SRV-DO-NAC.bhusd.k12.ca.us

- Beverly Hills Unified School District -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 77:a5:8f:ca:8b:84:cb:83:5f:d5:1b:9f was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Beverly Hills Unified School District

Organization: Beverly Hills Unified School District
State / Province: California
Locality: Beverly Hills
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 77:a5:8f:ca:8b:84:cb:83:5f:d5:1b:9f
Serial Number (int): 37028867963679214273977195423
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 7b:82:c3:20:70:64:fb:59:a3:9d:f7:9a:c9:97:96:fa:59:9e:7b:93
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ac:3f:af:a4:9c:01:73:5f:df:1f:02:48:69:b0:ea:06:b5:d6:b4:50
Fingerprint (sha256): 6d:e9:0f:4b:ff:e5:96:68:f9:c6:d6:29:1a:68:87:64:ea:ce:73:a2:87:67:d8:90:9e:c7:78:f3:5b:ba:ac:6e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate SRV-DO-NAC.bhusd.k12.ca.us

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for SRV-DO-NAC.bhusd.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

SRV-DO-NAC.bhusd.k12.ca.us
srv-do-nac-pb.bhusd.k12.ca.us
srv-do-nac-sb.bhusd.k12.ca.us

Other certificates including the domain name bhusd.k12.ca.us

(limited to 100 certificates)
admin.burroughsms.org
normanlink.bhusd.k12.ca.us
admin.burroughsms.org
ac21.clps.org
www.nolafsme.org
admin.crownpointelementaryschool.wearecms.com
highschool.kiskiarea.org
ac21.clps.org
admin.banninghs.org
bvms.bhusd.org
admin.burroughsms.org
SRV-DO-NAC.bhusd.k12.ca.us
admin.bvms.bhusd.org
ac21.clps.org
admin.banninghs.org
www.sylmarhs.org
admin.johnmarshallhs.org
ac21.clps.org
www.bendist25.org
admin.banninghs.org
admin.banninghs.org
admin.burroughsms.org
admin.clp.clps.org
admin.burroughsms.org
admin.banninghs.org
admin.banninghs.org
admin.foothill.mpusd.net
admin.burroughsms.org
wpadmin.nhes.lowndes.k12.ms.us
admin.bvms.bhusd.org
passwordreset.bhusd.k12.ca.us
srv-do-mail1.bhusd.k12.ca.us
srv-do-mail1.bhusd.k12.ca.us
admin.delreywoods.mpusd.net
admin.bvms.bhusd.org
cet.edu.mx
moreno.bhusd.k12.ca.us
admin.banninghs.org
admin.delreywoods.mpusd.net
admin.ahs.ausd.net
admin.burroughsms.org
admin.bvms.bhusd.org
ac21.clps.org
SRV-DO-NAC.bhusd.k12.ca.us
admin.banninghs.org
admin.fges.davidson.k12.nc.us
admin.burroughsms.org
admin.burroughsms.org
ac21.clps.org
*.bhusd.k12.ca.us
zoraellisjh.net
www.thomasolaeta.school
ac21.clps.org
admin.mhs.bhusd.org
beverlyvista.info
king.mpusd.net
admin.popejohn.org
sce.ealas.org
www.svdons.com
admin.ahs.ausd.net
admin.banninghs.org
popejohn.org
admin.ho.ausd.net
srv-do-mail1.bhusd.k12.ca.us
admin.banninghs.org
ac21.clps.org
admin.banninghs.org
admin.burroughsms.org
admin.burroughsms.org
SRV-DO-NAC.bhusd.k12.ca.us
crumpton.mpusd.net
admin.banninghs.org
lw.ausd.net
beverlyvistaschool.us
admin.olaclaremont.com
revbrownschool.org
bv.bhusd.org
ac21.clps.org
marshallmiddle.org
collegeachieve.org
admin.revbrownschool.org
mdm.bhusd.k12.ca.us
admin.ahs.ausd.net
admin.banninghs.org
srv-do-mail1.bhusd.k12.ca.us
beverlyvistaschool.info
elrodeoeagles.info
ac21.clps.org
ac21.clps.org
www.stjosephpomona.org
admin.banninghs.org
bhas.bhusd.org
SRV-DO-NAC.bhusd.k12.ca.us

