k12tech.pearson.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:19:2c:a9:38:a8:d7:9e:9a:f9:c8:89:e9:e0:19:35:8a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=k12tech.pearson.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:19:2c:a9:38:a8:d7:9e:9a:f9:c8:89:e9:e0:19:35:8a
Serial Number (int): 323301711168064192987069136915971129816458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:1d:17:9b:49:0e:d0:3a:7f:3a:a4:49:c8:32:42:b8:29:2b:64:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:91:39:69:40:32:d2:60:4d:85:88:f3:38:8a:a9:94:c4:0c:dc:9b
Fingerprint (sha256): 3f:45:41:c1:a1:bb:45:06:5d:57:86:17:65:79:c9:a2:21:e1:a9:cc:7a:29:01:f3:16:67:57:d9:78:a6:4b:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate k12tech.pearson.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k12tech.pearson.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.successmaker.com
k12tech.pearson.com

Other certificates including the domain name pearson.com

(limited to 100 certificates)
staging.lomt.pearson.com
www.pteacademicactive.pearson.com
isu-per01.bizsys.pearson.com
myinsights.in.pearson.com
dplogt2.pearson.com
b3vhprod01.pearsoncmg.com
pdms-ppe.cms.pearson.com
go1.pearson.com
myinsights.in.pearson.com
*.jiveon.com
resources.prg.pearson.com
5674976526991360-fe4.pantheonsite.io
*.assessment.pearson.com
quad.pearson.com
5674976526991360-fe4.pantheonsite.io
topaz.productops.pearson.com
vdoe.pearson.com
hepq.pearson.com
ukedg.webmail.pearson.com
5674976526991360-fe4.pantheonsite.io
staging.api.pearson.com
global-redir.pearson.com
asc.bizsys.pearson.com
integration-eu.soa.pearson.com
staging.lomt.pearson.com
www.pearsoned.com
hepq.pearson.com
k12tech.pearson.com
5674976526991360-fe4.pantheonsite.io
sancert4-gns.pearson.com
iml.pearson.com
site-directory.ptns.pearson.com
eu.pearson.com
asc-dev01.bizsys.pearson.com
integrations.pearson.com
san-11-s7.tlsprovisioning.exacttarget.com
dev.estyle.pearson.com
uxframework.pearson.com
elibrary.in.pearson.com
pimsextranet.pearson.com
act-dashboard-smk.assessment.pearson.com
assessment-builder-bff-xl-dev.pearson.com
obi.bizsys.pearson.com
myapps-us.pearson.com
structuredauthoring.pearson.com
learninganalytics.pearson.com
ipma-crp01.bizsys.pearson.com
pobl-idamservice-int.pearson.com
peopledata.pearson.com
isu-uat01.bizsys.pearson.com
*.jiveon.com
test.teseisr.es.pearson.com
obi-dev01.bizsys.pearson.com
sancert1-pmc.pearson.com
obi-pch01.bizsys.pearson.com
sancert1.prd-prsn.com
oam-per01.bizsys.pearson.com
5754818358411264-fe2.pantheonsite.io
www.bilarabi.pearson.com
sancert1-ma-lt.pearson.com
store.comptia.org
myvirtualchild-ppe.pearson.com
san-pmc.pearson.com
cert-tds.pearson.com
www.connectionsacademy.com
asc-pch01.bizsys.pearson.com
*.eportfolio.pearson.com
ipay2.bizsys.pearson.com
ccg-uat01.bizsys.pearson.com
shingo.pearson.com
lo3ref-mystack.pearson.com
bronte-io-dev.pearson.com
hyp-uat01.bizsys.pearson.com
us-iowac-vsa5550-03.pearson.com
www.cosmo.pearson.com
sancert4-gns.pearson.com
identity-internal.pearson.com
dplogt2.pearson.com
asc-sit01.bizsys.pearson.com
partner-courses-staging.pearson.com
test.data.pearson.com
pace.pearson.com
ftp.successmaker.com
pqg.pearson.com
sandbox.use.data-ingestion-api.pulse.pearson.com
go1.pearson.com
dcatdev.pearson.com
staging-structuredauthoring.pearson.com
nj2-con-mystack.pearson.com
fed-oam-per01.bizsys.pearson.com
aimsweb2.pearson.com
de.pearson.com
jobs.pearson.com
telemetry-stg.pearson.com
sancertgcs.pearson.com
5706803308396544-fe3.pantheonsite.io
myvirtualchild-qa.pearson.com
acg-sup01.bizsys.pearson.com
iam-dev.pearson.com
ipm.bizsys.pearson.com

Certificate

The complete raw certificate details for k12tech.pearson.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t7rn0p/zStFUChA0Ec3
uRiDny3CgG59s6kiNa64NeDDCjXieaB45FYz141SEkZXiia61azRCKxafomJiIQn
6gx9OXUKh6/l2IhPke+z6IGIShnmBFF+AdhkdXxYzYv7gbzbKXivopbczg+76yex
aFQVvuM+kBtWc414EV5vf3i/Xn6hnJxj+O8720MzJ/s+ZpGImiErhZ3fg13Bl+9h
AMheEW+nS/fdnfbDxYTVezPWZwg2zKdS2JMj7INLG9QoB2TuCJwjgXrCnR+TxOeg
wdiPL/VolHEecJmQxhRYjsBezHabk22xFPpBaqv7sHwhNuJ8Wc6uv4jbEsSIVFoF
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323301711168064192987069136915971129816458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 17:40:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 17:40:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k12tech.pearson.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26619970188789424195294397613716126761936701363436559700800712472291773930985945281506714106148857101145714471488540909582467303082726054428457452299929973283927962548242312964974522046877183884654779369673697973190227931770293451764222314784724559887924739077314769928906316654026720027380314103815342174356676732808629049051437148166496377853723623755436298066780352524390014096564018681510131531279722795572339825572310802898817716306491064445491923283320539312702942414400639828800675215419068300660606466275329951170878035693936130824630391284231509752370724470239178920685104867990064748993489974413090835006941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a91d179b490ed03a7f3aa449c83242b8292b642c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.successmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12tech.pearson.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001681a2a60050000040300473045022100acdae5c8d72d59d0d0d3720adf0dd0b595f733472406d39e838b53cbefb32dbf022005b2c75aa0c492cae0e75851e96e52c889f8de191255ba478ef0a0b17454786000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001681a2a5ffc00000403004830460221009eb5f80a1f95ec8d7a8367684ae2339c01f76ec7f0201cea97bc5208d4ab3e100221008c9e13b492c858fe962e18ebeaad4e1132e617950709cce4339dee479165ad10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020ef14e2e7bd4079553affa05031e0c69c52692564914adfa145b7d28c6aa0f2e153f0c0fb1be8d587319f177c99c8d2ef837091d68ed15a9410a6786666a4354d515d27bcf3c3d363a9371674410529eeed12d575bb293147700b1380cbd4a03b180fb79e0a80a389e6a12dd1c2d4de804bb5d6bc6a56176b82ab3e5f903175d6179513bb842bc1a013f98419d5d24c6374e093d95d9f25469b0abb2740a70fc7a69d852da3590014a8b868c5ab9a905989877d705490b55e1e312e2e166868eecd2123b9f12947b0f47d5c87a8fdb03522c208a2fdedc9c7d78622e6caf4f850dcbabd905c9f16135c86a7a5d78181b798292ba566faac237fc1d7ccac4cf9