aspire.sjsd.org
Issued by R3
About this certificate
This digital certificate with serial number 03:3d:1f:3f:50:18:4d:bc:0e:5a:d6:75:6f:fc:6d:dc:d8:13 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=aspire.sjsd.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3d:1f:3f:50:18:4d:bc:0e:5a:d6:75:6f:fc:6d:dc:d8:13Serial Number (int): 282135616984547708181413265247310339430419
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2c:5b:c5:ae:62:5d:32:7f:7e:f0:3a:f0:4f:ca:20:d4:47:2f:09:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 62:8d:fa:d5:78:3f:d0:59:bc:19:c8:d5:27:a2:af:44:34:04:00:3c
Fingerprint (sha256): b8:8a:d4:7d:b0:17:54:d0:fa:47:eb:a8:ef:d6:bc:71:18:89:7d:62:99:64:aa:6c:ce:af:c7:63:6f:04:23:f9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate aspire.sjsd.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aspire.sjsd.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aspire.sjsd.org
Other certificates including the domain name sjsd.org
(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org
Certificate
The complete raw certificate details for aspire.sjsd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAz0fP1AYTbwOWtZ1b/xt3NgTMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDIxNDA2MTdaFw0yNDA0MDExNDA2MTZaMBoxGDAWBgNVBAMT D2FzcGlyZS5zanNkLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMgq7sciSdLS/+UqwmOIOOWIQBy9EE7sR7+jousdu9qHnwam/W+EZrTjIcv969cj BbHXtklfD5wjdzjXPnJMwkTDse3AgASRMYArKnFH68PnSB3Xrg0NIvsT60MAqZCc qCRRPXjwu3pgxlsEmLjlY4m0m4KmZLPhBmOKXTI+4jYsPGmN91jL5kC8adRIp9Ot lL/9ksNlp3bMs3/4OOnpry7JfjOVYiXrfQafjIq55CI3R2rjtbQCk4gMO9tJYxMs AxcXTJl/D3RiookfpeCt97g+PZ5ns4M7Ci3rIV5MduOQyjGQwJ30HZplGP3azG9f 4k2unfL8bM1/BnQtRp1rbebIdDy2vjwkvVQ4v3gbCRyokIxFDRmSz+x8seMFJlvp v/KuacUWQR0FPZRTMz3tqhHTPxVGgLsiqXLV1/HxgpKjssLNZUz8XRH2Pg/GdaBn DJrkv9zzllmnrr1W9qFGwNz269Kdk0qCyq6fp+R+CbSC7IcdVFyIDzk9Iw4E837O mIFfaTg0hOqS9gdW9UID+x0Y0IviVwiWwbiu2gaBzt7qdQxqmvwYZNpOADLu8FHM hx4VNNZVtxrLikKduGSbxl5DGAjRMMumw5KJPnDTAJQwp4toPfosgkirnRyFK01J 3eOgmGtk5VLYb8x3c65AWVixXeeaSyAsDUftaRIvEto9AgMBAAGjggIRMIICDTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFCxbxa5iXTJ/fvA68E/KINRHLwmDMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMBoGA1UdEQQTMBGCD2FzcGlyZS5zanNkLm9yZzAT BgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjMq2DcsAAAQDAEcwRQIh AOxFhQ9gAAHkS3g3thk33AMsElFjms63wWks/UllY6q6AiB4DHjU1vXJ8jDCK1AL kRuzYP4EyfC+oaeUjanFNoLsIwB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf 5mdMWjp0AAABjMq2DhwAAAQDAEcwRQIhAPUsdTfqi8Tui1SEwduN7U0fCKP9W+GB bss2Wpvb0VtDAiAgOiVhRgLCwpd8XUE2n7AE5NmWJ8f890vU/wNFKDB1EjANBgkq hkiG9w0BAQsFAAOCAQEAd57sxSChLNYgMDXWd2wFhr6s4vU8k2zIDeZ36vhz2G7i mJ/Q0F3NFPzeVEJciFnmfOQURJylP8fonQ9bxMjM7OBpu3xlxP/nFl5YzmdoDUv0 hvjcu1caNfZl873OBY7v3Hx9AQ3E7Wyhzq2qT0PAUxOZupXZhryoSdgNLX/hrOKh HsYNNE6B2COoI1IC1tGbz19Cur/jaRGZslWUMpi6E24S/jFEtVZPyaoNfGKTxDx7 XYImr5sVcyvveQzcHmrwy99zAQ+Km8IK3DGSm0407lTvqheKdriNIO1uG5RoWNIm wZK95g3MRm+cRKBa94qlFdvl0UEqsr+YnZT0Bm1Xog== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyCruxyJJ0tL/5SrCY4g4 5YhAHL0QTuxHv6Oi6x272oefBqb9b4RmtOMhy/3r1yMFsde2SV8PnCN3ONc+ckzC RMOx7cCABJExgCsqcUfrw+dIHdeuDQ0i+xPrQwCpkJyoJFE9ePC7emDGWwSYuOVj ibSbgqZks+EGY4pdMj7iNiw8aY33WMvmQLxp1Ein062Uv/2Sw2Wndsyzf/g46emv