powerschool.howell.k12.nj.us

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:dd:ea:dc:d4:5f:b6:4f:40:bd:87:57:39:eb:de:99 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=powerschool.howell.k12.nj.us

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:dd:ea:dc:d4:5f:b6:4f:40:bd:87:57:39:eb:de:99
Serial Number (int): 2481489181290651375488763022971494041
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 96:a3:50:19:89:c4:05:ae:3d:6f:1b:2b:8f:89:b3:bd:82:24:4f:39
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 1e:8a:18:65:13:fc:1d:45:4f:ad:5a:84:1b:42:3e:7d:5f:96:09:95
Fingerprint (sha256): 88:5b:6b:bd:92:93:eb:83:e4:21:02:cc:8b:0b:1a:57:c9:a9:20:d3:de:b8:73:80:77:a3:91:c9:8a:df:c8:84

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate powerschool.howell.k12.nj.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for powerschool.howell.k12.nj.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

powerschool.howell.k12.nj.us

Other certificates including the domain name howell.k12.nj.us

(limited to 100 certificates)
duff.garvey.k12.ca.us
1fairfield.org
1fairfield.org
cad.dcs.edu
admin.cad.dcs.edu
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
wifi.howell.k12.nj.us
cognosweb.howell.k12.nj.us
www.howell.k12.nj.us
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
*.howell.k12.nj.us
*.howell.k12.nj.us
admin.ardena.howell.k12.nj.us
*.howell.k12.nj.us
howell.k12.nj.us
1fairfield.org
admin.sre.dcs.edu
jhe.dcs.edu
*.howell.k12.nj.us
admin.bms.dcs.edu
grahames.org
admin.sre.dcs.edu
wifi.howell.k12.nj.us
powerschool.howell.k12.nj.us
admin.ajhs.dcs.edu
howell.k12.nj.us
aldrich.howell.k12.nj.us
admin.cad.dcs.edu
admin.ahs.dcs.edu
powerschool.howell.k12.nj.us
mss.howell.k12.nj.us
powerschool.howell.k12.nj.us
powerschool.howell.k12.nj.us
howell.k12.nj.us
howell.k12.nj.us
powerschool.howell.k12.nj.us
wifi.howell.k12.nj.us
aldrich.howell.k12.nj.us
*.howell.k12.nj.us
*.howell.k12.nj.us
aldrich.howell.k12.nj.us
powerschool.howell.k12.nj.us
*.howell.k12.nj.us
admin.dms.dcs.edu
dhdp.dcs.edu
www.howell.k12.nj.us
excel.dcs.edu
mail.howell.k12.nj.us
weec.dcs.edu
powerschool.howell.k12.nj.us
admin.jhe.dcs.edu
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
admin.wde.dcs.edu
wifi.howell.k12.nj.us
1fairfield.org
admin.lsm.dcs.edu
1fairfield.org
ardena.howell.k12.nj.us
admin.excel.dcs.edu
1fairfield.org
howell.k12.nj.us
admin.howell.k12.nj.us

Certificate

The complete raw certificate details for powerschool.howell.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/0j4//5CaHTZFF4SRUs
7ifmaQdmLhd45qzd3wf+tyVEfF0+wb4IjdlTPvJrOam+teVoZuRSozGNuV3vpXB9
0Oq+2DvvF8K0dOMAL8AzlrxDOvbH/QhUWI8XHdMQHHDSlTLiUArOpVGpfheitDHf
PdFJHoWRVjnlv38K87Ymqi/oTc2belBqDseoEzIdo9HqGAxGCp8iFEsI7oFyHADG
ruH7jHVSiANPb1RhZ4Q1ZNBm7X9+QvwGFug1yntMIvZCdt/pIrhC/WfqivpY6mhD
XsNRu+/3B5KGUyttJQgEP/I2sGsxpXI21HZTRlDw59llb/to9OprBY68OAzrr2b/
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2481489181290651375488763022971494041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'powerschool.howell.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17671952474200200705981601882272034568743507976575836516552893494394868621966680028710548959806293752819842896244391806598276820962916481927414375732835551044624898998022737538536041428515030189227925768373904953779034747028616104539684441525434877234052187740696706810209505930547832348214309130323641352342272013984100747451114281757399786797671955313278844014248522204795813343161302136499356298026857032337714369544776776648131172373562047506542341683220874845198406678454184339926658886765694293892697977092385111373219163696697088021389363716551844766933984466501028632460402469502043150747999506795927718789027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96a3501989c405ae3d6f1b2b8f89b3bd82244f39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerschool.howell.k12.nj.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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