*.pusd.org

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 53:fd:e9:ba:0e:b3:a3:51:09:57:03:be was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pusd.org,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 53:fd:e9:ba:0e:b3:a3:51:09:57:03:be
Serial Number (int): 25994217791078418128475456446
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ea:1f:84:48:06:e0:ab:a8:5c:df:e0:6a:b3:17:0c:f7:95:1e:f6:3f
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): a8:12:2c:83:8c:cd:98:b1:4b:17:14:84:da:11:29:65:61:ab:73:7f
Fingerprint (sha256): 6d:a7:2c:36:42:e5:6b:f0:09:fd:b4:de:b6:4c:61:85:9e:c7:b1:56:5d:ce:56:5f:ee:3d:6d:56:d0:7b:5a:0a

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.pusd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pusd.org
pusd.org

Other certificates including the domain name pusd.org

(limited to 100 certificates)
ace.pusd.org
www.bradleyschools.org
oce.lifeschools.net
admin.aes.fentressboe.com
admin.bbcms.bbrook.org
ace.pusd.org
childdev.pusd.org
decker.pusd.org
proudtobe.pusd.org
proudtobe.pusd.org
admin.adultlearning.sunrisesd.ca
admin.armstrong.pusd.org
admin.hs.wvsd208.org
admin.hes.huntingtonisd.com
admin.veca.gocats.org
decker.pusd.org
garey.pusd.org
harrison.pusd.org
diamondranch.pusd.org
admin.saspasadena.com
admin.ace.pusd.org
spanish.pusd.org
www.hwrsd.org
www.huntingtonisd.com
admin.allison.pusd.org
bradleyschools.org
www.hilltopprep.org
ngc.lancasterisd.org
admin.bloomfieldcsd.org
admin.eag.zcs.k12.in.us
ps.bsd29j.com
morelandpreschool.moreland.org
lexington.pusd.org
es.moodyisd.org
www.hwrsd.org
admin.morelandpreschool.moreland.org
ms.moodyisd.org
admin.his.huntingtonisd.com
ngc.lancasterisd.org
admin.cvhs.cvsd.org
plummerpanthers.org
admin.aes.cherokee.k12.nc.us
www.morseschool.net
admin.alma.cv.k12.ca.us
allison.pusd.org
burney.hattiesburgpsd.com
admin.cfn.edu.mx
admin.mhs.cherokee.k12.nc.us
www.hwrsd.org
admin.bloomfieldcsd.org
admin.fremont.pusd.org
admin.aes.cvsd.org
admin.allison.pusd.org
inglesdurkheim.edu.mx
frederickadouglass.kippneworleans.org
hsd153.org
admin.allison.pusd.org
admin.adultlearning.sunrisesd.ca
admin.aes.cherokee.k12.nc.us
admin.cvhs.cvsd.org
www.holynamesf.com
ace.pusd.org
admin.hs.gsd.wednet.edu
alcott.pusd.org
painesville-city.k12.oh.us
emerson.pusd.org
montvue.pusd.org
admin.bchs.bradleyschools.org
ms.gsd.wednet.edu
admin.rems.cherokee.k12.nc.us
admin.aes.cvsd.org
huntingtonisd.com
sanantonio.pusd.org
admin.woodley.hattiesburgpsd.com
madison.pusd.org
roosevelt.pusd.org
admin.eag.zcs.k12.in.us
lopez.pusd.org
ace.pusd.org
admin.ahs.cherokee.k12.nc.us
*.pusd.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
riverview.durangoschools.org
admin.bloomfieldcsd.org
bbel.bbrook.org
admin.garey.pusd.org
admin.nbfacademy.org
admin.allison.pusd.org
admin.adultlearning.sunrisesd.ca
admin.milam.hcisd.org
admin.seeo.pusd.org
admin.lng.otsegops.org
webmail.pusd.org
mishpms.hpisd.org
admin.athletics.hattiesburgpsd.com
admin.creekside.cv.k12.ca.us
*.pusd.org

Certificate

The complete raw certificate details for *.pusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUjWMkoHhHXdOS4BAvXL
2SqU1inBRWH+zGmbU4rb0JYaYkQQIBsdLwUw3bQSXLJLjDZgMA7hQMuocNb7dhC7
BfEjSKUB4CjzgmiK+pF+0Pls+1cCjM7Hu3SL/d7iC6BLoBzXDieBZBlBFTa9BS6N
XpioU/zI8AQSxHrGrKQWleazJm+eYsZMRxrUhjfo7cTSJAfccjNjcJNmUCZ2jxbo
jGIQX6PhxQbQWxkKPrhtIOfSRH2raooAmEDvjh2sqtnpu7BsxP35lmX8jxIiNulT
EGIdmiqpM3UaVnjEJmP26ATNcy+t8ATtd4WT/iXT9UrJTU2dbhbe/mD2khFTL2gt
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25994217791078418128475456446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 19:54:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 19:54:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25914769635853825779430906193813396341876002092803770438775054368043319691552439176591360447048500034552442403428477413633135228916456601666574501844940427270527523043351719077535909676613433933121492593937098308775677686079368570437669199336410361370483708844376772655333307647543272348732353486000677420972405321679938270218483711050296828571617259490226649124858800220408159776960839592235353859688587492568038655176914211883861550783975261641994547616161964521095843554365889413195688708480791890362938224259377485524388209567015055967472720882450940747905493908756910932853749544126871429725867624165504480455941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea1f844806e0aba85cdfe06ab3170cf7951ef63f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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