monticello-high.sjsd.org
Issued by R3
About this certificate
This digital certificate with serial number 04:4d:79:f0:85:e7:6e:3b:eb:aa:24:c6:f1:f5:65:39:c5:7c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=monticello-high.sjsd.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4d:79:f0:85:e7:6e:3b:eb:aa:24:c6:f1:f5:65:39:c5:7cSerial Number (int): 374812971434585570069493304383928113153404
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 85:96:88:f2:c7:96:e0:ab:a3:30:8c:6e:85:34:30:51:af:bc:52:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 35:7d:b3:db:e5:9f:c8:e1:a2:9e:01:e4:fe:67:8b:f2:c1:7d:97:46
Fingerprint (sha256): 42:9b:ae:95:82:2e:d5:41:de:a2:13:1f:f2:c0:78:61:41:99:f6:95:2b:b9:fb:5a:e4:57:19:8b:b3:f7:e5:33
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate monticello-high.sjsd.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for monticello-high.sjsd.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
monticello-high.sjsd.org
Other certificates including the domain name sjsd.org
(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org
Certificate
The complete raw certificate details for monticello-high.sjsd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISBE158IXnbjvrqiTG8fVlOcV8MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTQwNTE2MDJaFw0yNDAyMTIwNTE2MDFaMCMxITAfBgNVBAMT GG1vbnRpY2VsbG8taGlnaC5zanNkLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBALXOwXhOX8scLDvlGAvWlzsKNzoEUuvJJ/LR1sbUhgJyFsCUUvxz u3TY6D1Tdny4Eng9dem/fNhoCymSSBiMODV6yK1UNs7tiy3YtYjvzs0YSJZ54EsI bZwtww7CmwqtI3b/ymO56Rwttrq+dRDriH87xYMfotcGJimF3VIl0ZogsXn3MPFU Z3WaGabBpbQlnzWnWbQQGESCSKWuuNsm9K9h7QmRO4YzwZUW6ZwPldNcSoYAVSKV vHio81hGWAUIRh44I6sSTYwjMQE6eJ4FeC0LHOGzM+b0SaqAOoQOOMz5l3UlpELl PXzFonn0KAtk2AvRU8zSQpDxQTzyIv0UfC3x/HvGedonwqLIAnlPGADLVRnGiYFJ d6Q/WEDwK5QLfQtuowHcDGnJ7qJglkhPFqgjm9YbTse5BdjtFlFhhj+YSw+CXNxv Xj2nBeHn07OBTsBbVpgMIa8ZSY9E2Gjz+Nt44v6FvqCHtHA0kowpR8s5I3845Sbr HueUv8bbh3y0dOAmcW1cdyOiI2ax0zRK2XIJsr1UwCKX4IhPwwHE4e3APwJe71nA AypQzfVrtyoLRK1keUvpZhYEId3skLg1BK+IRQBUCdknv0sn5WAYeHff2xu/Vf+t agQB9cYgomO/9OZHN51wiuOuhJiPeYTlLNFqoCc6vsvvjgcK98YA9cGVAgMBAAGj ggIZMIICFTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIWWiPLHluCrozCMboU0MFGv vFKWMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCMGA1UdEQQcMBqCGG1vbnRpY2Vs bG8taGlnaC5zanNkLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB 1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABi8x4/SIAAAQDAEYwRAIgNGiDhde39ihdvh9sVMSPJKbjpAAz7SoUHtNg1dxx PkUCIAKJ7wwYz69Sezt7FpRPzLzPHVa/k2mtkUutUYhPQjDmAHYA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLzHj9HgAABAMARzBFAiEA3vKCCOzX Ih5zPBKdoxJPML9qaTkdeWerkYCRkzidUZcCIHAk/PhEiakppfleOSVgg4JJCAYh SDz71FL5c3AFAoJEMA0GCSqGSIb3DQEBCwUAA4IBAQBEDiHIHjp42HGgAOJiR5ku jTmTQMheEJfpeDzHPsPxa5FPGwE1t1IXLWvKsvX9kab6mAN9SZ/ejhe9rhuWBjAT U/dz0sCvY0Xvg5hgzK9SLZJjY99r3PPFiMmboP1e47cc+aNXqYRBj6SSBO817S5+ BHhpN3oenpevlr6kZtvuxi0x6KaYBh06AY7hnBTHw6qF1EXhQgTE2+YoFHYSpOE1 0DKOZMEB3VIcp5Xyd3ZWLKohg9NaDS1PMMEcVLPlf6+z8T031Q57kFEPxxWwGoo9 BnREtvBnvAuVXVbC3rZ2E4M7HxU2wcc7camta/42UwEz1Xpi5bsAAHYJ/YD+PJQQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtc7BeE5fyxwsO+UYC9aX Owo3OgRS68kn8tHWxtSGAnIWwJRS/HO7dNjoPVN2fLgSeD116b982GgLKZJIGIw4 NXrIrVQ2zu2LLdi1iO/OzRhIlnngSwhtnC3DDsKbCq0jdv/KY7npHC22ur51EOuI