*.jarrellisd.org

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 4b:18:4e:b1:66:c7:a3:89:40:f6:3f:a4:19:7b:03:70 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.jarrellisd.org

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:18:4e:b1:66:c7:a3:89:40:f6:3f:a4:19:7b:03:70
Serial Number (int): 99818310891616195703453236278612132720
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b6:8a:9a:6f:8e:c0:85:4b:0b:37:a2:97:68:c5:89:ff:12:dd:f7:07
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): ca:82:cb:54:ff:6c:71:2a:2f:fa:88:88:9a:d4:fd:a4:58:86:52:f3
Fingerprint (sha256): b6:66:07:73:b4:5b:9e:96:43:bf:a0:b4:06:d9:6b:eb:8e:da:e8:67:b6:22:22:86:96:a5:92:9a:c8:0c:2e:aa

Issuing Certificate URL: http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcomRSASSLsubCA.crl

Check the revocation status for certificate *.jarrellisd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jarrellisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jarrellisd.org
jarrellisd.org

Other certificates including the domain name jarrellisd.org

(limited to 100 certificates)
filewave.jarrellisd.org
*.jarrellisd.org
admin.facs.fentoncharter.net
acecharterhigh.com
sphstigers.org
*.jarrellisd.org
acecharterhigh.com
acecharterhigh.com
admin.whitson.wsvsd.org
cce.leusd.k12.ca.us
acecharterhigh.com
acecharterhigh.com
admin.almaacademy.org
admin.almaacademy.org
www.westfieldfriends.org
www.utmcs.org
flacsms.flacsnyc.com
admin.stedschool.org
admin.schillingfarmses.colliervilleschools.org
admin.wes.bibbed.org
admin.ecacademy.scrsd.org
stvfschool.org
admin.ecacademy.scrsd.org
admin.ecacademy.scrsd.org
admin.westfieldfriends.org
gpa.gonzalesisd.net
admin.belmont.tcsk12.com
acecharterhigh.com
admin.ecacademy.scrsd.org
steam.erusd.org
admin.almaacademy.org
oce.lifeschools.net
academy.ndasla.org
admin.ecacademy.scrsd.org
jis.jarrellisd.org
wes.leusd.k12.ca.us
acecharterhigh.com
www.rebsamen.mx
admin.almaacademy.org
hokulani-elementary.com
admin.almaacademy.org
admin.ecacademy.scrsd.org
www.shagirl.com
admin.beatty.bpsd.k12.ca.us
obh.ealas.org
mes.leusd.k12.ca.us
admin.ecacademy.scrsd.org
pes.petroliacisd.org
acecharterhigh.com
steam.erusd.org
*.jarrellisd.org
admin.ecacademy.scrsd.org
acecharterhigh.com
admin.almaacademy.org
jms.jarrellisd.org
www.vanguardacademy.education
www.rebsamen.mx
admin.ecacademy.scrsd.org
admin.almaacademy.org
ms.pycsd.org
filewave.jarrellisd.org
*.jarrellisd.org
acecharterhigh.com
jes.jarrellisd.org
monte-rosa.mx
gpa.gonzalesisd.net
admin.almaacademy.org
tcsk12.com
admin.ecacademy.scrsd.org
www.jellickschool.org
*.jarrellisd.org
colegiosmadison.edu.mx
admin.almaacademy.org
*.jarrellisd.org
www.northmiddle.org
academy.ndasla.org
wbba.navasotaisd.org
cfh.chesterfieldschools.org

Certificate

The complete raw certificate details for *.jarrellisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfB5pbI/54/dePC3BPgG
euQUXaKYO8izbwOHF/FlhV4s9VJDzxT69EvO4kZpdg7G+DL863PseXIP4htpXtWu
E5099TA/NM4dqp0SPJjJAYZv9aryHwhfSTrLV87WyBQZYtxrfzQ9WsMlnUTc14ip
FQo+vTONXx1oicf+mvyKFdvgkysgna03EI5o8SwijWiHuvW48Yjs6pyv7EBPRd0a
hrOaaEzVekrdQ9qpMv/+TaEYjqya4DHU0QfmRL/PejnqVZVbn2YsaQ8NCCGi6UPX
fTywFjAbmKaOzTtTjSDdFQFaoROzAfHLsmgElhovWqkbu9QsYxmeF1IiRAhlHXc4
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99818310891616195703453236278612132720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 19:47:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-03 19:47:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jarrellisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21452856272416681941686306969855077521961978598639294989718688546330734846383150454184649031353672448788210985842986920356208157345751026996284525464627974812271475502102804126841313438197495064666552650352689743894939192097258878323136495808865371558615045469601793591844610701019261614618474880630976210997935821513928184420315483708792761795001484191686331791534546935214020264795066266203803650149881711509072368161284306808308256094274625703587648424814920302555684670977232666095025491269484536928974351979528954716635488003525892755881248465343375600365313501799257343031583113040525517723965030829865651615869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.ssl.com/repository/SSLcom-SubCA-SSL-RSA-4096-R1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarrellisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarrellisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcomRSASSLsubCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b68a9a6f8ec0854b0b37a29768c589ff12ddf707
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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