paymytuition-lit.newschool.edu

- The New School -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 32:90:92:0f:7a:80:b3:0e:11:43:0c:59:93:9e:47:f0 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The New School

Organization: The New School
State / Province: New York
Locality: New York
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 32:90:92:0f:7a:80:b3:0e:11:43:0c:59:93:9e:47:f0
Serial Number (int): 67212052995012138947759177805437224944
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d7:af:66:b3:c0:96:f6:8d:f3:f3:8d:15:9b:27:ab:a3:51:c6:dd:4f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 08:81:88:1f:9b:26:1c:cc:3c:82:5a:20:5c:04:0b:82:13:5a:3f:cc
Fingerprint (sha256): 0d:84:76:a3:ed:54:9a:8e:ef:ff:b0:9e:61:5f:12:6f:e9:4d:33:14:85:de:ca:a0:e3:34:11:17:b7:f2:22:47

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate paymytuition-lit.newschool.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paymytuition-lit.newschool.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paymytuition-lit.newschool.edu
paymytuition01-lip.newschool.edu
paymytuition02-lip.newschool.edu

Other certificates including the domain name newschool.edu

(limited to 100 certificates)
printanywhere.newschool.edu
dmsdev.newschool.edu
iam.newschool.edu
projects.newschool.edu
ideas.library.newschool.edu
execed.newschool.edu
www.newschool.edu
alumni.newschool.edu
canvas.newschool.edu
percepis-wit.tns.newschool.edu
www.parsonsbenefit.newschool.edu
apexdevl.newschool.edu
support.newschool.edu
lum5test-cas01-lit.newschool.edu
rds.newschool.edu
www.parsonsbenefit.newschool.edu
deasel.newschool.edu
alvin.newschool.edu
sunexplorer.org
mrm.newschool.edu
guestwifi.newschool.edu
dev.contrastpharma.com
lum5dev-cas01-lid.newschool.edu
answers.library.newschool.edu
ssomgrprod.newschool.edu
parentportal.newschool.edu
apexprod.newschool.edu
alvin.newschool.edu
wifiloeb.newschool.edu
googlecas.newschool.edu
newcardcash.newschool.edu
printanywhere.newschool.edu
apextest.newschool.edu
reservation.newschool.edu
sendfiles.newschool.edu
housing.newschool.edu
blogs.newschool.edu
alvin.newschool.edu
newservice2.newschool.edu
library.newschool.edu
tnetadapterprod.newschool.edu
edge-uc1.peopleadmin.com
dev.newschool.edu
fax.newschool.edu
guestwifi.newschool.edu
ww2.newschool.edu
masonjrc.com
itservicedesk.newschool.edu
smtp.newschool.edu
erms.library.newschool.edu
facrev.newschool.edu
*.libproxy.newschool.edu
xrcenter.newschool.edu
intrepid-lit.newschool.edu
dormpro.newschool.edu
techtalk.newschool.edu
scripts.library.newschool.edu
emobiletest.newschool.edu
alvintest2018.newschool.edu
*.coursedog.com
iglobal.newschool.edu
account.newschool.edu
give.newschool.edu
paymytuition-lit.newschool.edu
testssb.newschool.edu
bienestardigital.cl
epay.newschool.edu
webform.newschool.edu
epay.newschool.edu
lb03.pacloud.com
courses.newschool.edu
smtp.newschool.edu
goabroad.newschool.edu
printanywhere.newschool.edu
ebillboard.newschool.edu
goabroad.newschool.edu
schober.newschool.edu
mrm.newschool.edu
gitlab.newschool.edu
sni.cloudflaressl.com
newcardcash.newschool.edu
dal.newschool.edu
www.events.newschool.edu
wifi.newschool.edu
shsportal.newschool.edu
vcard.newschool.edu
travel-partnership-agreements.newschool.edu
portfolio.newschool.edu
blogs.newschool.edu
filesender.newschool.edu
opencampus.newschool.edu
vcard.newschool.edu
ssbtest.newschool.edu
myday.newschool.edu
xerte.newschool.edu
coparemote.newschool.edu
joemags.co.zw
courses.newschool.edu
mnspreview.newschool.edu
gozer.newschool.edu

Certificate

The complete raw certificate details for paymytuition-lit.newschool.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2mW+uV4ekXQiGq4XDte
F3cUF2Yi18Xtvh4JwpETUVLszz6N0U4YR8K5vxwR7dHbSim/4izxp9qomVKx8uH2
Q/2IFLcaw2zI3Md3gwrgTPAcKNRZvezv5q6Q+tShPscQ2HBBnVlT28SKLoKMTOK3
jO9XubhlfxVXg0TaYnARVJdBlZDRV20b1Ry2KPN41NOQ5AZ0QIU1tZjFRz19iEzH
rJwUVuV3Q2t2KDa1Vu2d5g7/nZomxTFvPXnV3OHJBeEMEfrCxH+hcmLVLDt6ULpy
nliFh+V8iK6VL8ABDTFdV7YuMLFrqAUjSGEAqJsR5EiBO2popzMpExefBLwfve9r
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67212052995012138947759177805437224944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 09:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-01 09:30:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The New School'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paymytuition-lit.newschool.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21133865183495052527396273902726348157113936508264470180629887213491506556588476095919201929481072843188468745197935669463059120660689367756040756097295051640979716259284626681597758498896543689660692268801181787930045870031565994878841077259390861900421425180034808295714462983446000216844685438028624244012478053894775801807868087004596131311216614822510668262293840680304027128474690771471804194072329808627472086563567396254400564662855688967682802297148378561431301675615514046428816221622374733439619292638137737324616760378009804491292524563065990882045141644636383220024241212843823765194587171268295614491539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7af66b3c096f68df3f38d159b27aba351c6dd4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymytuition-lit.newschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymytuition01-lip.newschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymytuition02-lip.newschool.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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