pennsmanor.org

- Penns Manor Area School District -

Issued by Network Solutions RSA OV SSL CA 3

About this certificate

This digital certificate with serial number 80:38:6a:06:ed:42:8a:c3:25:d2:71:8f:86:50:b8:21 was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Penns Manor Area School District

Organization: Penns Manor Area School District
State / Province: Pennsylvania
Country: US

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 80:38:6a:06:ed:42:8a:c3:25:d2:71:8f:86:50:b8:21
Serial Number (int): 170434102568762535959704418263686494241
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1e:73:08:9b:8a:ba:9e:51:16:89:82:e8:ec:47:cf:0d:05:23:60:fe
AuthorityKeyId: ea:25:ff:5c:9f:4e:4f:4e:c1:14:a0:db:ca:be:ab:f2:e2:e2:78:a4

Fingerprint (sha1): e7:7d:2e:3a:94:a3:32:6f:cc:a5:b3:9e:b7:ea:df:1b:a2:61:ac:15
Fingerprint (sha256): 25:37:65:9a:b6:7d:3f:e0:de:f9:42:ad:d4:08:d5:5e:1c:cc:a4:a4:ca:20:5c:95:be:1e:dd:1f:c6:18:59:18

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crl

Check the revocation status for certificate pennsmanor.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pennsmanor.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pennsmanor.org
www.pennsmanor.org

Other certificates including the domain name pennsmanor.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for pennsmanor.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0duOT7phLHlAIU2zUERC
silRilF0brRbBMbnyhVa8HD1b6/eDzVsSGmlepSP4wKsIJujc/8Q2hoKeE5eKmhp
4ra2l1MJcUi2ydIF+nUQLROOkFtw3CAYifBrdJsnVkovvYqpnxVAhQpPOth+cEbK
5S8g0UMDlowEc5w3DhEGmQx03IP5gPcwAwK+c0RVZKH4gTUe6iBMEcF2EdaBC0EX
3KWtSNC4tJtHrzda5ebk+ix0VLOpxgBDPtZJj5ms5skYq28pzcGEnW1m98tvCm99
wamHHIYa1fTI8FN1pyi7Pnxsaqy7muXZMaAy8gSnDpld6c4nhCGeXAF4JLS4e2SL
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 170434102568762535959704418263686494241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions RSA OV SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Penns Manor Area School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pennsmanor.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26492072789363263605928069030444833714793168586467771257148212314114952031422052334511739000995911643545805257939986267616005901674900904497914660189666873234607610053044972251829221823081513514143773971104854118350300193341618725600985564289280166301053597038643615624857425415257277466675733861035961702648088637500165276387030920086910942646991638162153689363098025189124766046710374581495194565278529231286180491045614655690909367564393754217731518709559395656475923316281460696962684237525751104150035223123327000455315935773057269471197177784533675086475599448021082176251704576701400388382880937270041813224401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea25ff5c9f4e4f4ec114a0dbcabeabf2e2e278a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e73089b8aba9e51168982e8ec47cf0d052360fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsmanor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsmanor.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		00599fe2adca61dddf6af3bc83b36bd3b8ae8658b3a431d48f8ed7d462c69b234f3a34db6f0fdb32de50b7f39ba9f7842fc490f5f1703affeafcdc24ada8fb288e8c7c50fa2c16b5b41da582311dd451af49348c3510bbafe91c659ce3ee35057af4d10a2f0d2e8c81fd5f32a9d0742983362eccbfdf3bb63d997d32fbba916d9d3f025a0067442066f5333c8b8a432cd41d2cce4fc4061a21c49e9ec4400dfeb20e989494b28d0a155dda3bfd657a0b70b69bb659797b4d8d51a04c5bb5bb3edc7d7aec54d560f5e43c1d9021518a1bd4fcbacd33b140bf95a7052c9f8a391a537d633b14d8d8406c31684dc06561bc8b6e95fbd21e7926c36b2d652d84ec5f262da3c4396cfeffca168f4990f483915cf49ff3fbf5d193f8a0c73b27fba7376a518c494ef59c18c81194f673b5a3eb58533eb4616fe902c32e815c01642b69039ed756f9088325d79a093a2e2c4a3cacd683d09ded5a4466dcb3f77de92b15d0502b735f2b2991887fa13b66ed0d67836070944b5e178e150e72082b1d89887f