www.icampus.grandville.k12.mi.us

- Infinite Campus, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:0e:18:e6:cd:ef:d5:e1:34:5c:8f:78:8b:07:0c:87 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Infinite Campus, Inc.

Organization: Infinite Campus, Inc.
Organization unit: Managed Services
State / Province: Minnesota
Locality: Blaine
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:18:e6:cd:ef:d5:e1:34:5c:8f:78:8b:07:0c:87
Serial Number (int): 4060881207416471429013620994725055623
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f6:a0:4f:d3:9f:a8:47:d2:8d:6d:ab:a2:9a:b0:05:64:6d:43:cf:76
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 08:fd:ad:bb:08:fd:19:21:9c:0b:d2:fc:50:13:3d:f1:49:12:8d:71
Fingerprint (sha256): 0a:5f:d9:b1:6c:04:ed:aa:0e:86:18:79:f9:aa:d8:a3:14:51:72:d8:99:00:ab:92:fe:99:60:2c:7b:50:95:93

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.icampus.grandville.k12.mi.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.icampus.grandville.k12.mi.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.icampus.grandville.k12.mi.us
icampus.grandville.k12.mi.us

Other certificates including the domain name grandville.k12.mi.us

(limited to 100 certificates)
10.bellevilleschools.org
*.grandville.k12.mi.us
www.leavittms.net
www.icampus.grandville.k12.mi.us
admin.eagleridgeacademy.net
komarek94.org
casshigh.bartow.k12.ga.us
*.grandville.k12.mi.us
10.bellevilleschools.org
anacondaschools.org
www.btaallday.org
www.icampus.grandville.k12.mi.us
acrma8.org
www.icampus.grandville.k12.mi.us
www.icampus.grandville.k12.mi.us
www.portrichmondhs.org
www.grandville.k12.mi.us
admin.kpe.mpsdnow.org
www.grandville.k12.mi.us
admin.eue.mpsdnow.org
www.grandville.k12.mi.us
owensintermediate.bcsd.com
10.bellevilleschools.org
www.grandville.k12.mi.us
admin.kes.pullmanschools.org
10.bellevilleschools.org
www.ciudaddelosninoscr.org
www.mpsdnow.org
admin.ar.cypsd.org
www.campacharter.org
bellevilleschools.org
acrma8.org
*.grandville.k12.mi.us
admin.btaallday.org
acrma8.org
www.ms-ap.org
www.grandville.k12.mi.us
*.grandville.k12.mi.us
admin.mphs.mpsdnow.org
*.grandville.k12.mi.us
*.grandville.k12.mi.us
www.grandville.k12.mi.us
mms.mpsdnow.org
cte.mpsdnow.org
admin.mms.mpsdnow.org
admin.sycamoreprep.org
admin.kindergartenacademy.mbgsd.org
www.marissa40.org
cses.comalisd.org
3.bellevilleschools.org
admin.nichols.bcsd.com
bayheadschool.org
academyofthecanyons.net
admin.churchill.edu.mx
acsaregion16.com
alamo.otsegops.org
hles.comalisd.org
admin.leavittms.net
*.grandville.k12.mi.us
acrma8.org
mphs.mpsdnow.org
dms.dover.k12.nh.us
admin.masterschool.org
www.btaallday.org
www.grandville.k12.mi.us
admin.cecdc914.org
www.masterschool.org
3rcs.org
mpsdnow.org
10.bellevilleschools.org
admin.washington.bcsd.com
acrma8.org
garza.bcsd.com

Certificate

The complete raw certificate details for www.icampus.grandville.k12.mi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnuycemm/ddTyeomzf5N
aXQDaGLNtQSgaArDzDGKIlzIbCndFpsOd1WeqdcbbCA0JYGu/Fo7HuTJWRN7ra/e
vIuyCTXk7GAzwP67WDBwtSXsIUjsMQ9th19ZN0gqErxIuLitIRfrjE0OpIywYxob
Sv+R66JbBW+fxJofNF7+2WIgu0qVW4xtrZ0iy9vEfMd1R+Gd6oJ1LvqR/3RBa2jK
9HXmsC4GZ7+ckMdB4pWBn9JF4eXNfCDjpKYOzoYzGRWpmyCXUOT24eNzv/1LxlfF
sCcat5DIyiv9r8WExhP2EmB4ZUXrkBo/4p4xXoLfFxlwm9UmhQEgEJz/3+vRI+Kf
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4060881207416471429013620994725055623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Blaine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Infinite Campus, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Managed Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.icampus.grandville.k12.mi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19501696253858466332615954834238641828089867508456593731075501180570792133999270117075406856942677487045108121482556074879077601853527002895355594078483093886233022635913152016042669764384737283202478179809751136518187406001218315173657332900893802824870804285706086677922538729468961317923200525896099646800585425029658872655808326470800941521511803048449428198445261821842635617483448002552865413613511538276724014511076735728013293057118298904789818314001007079661598027720448219675527132781178595809644369435590831850113530759409218008762499352399573751101790840001137740934135082263730618708227146141210211688421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6a04fd39fa847d28d6daba29ab005646d43cf76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icampus.grandville.k12.mi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icampus.grandville.k12.mi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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