powerschool.howell.k12.nj.us

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 09:87:cd:34:31:33:16:d2:27:39:6b:8a:96:66:39:84 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=powerschool.howell.k12.nj.us

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:87:cd:34:31:33:16:d2:27:39:6b:8a:96:66:39:84
Serial Number (int): 12668174067026172386919886148516329860
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:4d:a8:70:71:f2:c9:8a:20:1e:6c:1c:fb:77:5c:7e:e3:44:d3:b6
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 1e:4c:d8:5e:87:db:42:15:e9:5e:21:e1:9d:8d:3d:ca:68:dc:1d:bf
Fingerprint (sha256): ad:f2:39:c1:3d:74:23:7d:7d:f1:20:c9:47:ce:3d:2b:c2:c1:9a:be:c7:27:9b:6d:be:ae:a1:1a:1a:3d:49:7d

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate powerschool.howell.k12.nj.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for powerschool.howell.k12.nj.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

powerschool.howell.k12.nj.us

Other certificates including the domain name howell.k12.nj.us

(limited to 100 certificates)
duff.garvey.k12.ca.us
1fairfield.org
1fairfield.org
cad.dcs.edu
admin.cad.dcs.edu
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
wifi.howell.k12.nj.us
cognosweb.howell.k12.nj.us
www.howell.k12.nj.us
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
*.howell.k12.nj.us
*.howell.k12.nj.us
admin.ardena.howell.k12.nj.us
*.howell.k12.nj.us
howell.k12.nj.us
1fairfield.org
admin.sre.dcs.edu
jhe.dcs.edu
*.howell.k12.nj.us
admin.bms.dcs.edu
grahames.org
admin.sre.dcs.edu
wifi.howell.k12.nj.us
powerschool.howell.k12.nj.us
admin.ajhs.dcs.edu
howell.k12.nj.us
aldrich.howell.k12.nj.us
admin.cad.dcs.edu
admin.ahs.dcs.edu
mss.howell.k12.nj.us
powerschool.howell.k12.nj.us
powerschool.howell.k12.nj.us
howell.k12.nj.us
howell.k12.nj.us
powerschool.howell.k12.nj.us
wifi.howell.k12.nj.us
aldrich.howell.k12.nj.us
*.howell.k12.nj.us
*.howell.k12.nj.us
aldrich.howell.k12.nj.us
powerschool.howell.k12.nj.us
*.howell.k12.nj.us
admin.dms.dcs.edu
dhdp.dcs.edu
www.howell.k12.nj.us
excel.dcs.edu
mail.howell.k12.nj.us
weec.dcs.edu
powerschool.howell.k12.nj.us
admin.jhe.dcs.edu
powerschool.howell.k12.nj.us
adelphia.howell.k12.nj.us
admin.wde.dcs.edu
wifi.howell.k12.nj.us
1fairfield.org
admin.lsm.dcs.edu
1fairfield.org
ardena.howell.k12.nj.us
admin.excel.dcs.edu
1fairfield.org

Certificate

The complete raw certificate details for powerschool.howell.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8DBS92D+vhE4HUrgDjh
/s93p/67FFeuXsudDNTWj5peq4cryhThYVOhL4JHamEJJv7NSgJskwPybIPOSsIy
XuqIgEfrxj4lL65Ga0g9TB8aonurlSYx4hOsuciW7HOXb0noSrBXcS1FO1ItM+iD
oVupCJYx6TvNNf3Jo87h16RnPSO58gID93DV5vjVFNVXLSOPMFzbQB70RMB8yRmK
WTRmYsc0eP3MtLB2o6mIkZLmURrAnZt6d4lokVUKLhu6nCzHCcWiprpsmcqjgd6O
LMceREC42CLxwNcbiW8efMcvv6JBmBHlrhf2E6OWXqyKQN85ob0/1v+rOo9k+/Ia
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12668174067026172386919886148516329860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'powerschool.howell.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21176847993924097852007845360377661587305177804075146305110989267456086334962260463740212262514651766038620887575123725352423242410249684353421216899994744181778969795031841743350768599820313202781466607663775365861131606347527054968855918952486463208657097718267770956870214532469187381243362899523778081451478214980018744342034052527966325384288317567184928561866442077076474311149699391358499852365487944698178916859560739135657283123311342835063288887551091640385938354001692008594457512433541178486157982837369221313632953809377926563791009063434053190989974225848751846996617192736507261506063969734793503054573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							564da87071f2c98a201e6c1cfb775c7ee344d3b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerschool.howell.k12.nj.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ec9b24d35942b2ebd8cc99fc9783e5b549967de0d592a5f0fe91a72121127b885ed9a70cdea3ab07e36677a5129c3b8790894b5d6eecec08e360b647c1dc43469e92cdd646df72717b52e964079bac5690c84189387fdb7a170508489bff152fbeb8b4e8993390e275fb307d89440c2f0688e192b8627a4a97c38c1151559d7d56187af878406b38cf75076731414ecff975220d363fcf30d12c7b0a20f5f7008d193aa5ed86a582b22ce1c68128f9e09e596cae6a09b032f389247ff5459c6b50c11834f274f790fa5fe32a7383e519ca4c6f00eb9bf6aeac822fd6ccc2aeeae1094c8e12d1166ff970f3c05b5b9f49dfbbe01fadb2a584b5949239fbffe52