macserver.tmsd.mb.ca

- Turtle Mountain School Division -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:15:1a:1d:16:5e:21:8d:9f:b3:04:6a:a7:f0:a5:3c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Turtle Mountain School Division

Organization: Turtle Mountain School Division
State / Province: Manitoba
Locality: Boissevain
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:15:1a:1d:16:5e:21:8d:9f:b3:04:6a:a7:f0:a5:3c
Serial Number (int): 6755707860142686295520750640322094396
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:77:dc:e7:26:c2:6d:88:91:6b:2b:b9:9a:1a:4e:e3:b1:5a:cb:8e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f6:dd:c1:fe:5d:9f:2c:05:0e:e9:dc:44:1c:5e:8d:6d:ed:c3:6c:ba
Fingerprint (sha256): 81:c5:0d:63:ce:61:38:15:f7:c7:b8:5f:df:8b:22:17:d9:7d:c9:59:0d:f3:28:0a:58:8f:7f:9e:e5:2a:1a:c3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate macserver.tmsd.mb.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for macserver.tmsd.mb.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

macserver.tmsd.mb.ca

Other certificates including the domain name tmsd.mb.ca

(limited to 100 certificates)
boissevainschool.ca
tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
boissevainschool.ca
tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
boissevainschool.ca
tmsd.mb.ca
tmsd.mb.ca
macserver.tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
tmsd.mb.ca
macserver.tmsd.mb.ca
boissevainschool.ca
macserver.tmsd.mb.ca
boissevainschool.ca
tmsd.mb.ca
tmsd.mb.ca
*.tmsd.mb.ca

Certificate

The complete raw certificate details for macserver.tmsd.mb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8HAklqSQUJfNX2bjObZ
NxzQyJYHNwkRRxjk50bmrYxmf2mZalgJsA6btKdAMPQMBqyvzMesdXeq6JG/ghl4
4CSm3UpEWqkiv1WuMneAsf7siKOdad5GnH5lmZzzWCnBDTsfBbBIZqbw1cOTv4Yf
BGITYrUJZjDoidpF9IqdE0W6OBv/QybCGXuXMCS8xkHNwz0KFQaysA0kolOQtFqM
NUN56yeZWntRTiaeiAl4bJoGE0HRMCXYNJaq2qlUVdoWP5gY8kSY+HmC1Yqdjudc
1uPrxAeDqh8xXNJKVLzn4LkQtatLyg7im9ig4kMhfeABziz7OzXtDlkjK637aACz
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6755707860142686295520750640322094396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boissevain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Turtle Mountain School Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'macserver.tmsd.mb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23197152595899052240486954400963303194034694664179249284981353486385619983210515720632507542221055350513757788113435084698460633394210588974350892096425550633828196651002711754198047402728068102752680073630346597970616922304031841721929170183101849470001891997641313797569362232341387460784433222963305213640435757298395490398502517336976490435236644008140788311810912049329112028829314505064408759497410120059722426856167737368753789758851033358685541911838062282941612241637927239469910172220996243709310753094724293269832002707962323731853261462795279359845145170630963727355888437543973243916818542142729257792419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1977dce726c26d88916b2bb99a1a4ee3b15acb8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macserver.tmsd.mb.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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