*.masterschool.org

- The Master's School, Inc. -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 0a:9b:e7:27:27:8b:f8:fa:c7:c7:b0:f3:34:9b:ed:76 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Master's School, Inc.

Organization: The Master's School, Inc.
State / Province: Connecticut
Locality: West Simsbury
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:9b:e7:27:27:8b:f8:fa:c7:c7:b0:f3:34:9b:ed:76
Serial Number (int): 14101774309677970448565726024564469110
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 42:97:cb:06:7e:6d:96:44:fd:ec:7e:af:c4:0d:03:3a:d0:cb:81:0e
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 6f:22:99:b6:0d:43:6d:6a:47:57:28:e5:40:7a:08:72:fd:0d:aa:76
Fingerprint (sha256): ba:cb:3f:70:9a:8e:e2:94:2f:43:02:c2:4c:01:c1:2d:53:54:78:4f:ad:10:bb:2a:e3:0c:60:05:7c:f2:08:66

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g6.crl

Check the revocation status for certificate *.masterschool.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.masterschool.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.masterschool.org
masterschool.org
tms-rdms1.masterschool.org

Other certificates including the domain name masterschool.org

(limited to 100 certificates)
mail.masterschool.org
www.masterschool.org
komarek94.org
academyofthecanyons.net
www.arschoolforthedeaf.org
admin.stanthonyeagles.org
masterschool.org
*.masterschool.org
www.sanjoseprep.org
tms-it.masterschool.org
mail.masterschool.org
mail.masterschool.org
academyofthecanyons.net
tms-it.masterschool.org
bradley.etbsd.org
academyofthecanyons.net
admin.masterschool.org
tms-it.masterschool.org
www.ccoe.k12.ca.us
masterschool.org
tms-it.masterschool.org
www.grandville.k12.mi.us
academyofthecanyons.net
mail.masterschool.org
masterschool.org
mail.masterschool.org
www.grandville.k12.mi.us
*.masterschool.org
masterschool.org
ochoaprep.erusd.org
academyofthecanyons.net
academyofthecanyons.net
www.unionsquareacademy.org
masterschool.org
www.icabh.org
www.ciudaddelosninoscr.org
www.narbonnehsgauchos.com
admin.taylor.etbsd.org
sa.snowlineschools.com
admin.icabh.org
admin.bme.snowlineschools.com
mail.masterschool.org
mail.masterschool.org
mail.masterschool.org
academyofthecanyons.net
masterschool.org
*.masterschool.org
TMS-ADFS.masterschool.org
academyofthecanyons.net
samuelgompersms.net
admin.masterschool.org
web.euroamericano.edu.mx
masterschool.org
www.masterschool.org
www.grandville.k12.mi.us
mail.masterschool.org
*.masterschool.org
academyofthecanyons.net
www.masterschool.org
academyofthecanyons.net
athletics.rsu14.org
academyofthecanyons.net
icabh.org
academyofthecanyons.net
*.masterschool.org
academyofthecanyons.net
academyofthecanyons.net
doe.as
academyofthecanyons.net
academyofthecanyons.net
mail.masterschool.org
mail.masterschool.org
bcsdk12.org
finalsite.org
admin.masterschool.org
academyofthecanyons.net
masterschool.org
tms-it.masterschool.org
academyofthecanyons.net
poecenter246.com
www.masterschool.org
masterschool.org
www.masterschool.org
masterschool.org
mail.masterschool.org
mail.masterschool.org
mail.masterschool.org
www.dolemiddleschool.org
tms-it.masterschool.org

Certificate

The complete raw certificate details for *.masterschool.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtt9dAkZhpp5vzbJYOvN
lyRX69xGkWICCxYbcw1YyZVoI8O84TVjrCjPG79QF9K6eEjT6Sa8jldoWTciWbgu
mcyjWOVXd6cvoXD0a/N3XuWQltzacv2PcMSNta7qbSkICqDyuPucZurYpUP68s8Y
oxAggK4v6pPuvMhGioKArYclXGNj8Jz5uKCq62PBrAMJRx/ECXEczU2Sb6jrCsmB
t0z3OykHZKKP+66kxyReybTVSeuEk6jwLMmSbbpDcGBjK0Lpu7eeC2ghrDxux0dP
wGVtFBD1X9IrEK/nhF+ScRJ075cXmrHo2VWoE1NYPIL7qxNYogDjvak59S/TGDDa
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14101774309677970448565726024564469110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Simsbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Master's School, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.masterschool.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24598465741921812916181706059116747947835790666202907503652881546760565247071847243946790004747505651975248220709824437242749737171727951787987106457659676462628106309539252146069475463362290394536776946009730559500778995693544942034152913035169520943068775418912181175184437980465843266140227541824166143787873901444012427614653579701057490819164773917564201255742426554845365679858888862950134266749862097991436475729452197607856464157179681226435297834281421142998137725167037704229081217332287982896327919942884368905749932288826089316922409304355444416964766068772367846289963783267452414655737172074595571784313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4297cb067e6d9644fdec7eafc40d033ad0cb810e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-rdms1.masterschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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