*.jcboe.org

- Jersey City Public Schools -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 0b:78:6c:75:8b:a7:b9:0a:a0:1d:32:09:91:7d:d5:fb was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jersey City Public Schools

Organization: Jersey City Public Schools
State / Province: New Jersey
Locality: Jersey City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:78:6c:75:8b:a7:b9:0a:a0:1d:32:09:91:7d:d5:fb
Serial Number (int): 15246783389811643277545634053821945339
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0e:5f:0d:ec:9e:01:bd:cf:6b:ed:e0:c6:21:02:8d:34:a2:c1:50:5e
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 6a:65:62:9d:ea:8a:21:48:16:2c:9d:a7:a5:70:81:c8:06:52:72:9a
Fingerprint (sha256): 21:ed:07:2e:91:07:6f:a1:59:73:78:cd:19:fc:ef:cb:55:67:3c:4e:05:ec:f3:4b:29:3e:e2:10:ea:d7:1a:06

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g6.crl

Check the revocation status for certificate *.jcboe.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jcboe.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jcboe.org
jcboe.org
WLC-WIFI.jcboe.org

Other certificates including the domain name jcboe.org

(limited to 100 certificates)
admin.adulted.erusd.org
admin.caldwellschools.org
admin.asacharterschool.com
www.bhef.org
academiamaddox.com
admin.amschool.edu.sv
www.lighthousecs.org
admin.adulted.erusd.org
admin.bakerschools.org
admin.ccscyclones.com
admin.ps23.jcboe.org
*.jcboe.org
www.livingstontigers.com
jcboe.org
ps17.jcboe.org
careerprograms.comoxvalleyschools.ca
admin.adulted.erusd.org
admin.middle.bridgeportisd.net
*.jcboe.org
www.richgrove.org
admin.argyleisd.com
ps28.jcboe.org
ps38.jcboe.org
campus.jcboe.org
admin.bv.smasd.org
ps16.jcboe.org
jcboe.org
admin.adulted.erusd.org
alhs.jcboe.org
admin.ps28.jcboe.org
jfhs.jcboe.org
ps26.jcboe.org
admin.nohum.org
admin.andersononline.org
*.jcboe.org
admin.a1ms.jcboe.org
indio.rcea.us
alhs.jcboe.org
ps25.jcboe.org
admin.lhs.jcboe.org
admin.adulted.erusd.org
admin.ps12.jcboe.org
admin.adulted.erusd.org
lighthousecs.org
ii.jcboe.org
admin.altavista.unionsd.org
a1ms.jcboe.org
ps39.jcboe.org
www.ewrsd.org
cres.coltsneckschools.org
admin-sports-jwb.jubileeacademies.org
ps26.jcboe.org
ps20.jcboe.org
ps14.jcboe.org
mycommodores.org
admin.adulted.erusd.org
admin.whhsny.org
hbuhsd.edu
admin.ps33.jcboe.org
admin-sports-jwb.jubileeacademies.org
ps29.jcboe.org
admin-sports-jwb.jubileeacademies.org
www.jcboe.org
www.athlosprep.org
admin.bakerschools.org
academiamaddox.com
admin.ps20.jcboe.org
admin.ccscyclones.com
hshs.jcboe.org
admin.arcataschooldistrict.org
jcboe.org
admin.adulted.erusd.org
admin.ps24.jcboe.org
admin.asacharterschool.com
jcboe.org
admin.adulted.erusd.org
jcboe.org
admin.adulted.erusd.org
admin.cra.freeholdtwp.k12.nj.us
hshs.jcboe.org
ps39.jcboe.org
www.tulsalegacy.org
ps33.jcboe.org
admin.adulted.erusd.org
admin.scholantis.com
ihs.jcboe.org
admin.bv.smasd.org
admin.monessenschooldistrict.com
admin.ccscyclones.com
admin.adulted.erusd.org
admin.adulted.erusd.org
ps23.jcboe.org
richgrove.org
*.jcboe.org
jcboe.org
campus.jcboe.org
admin.banninghs.org
admin.albert-r-lyman-middle.sjsd.org
admin.rmcacs.org
admin.ps41.jcboe.org

Certificate

The complete raw certificate details for *.jcboe.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDFymcJ7iRh1iAgLjaCu
1IdBr2u4QUxexK1By1zYPR8MjBi6eJHrukiX9x34dWudd+ypcNhgdQ8fKS3kWoc3
tbo5LqtrE4d8r1DOqi8g1qFbpBXUgu8JPqocuqxPJqJ1OWVcQHV7sEAitWrcTr6x
UH5InkOk7zOAJdJrzbBSe6z9uufqAC1F8IIrOEPdi/abfahyObvGpF3grQYoBE1u
lfiPg7kOrffVYrp9Yqn38jxgwZwEQWJo/P0Em5QUFipfwNbPv7Q9sE8CagWPzbOb
pOCR4gQevUq8IQ/KQF9MrZwBWMMDoI5PjJ4o+W7Hm7oF/6EF81lBDNB4Oykkjq9N
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15246783389811643277545634053821945339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City Public Schools'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jcboe.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23252231663040570238312667312802747837974410857368354378993240167217965830853555786107785574938702498786987173321994384997140948515172540186533705916245610629574210629010609982620334172784550331881445169130867109815356860065058490493278206859692195049407530904369940321409861775157015676543722615542523241616767649725799416782080325690433018102811023713325561615690407734810044117415328874620725158865173921333968324794825413271016445407956594427951976690266666786923497699222132521687496910834239464519829234516378367129512153435887700817304179096914451562618125431501289220461517970192574325411456158776988342898071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e5f0dec9e01bdcf6bede0c621028d34a2c1505e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcboe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WLC-WIFI.jcboe.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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