*.bhusd.k12.ca.us

- Beverly Hills Unified School District -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 33:f8:ef:48:cb:83:e4:0b:6d:50:16:03 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Beverly Hills Unified School District

Organization: Beverly Hills Unified School District
State / Province: California
Locality: Beverly Hills
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 33:f8:ef:48:cb:83:e4:0b:6d:50:16:03
Serial Number (int): 16084679092572821241962960387
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 99:1d:7c:72:78:57:38:9a:1c:3f:61:06:78:b7:ae:fb:af:35:16:34
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e1:36:a7:ff:11:2e:cc:f5:33:99:b7:22:c5:99:e6:ee:77:80:b5:37
Fingerprint (sha256): 84:8a:86:9e:92:38:21:6f:b6:48:a4:f4:92:a2:ac:17:e4:3a:60:d6:c0:d8:6e:89:17:c1:03:c9:23:73:f9:47

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.bhusd.k12.ca.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bhusd.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bhusd.k12.ca.us
bhusd.k12.ca.us

Other certificates including the domain name bhusd.k12.ca.us

(limited to 100 certificates)
admin.burroughsms.org
normanlink.bhusd.k12.ca.us
admin.burroughsms.org
ac21.clps.org
www.nolafsme.org
admin.crownpointelementaryschool.wearecms.com
highschool.kiskiarea.org
ac21.clps.org
admin.banninghs.org
bvms.bhusd.org
admin.burroughsms.org
SRV-DO-NAC.bhusd.k12.ca.us
admin.bvms.bhusd.org
ac21.clps.org
admin.banninghs.org
www.sylmarhs.org
admin.johnmarshallhs.org
ac21.clps.org
www.bendist25.org
admin.banninghs.org
admin.banninghs.org
admin.burroughsms.org
admin.clp.clps.org
admin.burroughsms.org
admin.banninghs.org
admin.banninghs.org
admin.foothill.mpusd.net
admin.burroughsms.org
wpadmin.nhes.lowndes.k12.ms.us
admin.bvms.bhusd.org
passwordreset.bhusd.k12.ca.us
srv-do-mail1.bhusd.k12.ca.us
srv-do-mail1.bhusd.k12.ca.us
admin.delreywoods.mpusd.net
admin.bvms.bhusd.org
cet.edu.mx
moreno.bhusd.k12.ca.us
admin.banninghs.org
admin.delreywoods.mpusd.net
admin.ahs.ausd.net
admin.burroughsms.org
admin.bvms.bhusd.org
ac21.clps.org
SRV-DO-NAC.bhusd.k12.ca.us
admin.banninghs.org
admin.fges.davidson.k12.nc.us
admin.burroughsms.org
admin.burroughsms.org
ac21.clps.org
*.bhusd.k12.ca.us
zoraellisjh.net
www.thomasolaeta.school
ac21.clps.org
admin.mhs.bhusd.org
beverlyvista.info
king.mpusd.net
admin.popejohn.org
sce.ealas.org
www.svdons.com
admin.ahs.ausd.net
admin.banninghs.org
popejohn.org
admin.ho.ausd.net
srv-do-mail1.bhusd.k12.ca.us
admin.banninghs.org
ac21.clps.org
admin.banninghs.org
admin.burroughsms.org
admin.burroughsms.org
SRV-DO-NAC.bhusd.k12.ca.us
crumpton.mpusd.net
admin.banninghs.org
lw.ausd.net
beverlyvistaschool.us
admin.olaclaremont.com
revbrownschool.org
bv.bhusd.org
ac21.clps.org
marshallmiddle.org
collegeachieve.org
admin.revbrownschool.org
mdm.bhusd.k12.ca.us
admin.ahs.ausd.net
admin.banninghs.org
srv-do-mail1.bhusd.k12.ca.us
beverlyvistaschool.info
elrodeoeagles.info
ac21.clps.org
ac21.clps.org
www.stjosephpomona.org
admin.banninghs.org
bhas.bhusd.org
SRV-DO-NAC.bhusd.k12.ca.us

Certificate

The complete raw certificate details for *.bhusd.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVo6dEpgBofL30g0Bsim
ZqhlHa85hGBTUZBfigYyQr59Y7FihYRQtZY57/pHjlFk1pkmWjoxk5KYi3LYjdNa
m8xH+h7MpMumrxdTqTJtlDszzGXtjtSZVZ+cSpSqtG+rtyzzcqDsfx3TG/0tqH9y
+mLK0D+vexYKlJmEXPoWzH7rK8ROCe6l+4eJ+19r0cvCu/bJvgIdXL0JiKMZjrQl
lmXuKYUOmoVCJrACrTeA+wdsF8dgL9kvt3oeb2JG1RmEJq//q1CyifiKfLQJxUgm
QRrCLdH72wl2q8Bz7pqHIJgPy8Jzs/hVgA/kBr+XM+mqGH03N/mWoL4mweeDIitG
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16084679092572821241962960387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 19:56:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-10 19:56:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beverly Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beverly Hills Unified School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bhusd.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25418392549415309389519455754981004207760101114380881740467327462861249652081535736305417879185889726783442360839089698512611844746560322512382939114397905011791540250265761854648428255360854707513994664263670028903195293218800132906147393686453681212349764025754642039110394642464324415657744197278011309187946621902581983893763954565103825444707976407524196621812356048245775883847814350426182466110195370511208590755096957209013764565623749006659257077000514685891438831733386404070040854986916370238113366012394984179770196668827285944067399099024659855768119777589826897487949163578220780029191944301949060073051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							991d7c727857389a1c3f610678b7aefbaf351634
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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