*.aesd.edu

- Atwater Elementary School District -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:ba:d5:34:21:26:e6:e0:44:3d:97:a1:0a:2b:00:cb was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atwater Elementary School District

Organization: Atwater Elementary School District
State / Province: California
Locality: Atwater
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:ba:d5:34:21:26:e6:e0:44:3d:97:a1:0a:2b:00:cb
Serial Number (int): 15591599452691615874923134401097957579
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:45:3e:b6:70:b4:c9:de:b7:41:c1:a1:e8:26:31:37:25:81:68:16
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): bc:3e:d8:35:ae:53:56:b7:6b:f3:71:64:44:9b:b5:60:39:a0:a8:4d
Fingerprint (sha256): 6a:11:39:7d:0b:ee:b0:87:0c:37:66:b3:05:0e:63:c7:d6:30:e6:89:46:21:ed:3b:32:0b:3c:ec:22:20:6b:93

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate *.aesd.edu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aesd.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aesd.edu
aesd.edu
Wiki.aesd.edu
Aeries.aesd.edu
intranet.aesd.edu
reset.aesd.edu
remote.aesd.edu
tech.aesd.edu

Other certificates including the domain name aesd.edu

(limited to 100 certificates)
byron226.org
admin.aesd.edu
admin.aesd.edu
admin.aesd.edu
owa.aesd.edu
admin.aesd.edu
aeries.aesd.edu
pmes.pennsmanor.org
admin.dpe.dpol.net
admin.aesd.edu
aeries.aesd.edu
admin.benjamin.bendist25.org
remote.aesd.edu
owa.aesd.edu
abi.aesd.edu
mail.aesd.edu
admin.aesd.edu
filter.aesd.edu
admin.aesd.edu
admin.aesd.edu
*.aesd.edu
admin.aesd.edu
byron226.org
admin.aesd.edu
www.olaclaremont.com
owa.aesd.edu
*.aesd.edu
tech.aesd.edu
abi.aesd.edu
*.aesd.edu
admin.aesd.edu
admin.bp.centralunified.org
admin.aesd.edu
benjamin.bendist25.org
aesdaeries1.atwater.local
admin.aesd.edu
owa.aesd.edu
owa.aesd.edu
admin.aesd.edu
owa.aesd.edu
aeries.aesd.edu
admin.olaclaremont.com
aeries.aesd.edu
enrollment.aesd.edu
aeries.aesd.edu
aeries.aesd.edu
aeries.aesd.edu
admin.aesd.edu
filter.aesd.edu

Certificate

The complete raw certificate details for *.aesd.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSkJUxwL8bFtMqW3Ixmz
jbiJgrnhejHom0DOYlfmuJt/f8fkk/dCv2ot0/4TQ8Q/Jt0P2OfBRBusoC6pKPb0
1zgy6sgwS9ecJXYIjAOcxRbnVj7bxIHoBZUS7+l2XUvXMglV8ksY4UG5DVYBmTxd
Cm3uACWSuLycxFO2E8Me7/w/oLw1HgwMrYm3fHIrPyir+RoKDy24lq4LA/1imWvs
dVbkgt0FfDN3osNRtXNCQq0N0wjZ71Av+o0KNcGP9KPk4F1Os+DTsxqy/lfG8gWL
rO958irreZzNxNQK3xQrg2J00Y6tJrpb1+cflhzhU4K1fqhMiyr/EvsWlI5P6ZMY
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15591599452691615874923134401097957579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atwater'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atwater Elementary School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aesd.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21859462574199531100681667950517449138275700117074133665643769746830565385968957274778371060263278953600405217085679798270659677462639722508354455590809265210241669020114401521259721581350647131806992756032697892121558963736318518453918047457447669134298827924907626950848090773304758213292989509289094876162265016695176890324871375258883880907907443444651082574966819675975168411539866765203074459369297972363183983026919653670810252823741983771979169126460701557970280881664019172215954323622543946065319265578740322133522512117244319463525203373276747078115664687454475934747621348903176337571826187628833477433527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd453eb670b4c9deb741c1a1e826313725816816
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Wiki.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Aeries.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reset.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.aesd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech.aesd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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