sti.hackettstown.org

- Hackettstown Board of Education -

Issued by ipsCA Level 1 CA

About this certificate

This digital certificate with serial number 10:99:a6:79:7a:26:d5:bc:1b:1d:18:36:10:7d:25:f8:5c:b9:f6:7f was issued on by ips Certification Authority.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • If present, the IAN extension must contain at least one entry (RFC 5280: 4.2.1.7)
  • If present, the SAN extension MUST contain at least one entry (RFC 5280: 4.2.1.6)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Hackettstown Board of Education

Organization: Hackettstown Board of Education
Organization unit: MIS
State / Province: New Jersey
Locality: Hackettstown
Country: US

ips Certification Authority

Organization: ips Certification Authority
Organization unit: Certificaciones
State / Province: MADRID
Locality: MADRID
Country: ES

This certificate has expire since

Certificate Details

Serial Number (hex): 10:99:a6:79:7a:26:d5:bc:1b:1d:18:36:10:7d:25:f8:5c:b9:f6:7f
Serial Number (int): 94770368324555145185798144455825253849047365247
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 7f:76:36:49:b1:0a:09:0f:a9:b1:ec:3d:32:9e:71:56:67:26:12:f9
AuthorityKeyId: 7d:9e:6b:0e:fc:13:e1:c4:8b:a7:7f:61:ae:60:21:cf:cd:a0:d3:06

Fingerprint (sha1): 3d:93:db:ef:98:59:a7:82:1e:f3:11:d0:1a:1e:47:78:51:d7:bd:06
Fingerprint (sha256): 42:d7:d5:86:4a:67:28:fa:9b:dd:3d:35:2c:37:55:4b:3d:d5:84:95:a1:ea:d5:68:b8:6f:cf:c7:cb:1b:de:93


Revocation information

OCSP Server: http://ocsplevel101.ipsca.com/
CRL Distribution Point: http://level101.ipsca.com/crl/ipscalevel1.crl
CRL Distribution Point: http://level102.ipsca.com/crl/ipscalevel1.crl

Check the revocation status for certificate sti.hackettstown.org

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sti.hackettstown.org

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

16 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name hackettstown.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sti.hackettstown.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCuH1y+9gjvt5pYSmRmCiRBIypb
7jSCRqKf3SdJfdd7ikuCSyi8cSNUxI3tSkkt7myArkzxkTgj3hbX7RWF9M1g54+8
5VKX1+AOdpnwrkmmt0cRdtJHgtTeM8wmSKZJE7G1VonHOM874YXtA34LxrPfsADe
XuuD83/gPGnTjACNKQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94770368324555145185798144455825253849047365247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ips Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certificaciones'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipsCA Level 1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-12-29 15:57:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-02-03 15:57:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hackettstown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hackettstown Board of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sti.hackettstown.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 122272983963987411838975340055437689520423733965745325467214676486496429831293883984232792307105058340300439850151149999192394954406545704231612283267317872074118907670190120475439883758354499593546948354023831404266396409205488480728607906345872841273434096529717544745792430014473869135837079226758526438697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f763649b10a090fa9b1ec3d329e7156672612f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d9e6b0efc13e1c48ba77f61ae6021cfcda0d306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.13 (netscape-comment)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Organization Information NOT VALIDATED. LEVEL1 Server Certificate issued by https://www.ipsca.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.2 (netscape-base-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.4 (netscape-ca-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.3 (netscape-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/revocationLEVEL1.html?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.7 (netscape-cert-renewal-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/renewalLEVEL1.html?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.8 (netscape-ca-policy-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://level101.ipsca.com/crl/policyLEVEL1.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://level101.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://level102.ipsca.com/crl/ipscalevel1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsplevel101.ipsca.com/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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