*.pusd.org

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number d0:8a:64:ea:d5:47:65:e5:df:3c:be was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.pusd.org

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): d0:8a:64:ea:d5:47:65:e5:df:3c:be
Serial Number (int): 252110118650395928221924542
Serial Number lenght: 88 bits, 11 octets

SubjectKeyId: 94:1b:dc:80:38:5c:2f:7b:36:1f:c3:bc:1b:d6:02:a3:46:2d:0d:76
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): b9:e5:f0:b5:67:00:d3:8b:94:10:e6:f3:9c:f4:e9:2b:29:04:49:d6
Fingerprint (sha256): 59:83:04:22:d9:db:c7:38:78:70:c4:01:0d:99:c8:29:fb:bc:e9:85:21:bd:0d:f3:aa:77:d9:6f:d8:3d:09:f1

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.pusd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pusd.org
pusd.org

Other certificates including the domain name pusd.org

(limited to 100 certificates)
ace.pusd.org
www.bradleyschools.org
oce.lifeschools.net
admin.aes.fentressboe.com
admin.bbcms.bbrook.org
ace.pusd.org
childdev.pusd.org
decker.pusd.org
proudtobe.pusd.org
proudtobe.pusd.org
admin.adultlearning.sunrisesd.ca
admin.armstrong.pusd.org
admin.hs.wvsd208.org
admin.hes.huntingtonisd.com
admin.veca.gocats.org
decker.pusd.org
garey.pusd.org
harrison.pusd.org
diamondranch.pusd.org
admin.saspasadena.com
admin.ace.pusd.org
spanish.pusd.org
www.hwrsd.org
www.huntingtonisd.com
admin.allison.pusd.org
bradleyschools.org
www.hilltopprep.org
ngc.lancasterisd.org
admin.bloomfieldcsd.org
admin.eag.zcs.k12.in.us
ps.bsd29j.com
morelandpreschool.moreland.org
lexington.pusd.org
es.moodyisd.org
www.hwrsd.org
admin.morelandpreschool.moreland.org
ms.moodyisd.org
admin.his.huntingtonisd.com
ngc.lancasterisd.org
admin.cvhs.cvsd.org
plummerpanthers.org
admin.aes.cherokee.k12.nc.us
www.morseschool.net
admin.alma.cv.k12.ca.us
allison.pusd.org
burney.hattiesburgpsd.com
admin.cfn.edu.mx
admin.mhs.cherokee.k12.nc.us
www.hwrsd.org
admin.bloomfieldcsd.org
admin.fremont.pusd.org
admin.aes.cvsd.org
admin.allison.pusd.org
inglesdurkheim.edu.mx
frederickadouglass.kippneworleans.org
hsd153.org
admin.allison.pusd.org
admin.adultlearning.sunrisesd.ca
admin.aes.cherokee.k12.nc.us
admin.cvhs.cvsd.org
www.holynamesf.com
ace.pusd.org
admin.hs.gsd.wednet.edu
alcott.pusd.org
painesville-city.k12.oh.us
emerson.pusd.org
montvue.pusd.org
admin.bchs.bradleyschools.org
ms.gsd.wednet.edu
admin.rems.cherokee.k12.nc.us
admin.aes.cvsd.org
huntingtonisd.com
sanantonio.pusd.org
admin.woodley.hattiesburgpsd.com
madison.pusd.org
roosevelt.pusd.org
admin.eag.zcs.k12.in.us
lopez.pusd.org
ace.pusd.org
admin.ahs.cherokee.k12.nc.us
*.pusd.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
riverview.durangoschools.org
admin.bloomfieldcsd.org
bbel.bbrook.org
admin.garey.pusd.org
admin.nbfacademy.org
admin.allison.pusd.org
admin.adultlearning.sunrisesd.ca
admin.milam.hcisd.org
admin.seeo.pusd.org
admin.lng.otsegops.org
webmail.pusd.org
mishpms.hpisd.org
admin.athletics.hattiesburgpsd.com
admin.creekside.cv.k12.ca.us
*.pusd.org

Certificate

The complete raw certificate details for *.pusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA334P3B9xKyBFjHrq8WXp
ifTkGZxtx7egnuEbRaOWHcw32zgAojNbkBl68ZEyV/PxHEsyxKNV0UG1Q62hIxtm
jI4ChwZQiE7XrcYDmCNYkJekAWSEELr/pYMRfD0NV0eEYwlfOrelZDBLHLCQcm8C
hivrkRjGWSMHFzfXcWiP4pPmj5kWI/wT4fEu8rfa3tzLOdRRIehnqVKIz5ROpdXS
rojl9xU3gjSRpCDYObmrfbdxw3DJLvOjxk+U94xBj5QwmSykgPxE9J/W2EjCxt2T
8FPddkItqRL38CFg4F2ER3VNscNuuhUWeIP4ZO/adumHTMVWN0IsRuEmuSVjEWrK
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252110118650395928221924542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 19:05:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-02 19:05:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28213305473101362152554941532776431786361474789723147298808067989934027884659224774753064254846127048734325806595858201784392112585283495583186561449090015947817676193606938002669292318400233072473766412334265349476685121431966757160601924729362332533402558531999597919744754808963032220200109775905198870638891825008300568286584691940217932385903200943424661942072556488871765970544878176730300184629215427342524049188498593225900793886202965216551615969905289562960062866023393597746166494390588573509032968243644297861510602363470036592159268201267576895296065507592733444163334402844699233406751485378961141844499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							941bdc80385c2f7b361fc3bc1bd602a3462d0d76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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