Certificate

The complete raw certificate details for SRV-DO-NAC.bhusd.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIMd6WPyouEy4Nf1RufMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDA0MDMxOTUxMDJaFw0y
NTA1MDUxOTUxMDFaMIGPMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
YTEWMBQGA1UEBxMNQmV2ZXJseSBIaWxsczEuMCwGA1UEChMlQmV2ZXJseSBIaWxs
cyBVbmlmaWVkIFNjaG9vbCBEaXN0cmljdDEjMCEGA1UEAxMaU1JWLURPLU5BQy5i
aHVzZC5rMTIuY2EudXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv
rNgZIDNzzMlxJhkEDdbnTmwL/i9hmsTbJ79vg2hRfhr7uGpqI6ZAGpiAqAHIpqy/
6j8H+EC0NlAnwhhRoL36I8+p2A601JXoy6ZdfQW/MWUsgQ/9d8Ps7reKQujjgFqr
eszPNokL/23Wg0L0KtlLCMxfs99OBybuDgDzswVeYkObQoUhsWX8FvPVbI24BvJf
//+nGKdy3sdKkZpwq6MLKfJ3v21Z1yfkvIGvozxMJaHwx+HM6qpzCt/iKPZGxDdd
BRC0R+ZGTsX7JG7AmuKSpp124Zlvs+oqALz7WkJ2ulKvL3kWFdvMobRfEWnE6jiW
Ubko6fWUY1QqQxvHpBt9AgMBAAGjggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwDAYD
VR0TAQH/BAIwADCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0cDov
L3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNhMjAxOC5j
cnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dzcnNh
b3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcC
ARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EM
AQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20v
Z3Nyc2FvdnNzbGNhMjAxOC5jcmwwYwYDVR0RBFwwWoIaU1JWLURPLU5BQy5iaHVz
ZC5rMTIuY2EudXOCHXNydi1kby1uYWMtcGIuYmh1c2QuazEyLmNhLnVzgh1zcnYt
ZG8tbmFjLXNiLmJodXNkLmsxMi5jYS51czAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0O
BBYEFHuCwyBwZPtZo533msmXlvpZnnuTMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBRMHVD6kjHLQtBCIprZIzhWOxMn4bG1pdpveGhRclx
esr/BlL0z5IHvrYdl9uuNP+OpBzF4jMVCm522KwrTdKmbLZ+1VG9DSbfDuq2vDQb
qcW9796Dsn/FC1EWwY1kT8umUWFZq0yOBv4BfcMc3nSRxXqQ3WkMwmiVKh2dIcde
u+X3kOWA5c/7SWQxnDrLZeLsBgtDN+YjXv3/M/hKWkDjx24AtTpqBxUEV29ZiPlw
SLK3faFrm7R23C0Id6zdEpxLc85NON4Q6M3IQ61WeAK+27hhanwuZ6zsLsC2q9bh
OY1KPZVOD/OCp65R55AItRssy0ahGtLCNhMQwwoyXDQo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zYGSAzc8zJcSYZBA3W
505sC/4vYZrE2ye/b4NoUX4a+7hqaiOmQBqYgKgByKasv+o/B/hAtDZQJ8IYUaC9
+iPPqdgOtNSV6MumXX0FvzFlLIEP/XfD7O63ikLo44Baq3rMzzaJC/9t1oNC9CrZ
SwjMX7PfTgcm7g4A87MFXmJDm0KFIbFl/Bbz1WyNuAbyX///pxinct7HSpGacKuj
Cynyd79tWdcn5LyBr6M8TCWh8MfhzOqqcwrf4ij2RsQ3XQUQtEfmRk7F+yRuwJri
kqadduGZb7PqKgC8+1pCdrpSry95FhXbzKG0XxFpxOo4llG5KOn1lGNUKkMbx6Qb
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37028867963679214273977195423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 19:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-05 19:51:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beverly Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beverly Hills Unified School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SRV-DO-NAC.bhusd.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22176935987897608995713189220288506874074232942984646429850574822016164913288969290961385996206373867781247261229997417489969069454930445316957430509883257370691731542479873351794448065110369283505524785894250689623089809866237321054886909310304311353586672746442206823864381297354486912949301541182972260160085375418215660817327012191164937315427551532255905174559322269883448305082015697886202517538001372217940640644140097795540232673416057422499582852278365759192775863633606189101690390495457369896945241563419923008906281959955081593502660927596649089172020378398726923580519980834381615664608851354968247245693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SRV-DO-NAC.bhusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-do-nac-pb.bhusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-do-nac-sb.bhusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b82c3207064fb59a39df79ac99796fa599e7b93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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