edge-uc1.peopleadmin.ca

- Powerschool group llc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:ab:47:e7:be:6c:ea:37:63:49:92:f6:91:83:06:10 was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Powerschool group llc

Organization: Powerschool group llc
State / Province: Texas
Locality: Austin
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:ab:47:e7:be:6c:ea:37:63:49:92:f6:91:83:06:10
Serial Number (int): 18169305119734583845946560649772598800
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0e:93:fb:23:8d:d2:06:ba:2c:53:32:2d:29:62:ec:ef:c8:11:e2:aa
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a0:82:77:66:93:18:a3:1f:c2:07:98:b5:ae:6b:57:2e:8e:4d:82:87
Fingerprint (sha256): 2f:00:a3:8f:b7:f8:d6:c0:47:ba:c8:7a:f1:66:9b:05:42:a7:92:b9:d6:e8:e7:92:f2:a4:c1:f5:e6:9b:55:6a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge-uc1.peopleadmin.ca

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-uc1.peopleadmin.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-uc1.peopleadmin.ca
test1.peopleadmin.ca
test2.peopleadmin.ca
careeropportunities.kelowna.ca
www.employmentopportunities.okanagan.bc.ca
uleth.peopleadmin.ca
employment.rdc.ab.ca
www.douglascollegecareers.ca
jobs-capilanou.peopleadmin.com
careers.vcc.ca
cnv.peopleadmin.ca
careers.bcit.ca
jobs.fanshawec.ca
careers.dnv.org
employment.rdpolytech.ca

Other certificates including the domain name peopleadmin.ca

(limited to 100 certificates)
*.tedk12.ca
*.tedk12.ca
*.peopleadmin.ca
imperva.com
imperva.com
imperva.com
edge-uc1.peopleadmin.ca
*.tedk12.ca
edge-uc1.peopleadmin.ca
*.tedk12.ca
imperva.com
*.peopleadmin.ca
edge_uc1.peopleadmin.ca
imperva.com
edge-uc1.peopleadmin.ca
imperva.com
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
imperva.com
imperva.com
edge_uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
imperva.com
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
*.peopleadmin.ca
imperva.com
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca

Certificate

The complete raw certificate details for edge-uc1.peopleadmin.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnOQO8d3pbp9jK5O6lQY
8zG8xXHrjU52XKAk5EGNhy6tRoY+EC8S6FM+Sp0aZDcBftWDBPMEvBPQw0KpnzmU
YaXtHIbZAVXJocUDTFAg2KKtClREWGpWjH3av4MsFHcVFjAK6WvugRzhjP7Y5VTv
2+Kwho0uIL1+55Tv1TJEVYvwubZiSnvrdgGqqqG2PPfG4MEZMBzY1B0+sVqNIOEs
Tkn6DCzsEox7kShtnOhBGhHMa1qO15VMcRB0GzHVPZRJmknbxtbeu4UWEOKTj7iv
zMoDByhLv4N0w/ef+OR/9iAUYqQjlrCvQBSKScynhJWMj7JoT6e58F/dqOs5hxTl
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18169305119734583845946560649772598800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Powerschool group llc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-uc1.peopleadmin.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23032357946271445331992774727107933274354580757431026234508182637508832632520972340472432017449292769677366095449693799990972857032137740092765975738659922444387913315422134079497903979649183477135436865924964746891103073537288328641837810718914608558210697323409828089158280428351649432683879041687776601988769354667626728210771459568034500878897260954454620569484824911885489458640466897100338922292073345420229603930520462979119575480381090665117421717596847252975213850065340973799445678827591063726943365085476294512302069856102668500467377857998447403786038946712057785665691332285669432671979944087905268720901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e93fb238dd206ba2c53322d2962ecefc811e2aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-uc1.peopleadmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.peopleadmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.peopleadmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careeropportunities.kelowna.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentopportunities.okanagan.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uleth.peopleadmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employment.rdc.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglascollegecareers.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-capilanou.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.vcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnv.peopleadmin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.bcit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.fanshawec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.dnv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employment.rdpolytech.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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