*.paisd.org

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 0d:83:77:d2:91:62:5c:05 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.paisd.org

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:83:77:d2:91:62:5c:05
Serial Number (int): 973753690708139013
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 10:cc:63:30:04:15:58:51:aa:d2:51:dd:c1:c3:8e:28:52:8c:d6:ba
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 33:73:65:60:77:31:a9:af:f6:5b:a1:60:43:8d:98:91:ac:2c:e8:5c
Fingerprint (sha256): c3:ff:05:80:06:d7:0a:f3:db:4b:26:21:28:0b:fd:24:01:f4:a2:d7:7c:60:e7:d1:b2:f0:23:2d:ae:b6:96:50

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-586.crl

Check the revocation status for certificate *.paisd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.paisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.paisd.org
paisd.org

Other certificates including the domain name paisd.org

(limited to 100 certificates)
middlevillageprep.org
admin.portacres.paisd.org
admin.bethune.hattiesburgpsd.com
admin.veca.gocats.org
admin.aes.alcoaschools.net
www.spencemanagementgroup.com
mail.paisd.org
admin.burney.hattiesburgpsd.com
les.magnoliaisd.org
www.hilltopprep.org
admin.castaichighschool.org
ais.alcoaschools.net
adams.paisd.org
www.cuesd.com
admin.slipperyrock.k12.pa.us
admin.alma.cv.k12.ca.us
burney.hattiesburgpsd.com
www.bufordsa.org
www.collegeachievecentral.org
admin.lakeview.paisd.org
adams.paisd.org
admin.portacres.paisd.org
inglesdurkheim.edu.mx
admin.msdathletics.com
painesville-city.k12.oh.us
www.ehscougars.com
portacres.paisd.org
admin.ml.cuesd.com
iims.icefps.org
bufordsa.org
admin.bayouacademy.net
www.castaichighschool.org
ns02.paisd.org
admin.woodley.hattiesburgpsd.com
adams.paisd.org
admin.cvhs.cv.k12.ca.us
jefferson.paisd.org
admin.cve.cv.k12.ca.us
www.bayouacademy.net
alpha.magnoliaisd.org
admin.brookings.k12.or.us
adams.paisd.org
admin.lng.otsegops.org
www.msdathletics.com
admin.creekside.cv.k12.ca.us
admin.lakeview.paisd.org
portacres.paisd.org
www.paisd.org
patespapp01.paisd.org
stchrisschoolnh.org
admin.mpsdnow.org
portacres.paisd.org
kiwedin.adsb.on.ca
*.paisd.org
www.jchigh.org
admin.allison.pusd.org
admin.kellyhighschool.org
adams.paisd.org
gradespeed.paisd.org
admin.painesville-city.k12.oh.us
admin.middlevillageprep.org
www.paisd.org
woodley.hattiesburgpsd.com
*.paisd.org
admin.wilmer.goldenruledallas.org
adams.paisd.org
ParentPortal.paisd.org
paulrobesoncs.org
www.gocats.org
admin.hhs.hattiesburgpsd.com
admin.bayouacademy.net
admin.travisranchschool.org
ais.alcoaschools.net
admin.hubbardhighschool.org
lakeview.paisd.org
admin.bischool.net
www.cristoreyrtp.org
www.bishopfoley.org
memorial.paisd.org
paisd.org
ces.caldwelledu.org
www.irlandesmexico.com
cad.dcs.edu
www.paisd.org
admin.marshall.cv.k12.ca.us
panoramacityelementary.org
*.paisd.org
www.sennhs.org
*.paisd.org
hubbardhighschool.org
bbjh.magnoliaisd.org
umeprep.org
admin.ams.cuesd.com
bde.dcs.edu
*.paisd.org
ns02.paisd.org
memorial9th.paisd.org
www.caldwelledu.org
admin.nestleavecharter.com
admin.palomares.cv.k12.ca.us

Certificate

The complete raw certificate details for *.paisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bSPwthxNkGpf+AN02OE
AgfEKvBd4reqfcpBQ0zrVu8xttiCWv0TsRmdjZGmx2cC+5uBv9i1XLyScH1xC9Ig
bSMW1SYvR4QIjlrYk7xa9dkB+L//vt468sSICYSSxXIIp7kDQ0yuKIsQZw6WaIlr
+LmgtUWlbnBC6k7SzgkGkwm3SBGIs55KrYjIxOAaAKDsykfMO4ovV6ju0YFXz02v
QKzuqsUm1yTH4h7+WtKRQ+8Eg1kjzRnWn2UrMPSn6olhgvC50/jF/eX9VFH4Bxuc
cwIn4TYpKyST33Xmqw3AtaTuF+ns1wcYPvzEJCtHkScuneQZdfKKCg+EtX7PjGHV
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 973753690708139013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 18:34:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 18:34:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.paisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26472843965023135791085173795484139502477200944567296120014324636860785609500601433969498580278745663029519485425636231507913842569023041465914876954220134343657242392406707948834899409181891640603498145898681029344048525371981469547770978634382626298624384257722262152098304540817275001748895293468424480731819081170646781598391446988574668642290069481235183006448053700471970735261580205015099231466714178120572291843263129494825222234380490532086484843256490121103265340782302355438756180285978886300503355710946792581219558511781128002944706102266327886487717367503445152068337623085518110897138447030780642317791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-586.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10cc633004155851aad251ddc1c38e28528cd6ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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