ps.van.misd.net

- Macomb ISD -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 45:ac:c8:ce:c5:4b:79:28:46:a0:66:b7:b5:fd:7d:e5 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Macomb ISD

Organization: Macomb ISD
State / Province: Michigan
Locality: Clinton Township
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:ac:c8:ce:c5:4b:79:28:46:a0:66:b7:b5:fd:7d:e5
Serial Number (int): 92613879632809182375587712668765355493
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 2f:6c:6c:2d:b6:38:7b:af:d4:9f:ab:5f:36:d9:40:2a:a5:a6:f5:96
Fingerprint (sha256): 2d:13:05:59:c6:13:62:11:fd:16:d8:8e:35:f1:6a:4b:11:90:97:71:a9:e1:94:2f:51:7c:03:c9:dd:65:1e:33

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate ps.van.misd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ps.van.misd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ps.van.misd.net

Other certificates including the domain name misd.net

(limited to 100 certificates)
ps.mma.misd.net
ps.gpa.misd.net
ps.aow.misd.net
ps.gpa.misd.net
*.misd.net
blackboard.misd.net
ps.ric.misd.net
ps.lakeview.misd.net
isd4.misd.net
is.misd.net
www.mywwps.org
ps.benross.misd.net
ps.mas.misd.net
www.mywwps.org
ps.ucs.misd.net
ps.lsps.misd.net
www.myinfo.misd.net
ps.solake.misd.net
ps.mas.misd.net
ps.mtc.misd.net
ps.waw.misd.net
www.anchorbay.misd.net
ps.lakeview.misd.net
rosevillepride.org
ps.cvs.misd.net
ps.ric.misd.net
ps-ss.rcs.misd.net
*.rcs.misd.net
ps.wcs.misd.net
ps.ccs.misd.net
ps.cvs.misd.net
www.mywwps.org
us-east-1-san4.blackboard.com
ps.ecm.misd.net
tienet.misd.net
ps.aaw.misd.net
outlook.misd.net
ps.fitz.misd.net
ps.cvs.misd.net
hd.misd.net
ps.cvs.misd.net
ps.fitz.misd.net
rosevillepride.org
www.anchorbay.misd.net
ps.van.misd.net
isd5.misd.net
ps.hac.misd.net
www.mywwps.org
ps.aow.misd.net
ps.van.misd.net
ps.lsps.misd.net
ps.ilcs.misd.net
ps.arm.misd.net
rosevillepride.org
ps.mtc.misd.net
*.romeo.misd.net
*.van.misd.net
ps.iam.misd.net
edublogs.misd.net
isdschools.misd.net
www.anchorbay.misd.net
rosevillepride.org
www.anchorbay.misd.net
outlook.misd.net
ps.hac.misd.net
www.mealmagic.misd.net
*.fraser.misd.net
ps.abs.misd.net
www.misd.net
ps.wcs.misd.net
ps.hac.misd.net
www.anchorbay.misd.net
isd4.misd.net
ps.gpa.misd.net
ps.cce.misd.net
newhaven.misd.net
*.misd.net
ps.abs.misd.net
uais.ucs.misd.net
edublogs.misd.net
newhaven.misd.net
hd.misd.net
www.mywwps.org
ps.cen.misd.net
isdschools.misd.net
ps.misd.net
rosevillepride.org
ps.eds.misd.net
mm.abs.misd.net
www.mywwps.org
ps.ccs.misd.net
ps.ecm.misd.net
rosevillepride.org
ps.hac.misd.net
ps.van.misd.net
ps.hac.misd.net
isd5.misd.net
www.mywwps.org
ps.ucs.misd.net
www.anchorbay.misd.net

Certificate

The complete raw certificate details for ps.van.misd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaipXQ852npBQ6IqNFJe
5MrhiNB3xoyLvkV8lgc2oasUzrhDMA7Dt3V8wtxr/MhfH9ghZCctKnNn1cUGEj4U
0wdez3/hsVTkIyNo84SFoRtQJtvn3+2OarfqtUHgeP3lcDdhS1E6c5uHD7+aR/zC
lsdSNjrzO57OXaSTlprkaQpMvjsfnu6Ow39bfO2vxQVIHo48DUuD6XMpHLwWyn00
3kBUXs6OpMJ8Yy9YrQCuxj0et/k1X5szY67M2HiIRK/X5LaIF4Qj0xZG1KPZWGSp
4PwmLx8kAFeAmwUkc61iQO92bonrcDM17NMp8IyAxTkU4kchqZz25+Xrz6pqLtOn
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92613879632809182375587712668765355493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Clinton Township'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Macomb ISD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ps.van.misd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24952116201342993560735133982905434989773242308592877169932046719824002829454187235165248768917831748101976552910351096102700549341464212144350804999254091920568098072994128527161876527334142894136042881453493380856461605852788075529056164599093457674217030468440515552277693012839238431738813937484153650672519897925877687606082725233185756894347457536271337738350786626728714974199476101058671471870099764761045594589974030444074848759226427102226733183413588122649314144517685604449342329964351092484996839614488388535558091939011660794271733547984001408945739421655507911602924629721052180460125485701156287260591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.van.misd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00400b1ab98ac4de1e64f2db715cb7c6007f95dbbca069b8b72c8a6bfeef0aa477ddf55cb1ff6953737fe974f29da5c90b8927b6b9d2ef6ff7a78c87460b6f7d77fb1d7bb05490dd55a0b1b37d7bb384b551360475c471634880b2c3f2f249c14ce06b61ea0728a89613214fb065a0bfd5cd08cdf752a6d128461b6a9ebae80eb5cc796e7de4af0d51b34f3a01453e902dad6b97e919d8f2396223cdc41aa4a7a83467d2148952868c22a8236de980a29ffe0d3143599ea54cc123886dd38c51d49e3c89250b119af86718164dd40112b8357f8a50828eecf415ffa5d4d706c34a85f03769843122d5a1dd7ea582fc90a24f9d86be9c4e60fed247c638ae7fd619