Lsl+M5ViJet9Bp+MirnkIjdHauO1tAKTiAw720ljEywDFxdMmX8PdGKiiR+l4K33 uD49nmezgzsKLeshXkx245DKMZDAnfQdmmUY/drMb1/iTa6d8vxszX8GdC1GnWtt 5sh0PLa+PCS9VDi/eBsJHKiQjEUNGZLP7Hyx4wUmW+m/8q5pxRZBHQU9lFMzPe2q EdM/FUaAuyKpctXX8fGCkqOyws1lTPxdEfY+D8Z1oGcMmuS/3POWWaeuvVb2oUbA 3Pbr0p2TSoLKrp+n5H4JtILshx1UXIgPOT0jDgTzfs6YgV9pODSE6pL2B1b1QgP7 HRjQi+JXCJbBuK7aBoHO3up1DGqa/Bhk2k4AMu7wUcyHHhU01lW3GsuKQp24ZJvG XkMYCNEwy6bDkok+cNMAlDCni2g9+iyCSKudHIUrTUnd46CYa2TlUthvzHdzrkBZ WLFd55pLICwNR+1pEi8S2j0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 282135616984547708181413265247310339430419 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 14:06:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 14:06:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspire.sjsd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816612994233417266132737917995636973169276615285511598153968628276978380412071413506187204663649377403046097952867644768468169385204207587019014935090733610387995885414775967291834849426590353179127950338077403795785891651910997668884489255985302848500543354927412842985758657100647109118210103839301720712452709842537090402715871797291435327093239667088362631463955920859568935411635962951670866499149291604966946906897659975240263659469961759378431115663500932669544187420213079503349202082109164620620412520938903405106664733269852799438812810221065867956322418329975469205037327007065213312123180985221675956424681633363123159755660620539664947515462138617879611690898238588531768675222306458066931566513024801557661611396863769155582235366115841276876604967372930306013737270668236586958579980930661386444258772551502090660625324812390009875849004156313963542019246308629664032741978420017497186035361284679129989953818490203607216913684313236544114235383318899528133984845724270369808940091685232771282824525374817710241945157601220421387528881817724285307272875794617468994251099323402357977680897649471530991960672618268358546535379503575744561395649451934245410554999795067060788959098701065936931381724477202353833693600317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c5bc5ae625d327f7ef03af04fca20d4472f0983 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspire.sjsd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccab60dcb0000040300473045022100ec45850f600001e44b7837b61937dc032c1251639aceb7c1692cfd496563aaba0220780c78d4d6f5c9f230c22b500b911bb360fe04c9f0bea1a7948da9c53682ec2300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ccab60e1c0000040300473045022100f52c7537ea8bc4ee8b5484c1db8ded4d1f08a3fd5be1816ecb365a9bdbd15b430220203a25614602c2c2977c5d41369fb004e4d99627c7fcf74bd4ff034528307512 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00779eecc520a12cd6203035d6776c0586beace2f53c936cc80de677eaf873d86ee2989fd0d05dcd14fcde54425c8859e67ce414449ca53fc7e89d0f5bc4c8ccece069bb7c65c4ffe7165e58ce67680d4bf486f8dcbb571a35f665f3bdce058eefdc7c7d010dc4ed6ca1ceadaa4f43c0531399ba95d986bca849d80d2d7fe1ace2a11ec60d344e81d823a8235202d6d19bcf5f42babfe3691199b255943298ba136e12fe3144b5564fc9aa0d7c6293c43c7b5d8226af9b15732bef790cdc1e6af0cbdf73010f8a9bc20adc31929b4e34ee54efaa178a76b88d20ed6e1b946858d226c192bde60dcc466f9c44a05af78aa515dbe5d1412ab2bf989d94f4066d57a2