powerschool.gpcsd.ca

Issued by Thawte DV SSL CA

About this certificate

This digital certificate with serial number 14:ff:fb:59:c6:3d:43:c0:5a:19:24:a6:ac:fa:fc:79 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=powerschool.gpcsd.ca,OU=Go to https://www.thawte.com/repository/index.html+OU=Thawte SSL123 certificate+OU=Domain Validated

Thawte, Inc.

Organization: Thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 14:ff:fb:59:c6:3d:43:c0:5a:19:24:a6:ac:fa:fc:79
Serial Number (int): 27913693612093775208598165396785921145
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ab:44:e4:5d:ec:83:c7:d9:c0:85:9f:f7:e1:c6:97:90:b0:8c:3f:98

Fingerprint (sha1): ff:fc:82:2e:22:74:2b:88:5f:a8:c9:ab:0c:c7:11:72:f9:59:38:54
Fingerprint (sha256): f6:25:4b:6b:02:d4:5f:83:12:fc:7c:ba:01:a7:c9:11:9f:0f:88:69:18:94:a6:77:8d:fa:3a:30:cb:c5:83:69

Issuing Certificate URL: http://svr-dv-aia.thawte.com/ThawteDV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-dv-crl.thawte.com/ThawteDV.crl

Check the revocation status for certificate powerschool.gpcsd.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for powerschool.gpcsd.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

powerschool.gpcsd.ca

Other certificates including the domain name gpcsd.ca

(limited to 100 certificates)
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
dossier.gpcsd.ca
admin.stm.gpcsd.ca
stemarie.gpcsd.ca
sportsacademy.gpcsd.ca
gpcsd.ca
admin.stjohnbosco.gpcsd.ca
printshop.comoxvalleyschools.ca
helpdesk.gpcsd.ca
comoxvalleyschools.ca
stjohnpaul.gpcsd.ca
gpcsd.ca
webmail.gpcsd.ca
admin.holycross.gpcsd.ca
powerschool.gpcsd.ca
certauth.adfs.gpcsd.ca
admin.annehathaway.amdsb.ca
powerschool.gpcsd.ca
moodle.gpcsd.ca
obrienlakewest.gpcsd.ca
tsc.gpcsd.ca
gpcsd.ca
helpdesk.gpcsd.ca
www.wexford.edu.mx
webmail.gpcsd.ca
mdm.gpcsd.ca
mdm.gpcsd.ca
ps26.jcboe.org
helpdesk.gpcsd.ca
breeze.gpcsd.ca
helpdesk.gpcsd.ca
powerimage.gpcsd.ca
powerschool.gpcsd.ca
gpcsd.ca
gpcsd.ca
admin.annehathaway.amdsb.ca
breeze.gpcsd.ca
webmail.gpcsd.ca
breeze.gpcsd.ca
gpcsd.ca
dossier.gpcsd.ca
admin.kateri.gpcsd.ca
webmail.gpcsd.ca
tsc.gpcsd.ca
portal.gpcsd.ca
helpdesk.gpcsd.ca
admin.stjohnpaul.gpcsd.ca
stcatherine.gpcsd.ca
obrienlakewest.gpcsd.ca
gpcsd.ca
esb.gpcsd.ca
gpcsd.ca
esb.gpcsd.ca
admin.kateri.gpcsd.ca
powerschool.gpcsd.ca
esb.gpcsd.ca
esb.gpcsd.ca
webmail.gpcsd.ca
admin.stemarie.gpcsd.ca
helpdesk.gpcsd.ca
www.gpcsd.ca
dossier.gpcsd.ca
dossier.gpcsd.ca
webmail.gpcsd.ca
adfs.gpcsd.ca
admin.holycross.gpcsd.ca
powerteacher.gpcsd.ca
breeze.gpcsd.ca
powerschool.gpcsd.ca
motherteresa.gpcsd.ca
admin.annehathaway.amdsb.ca
www2.gpcsd.ca
admin.ii.jcboe.org
ined.comoxvalleyschools.ca
www.gpcsd.ca
www.gpcsd.ca
admin.obrienlakewest.gpcsd.ca
louisriel.gpcsd.ca
gpcsd.ca
adfs.gpcsd.ca
powerschool.gpcsd.ca
jcsk8.org
helpdesk.gpcsd.ca
admin.kateri.gpcsd.ca

Certificate

The complete raw certificate details for powerschool.gpcsd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudd3YbHImPELk0pbu1xK
wKPeOU+onmCjXN28yvvRsZ7hohEn/PvRO2gAJJnGKCrQlMa7OJLDvYEdTmvh1nEy
Cpmd6qdX2aZ6BEaRC+N0S8OWIlSs3w2PWHHEp7QHgMG6cmUSLk/tzzyYeJ+L3AL0
zdsqGh0lonERC93f1wDdAWJ+KjV+aECDERYD1n9J8d8aTzIjW1B8Ik8NohVaVoQ3
0VRSKNVdFXmWCt/ED4UMmRU993tqsLU1sbSqyTavNCJSy6v7BXcJwynvp6nPKpnc
KLdHk5XhfMxgzYNWsuVSwlqGegPHG4BkXZF8d3cqkUL7u5W99rZd45jPjA6Q7CV/
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27913693612093775208598165396785921145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go to https://www.thawte.com/repository/index.html'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL123 certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'powerschool.gpcsd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23460336828244771981405683662954029394198409744385925474129227917293214334413212583656368540200247020158998911677939335427506854001755798016451244167647622414791645120914530303682509626464949308473700654728878079879124903174751109197758192941746506368029576726453402646277860669163688512282256797238832675125064413473272559209186176792073665652091639813115140320408914535310801575262454993981433395331573391459066361210338278243778353218567317906029640270622559689609239949377881704721968442365625801794835042254391755023986115795478739100110046783649826155363463235407769989844401389015424316077182394481842170724269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerschool.gpcsd.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-crl.thawte.com/ThawteDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab44e45dec83c7d9c0859ff7e1c69790b08c3f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-aia.thawte.com/ThawteDV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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