to 100 certificates)
cyberevents.teamascend.com
dns-vetting2.map.fastly.net
*.schoology.com
*.schoology.com
clientservices.schoology.com
schoology.com
*.schoology.com
*.app.schoology.com
k.ssl.fastly.net
dns-vetting2.map.fastly.net
k.ssl.fastly.net
schoology.com
dns-vetting2.map.fastly.net
k.ssl.fastly.net
imperva.com
f3.shared.global.fastly.net
*.schoology.com
*.schoology.com
cyberevents.teamascend.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
ecommunity.status.dex.care
acquia-sites.com
f3.shared.global.fastly.net
ecommunity.status.dex.care
*.schoology.com
imperva.com
k.ssl.fastly.net
*.schoology.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
acquia-sites.com
dns-vetting2.map.fastly.net
f3.shared.global.fastly.net
dns-vetting2.map.fastly.net
imperva.com
champions.schoology.com
f3.shared.global.fastly.net
c2.shared.global.fastly.net
c2.shared.global.fastly.net
*.learnosity.schoology.com
imperva.com
schoology.com
c2.shared.global.fastly.net
k.ssl.fastly.net
acquia-sites.com
*.learnosity.schoology.com
incapsula.com
c2.shared.global.fastly.net
info.schoology.com
schoology.com
k.ssl.fastly.net
f3.shared.global.fastly.net
champions.schoology.com
schoology.com
support.schoology.com
c2.shared.global.fastly.net
ustats-app.schoology.com
schoology.com
f3.shared.global.fastly.net
ecommunity.status.dex.care
*.schoology.com
cyberevents.teamascend.com
acquia-sites.com
acquia-sites.com
*.schoology.com
schoology.com
f3.shared.global.fastly.net
enterprise.status.secomea.com
ecommunity.status.dex.care
*.schoology.com
k.ssl.fastly.net
imperva.com
f3.shared.global.fastly.net
dns-vetting2.map.fastly.net
f3.shared.global.fastly.net
dns-vetting2.map.fastly.net
champions.schoology.com
dns-vetting2.map.fastly.net
f3.shared.global.fastly.net
events.schoology.com
dns-vetting2.map.fastly.net
k.ssl.fastly.net
shop.schoology.com
k.ssl.fastly.net
f3.shared.global.fastly.net
schoology.com
ecommunity.status.dex.care
f3.shared.global.fastly.net
*.schoology.com
c2.shared.global.fastly.net
acquia-sites.com
k.ssl.fastly.net
*.schoology.com
*.app.schoology.com
cyberevents.teamascend.com
k.ssl.fastly.net
cyberevents.teamascend.com
*.schoology.com
dns-vetting2.map.fastly.net

Certificate

The complete raw certificate details for *.schoology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PTdmRUPgOgB0Dh7YXCy
uSEF+TuaytRohEQE+oa7tH7duRLp2TJRhtCN99K8UdRdcI90y6Y0lxv0XMFuqE0L
KgxNLdIOiEJmN0SfPk+mrvVGK/Ku+xlU/x8bpDabF15pz4YYw4ek6ojKngTRTCwt
yt6MGM4lAfh94T6CWscNsVZ0Y1j2jTw/EjlUdZ7F+/kfMGY73N6P1Ri3UZQ7r9uQ
4CRYE8As1m2J4Qw+dE34SegU5bAkcsw3fu8BKt7PE2pXGxPdpQ5cnWXAfAKzgEfK
9ppYY1FbGBUgYRsgyDsiJrp+fXanWmFmnbKKmipVta71xCWUmLgyWsaDn20bOkU+
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303130842054131374795167519367778792811618456287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Akamai SureServer CA G14-SHA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-05 22:30:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-05 22:30:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schoology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Link SSL Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.schoology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26883268388926209976394962308398564373810652946183288764634614762770439217728234329797022166915278031342904234449961860670104325798905836762632995173162709037479521669580437546399194130765006713583342106178116872846393809875713541460883434812425855549417460848964134318354935048975363024845136705686619793178555717602540202463491949690840391356077485947728204385128662895442781353275315542623575284789267688166818215748132279451950456667282032958999381772795324846635189511965137860970562181999879281931436564772255103880161258671119281160523105478001254904552782935458673593774890722392685124753446237351029651095271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg141.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg141.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg141.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd6c807cbab53217a5844140f0d20466132fa990
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg141.crl.omniroot.com/vassg141.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4db35c92303077735e02f4520e625703eeca0db7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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