fzvFgx+i1wYmKYXdUiXRmiCxefcw8VRndZoZpsGltCWfNadZtBAYRIJIpa642yb0 r2HtCZE7hjPBlRbpnA+V01xKhgBVIpW8eKjzWEZYBQhGHjgjqxJNjCMxATp4ngV4 LQsc4bMz5vRJqoA6hA44zPmXdSWkQuU9fMWiefQoC2TYC9FTzNJCkPFBPPIi/RR8 LfH8e8Z52ifCosgCeU8YAMtVGcaJgUl3pD9YQPArlAt9C26jAdwMacnuomCWSE8W qCOb1htOx7kF2O0WUWGGP5hLD4Jc3G9ePacF4efTs4FOwFtWmAwhrxlJj0TYaPP4 23ji/oW+oIe0cDSSjClHyzkjfzjlJuse55S/xtuHfLR04CZxbVx3I6IjZrHTNErZ cgmyvVTAIpfgiE/DAcTh7cA/Al7vWcADKlDN9Wu3KgtErWR5S+lmFgQh3eyQuDUE r4hFAFQJ2Se/SyflYBh4d9/bG79V/61qBAH1xiCiY7/05kc3nXCK466EmI95hOUs 0WqgJzq+y++OBwr3xgD1wZUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 374812971434585570069493304383928113153404 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 05:16:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 05:16:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monticello-high.sjsd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741710458484619992275604445208793860606329311469338246402383686654370796016503887517429327026550527608115162735283315235297591732682861888891365559755643045561110250876735206791409748521417175765099301425609850157096759128221779368137346716815063061058908957231254250843240791376800457912529450463283590791226651186290457128715834054529333345134539878813406212294553928163692342673669906287391355305307898606776186485973760812384320352714426684091139108812302152958782484114485055482309583658627551817047391075586394796929791292729068390303459603400360253232130899833214193716620022104629514964292458151295646851117287912450488357001848749941761706026806636429095562502787164332942144911498892102342464607389800297994140790523003467967518720106743028283655343322748778246063463813855833103680009112778973768692607183593552425980029857460922798578424290329521826568817111722533272663173409232729002768122107060778837281738081660182838949691600401292398868125562766602476060776611888182497518431953623612220516026878441927219352779031753314380323268606313364659211458657644630078603569620369663010007166964185041829140041712451040423849961171330236040763342451494552612565476192077351071510407087770636603504471783005532200698136347029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 859688f2c796e0aba3308c6e85343051afbc5296 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monticello-high.sjsd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcc78fd220000040300463044022034688385d7b7f6285dbe1f6c54c48f24a6e3a40033ed2a141ed360d5dc713e4502200289ef0c18cfaf527b3b7b16944fccbccf1d56bf9369ad914bad51884f4230e6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcc78fd1e0000040300473045022100def28208ecd7221e733c129da3124f30bf6a69391d7967ab91809193389d519702207024fcf84489a929a5f95e392560838249080621483cfbd452f9737005028244 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00440e21c81e3a78d871a000e26247992e8d399340c85e1097e9783cc73ec3f16b914f1b0135b752172d6bcab2f5fd91a6fa98037d499fde8e17bdae1b9606301353f773d2c0af6345ef839860ccaf522d926363df6bdcf3c588c99ba0fd5ee3b71cf9a357a984418fa49204ef35ed2e7e047869377a1e9e97af96bea466dbeec62d31e8a698061d3a018ee19c14c7c3aa85d445e14204c4dbe628147612a4e135d0328e64c101dd521ca795f27776562caa2183d35a0d2d4f30c11c54b3e57fafb3f13d37d50e7b90510fc715b01a8a3d067444b6f067bc0b955d56c2deb67613833b1f1536c1c73b71a9ad6bfe36530133d57a62e5bb00007609fd80fe3c9410