schools.mygreatlakes.org

- Nelnet, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:4c:dd:b9:2f:b7:b0:b9:92:aa:a6:d1:0f:9a:50:e2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nelnet, Inc.

Organization: Nelnet, Inc.
State / Province: Nebraska
Locality: Lincoln
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:4c:dd:b9:2f:b7:b0:b9:92:aa:a6:d1:0f:9a:50:e2
Serial Number (int): 7045251624673561868663277125866508514
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:f6:cb:26:98:69:9c:58:65:f7:be:b9:45:a8:4e:cb:60:65:b2:a1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d0:a2:e0:33:23:39:3f:30:30:6c:0f:8a:f5:6a:6d:22:9c:fa:36:31
Fingerprint (sha256): 13:7b:7d:c7:0c:52:13:0f:88:1d:3f:7f:2c:6c:ac:33:06:77:15:1f:1a:94:cc:3f:b8:8f:f5:8d:26:31:a8:85

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate schools.mygreatlakes.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for schools.mygreatlakes.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

schools.mygreatlakes.org

Other certificates including the domain name mygreatlakes.org

(limited to 100 certificates)
connect.mygreatlakes.org
securemail.mygreatlakes.org
connect.mygreatlakes.org
training.mygreatlakes.org
partners.mygreatlakes.org
securemail.mygreatlakes.org
partners.mygreatlakes.org
home.mygreatlakes.org
home.mygreatlakes.org
connect.mygreatlakes.org
schools.mygreatlakes.org
schools.mygreatlakes.org
studentloans.mygreatlakes.org
glws7prd.mygreatlakes.org
community.mygreatlakes.org
connect.mygreatlakes.org
home.mygreatlakes.org
securemail.mygreatlakes.org
home.mygreatlakes.org
schools.mygreatlakes.org
securemail.mygreatlakes.org
meteorap.mygreatlakes.org
mygreatlakes.org
securemessage.mygreatlakes.org
partners.mygreatlakes.org
iq.mygreatlakes.org
careers.mygreatlakes.org
glws.mygreatlakes.org
community.mygreatlakes.org
community.mygreatlakes.org
schools.mygreatlakes.org
schools.mygreatlakes.org
mygreatlakes.org
securemail.mygreatlakes.org
training.mygreatlakes.org
training.mygreatlakes.org
mygreatlakes.org
wwwuatb.mygreatlakes.org
community.mygreatlakes.org
careers.mygreatlakes.org
home.mygreatlakes.org
community.mygreatlakes.org
wwwted.mygreatlakes.org
mygreatlakes.org
home.mygreatlakes.org
securemail.mygreatlakes.org
securemail.mygreatlakes.org
securemail.mygreatlakes.org
m.mygreatlakes.org
mygreatlakesuat.org
home.mygreatlakes.org
training.mygreatlakes.org
netagent.mygreatlakes.org
careers.mygreatlakes.org
community.mygreatlakes.org
ibis.mygreatlakes.org
mygreatlakes.org
partnersted.mygreatlakes.org
schools.mygreatlakes.org
muat.mygreatlakes.org
m.mygreatlakes.org
compass.mygreatlakes.org
community.mygreatlakes.org
schoolsted.mygreatlakes.org
compass.mygreatlakes.org
community.mygreatlakes.org
glws7prd.mygreatlakes.org
schools.mygreatlakes.org
netagent.mygreatlakes.org
schools.mygreatlakes.org
community.mygreatlakes.org
home.mygreatlakes.org
careers.mygreatlakes.org
partners.mygreatlakes.org
mygreatlakes.org
glwsj.mygreatlakes.org
mygreatlakested.org
compass.mygreatlakes.org
wcprod.mygreatlakes.org
glws7prd.mygreatlakes.org
community.mygreatlakes.org
training.mygreatlakes.org
wwwuat.mygreatlakes.org
securemail.mygreatlakes.org
connect.mygreatlakes.org
mygreatlakested.org
glwsw.mygreatlakes.org
www.mygreatlakes.org
mygreatlakested.org
connect.mygreatlakes.org
community.mygreatlakes.org
careers.mygreatlakes.org
connect.mygreatlakes.org
schools.mygreatlakes.org
mygreatlakes.org
securemail.mygreatlakes.org
glws7prd.mygreatlakes.org
fa.mygreatlakes.org
muatb.mygreatlakes.org
m.mygreatlakes.org

Certificate

The complete raw certificate details for schools.mygreatlakes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV3dKgVXFNuemsVtwDt9
FhMLLQXD2jbbrNccJ/fLb/ELZphYqDxbhBgm3rKPFip1bHQ1MUVEG7RdieKk1Kba
FMLBlHWyYHCTGvkRPQ83RcwCnj224M5HRI8bIvPm19Vok1mSD/1QmTH+Sn/bt0cs
knDRIxI+jUi2ue5zgxbrZrF54ESjNJwpzWaF+INyRLZVFGvn1Hy96TqhVtIp3s85
c0ngzgZ0j+Wa8ulB78TJiPJB/XLlXhpzbmwKQPsyAewYaDZUN49erohZSFcVFi92
gvwYsaBA1gwmjq3hYFAi7iGrLKK5PI/481FulOqXzrkwy4+0RXOoimUh01Q9oBaE
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7045251624673561868663277125866508514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nebraska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lincoln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nelnet, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schools.mygreatlakes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23905325663842766748520486819417605174052497041529257809700073484576359263004262264373266108020295608105466147712509503141816553595306759509701468131239920919066701838429399108392098495960641620396818970405666251074175755283791136950039407613225617099335947064871737814786486231027430389579234327937354216201795123409543559687026732702205457397050470972605642919653875647495112323156345903219740650814507622008798064729684883116271947064247998860387110721836474320372116677802214200522412339311268408446331828962761904743660147447739647342897535119514547575403674230611449703817561855119868778241103195518623827788993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cff6cb2698699c5865f7beb945a84ecb6065b2a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.mygreatlakes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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