www.kaaawaschool.k12.hi.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1a:55:d9:38:57:df:82:26:e3:2e:f0:90:71:f4:f9:ff:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kaaawaschool.k12.hi.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:55:d9:38:57:df:82:26:e3:2e:f0:90:71:f4:f9:ff:00
Serial Number (int): 357410597517822366987757523100904483061504
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:2a:0d:99:ba:d1:2b:02:35:ec:49:ee:96:8a:87:b4:dd:90:22:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:2d:3b:94:ae:f1:c5:90:e3:0c:78:6e:f8:76:0d:7c:f6:0a:16:aa
Fingerprint (sha256): 00:48:76:bd:c1:89:99:41:a9:81:10:88:f5:50:f0:05:da:67:85:9d:36:1a:97:94:d2:3f:39:04:e4:bd:65:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kaaawaschool.k12.hi.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kaaawaschool.k12.hi.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kaaawaschool.k12.hi.us

Other certificates including the domain name k12.hi.us

(limited to 100 certificates)
acsaregion13.org
www.colegioguadalupedetulpetlac.edu.mx
www.kaaawaschool.k12.hi.us
www.kis.k12.hi.us
registration.k12.hi.us
www.cks.k12.hi.us
lilinote.k12.hi.us
www.whis.k12.hi.us
*.budget.k12.hi.us
kahuluischool.k12.hi.us
www.ecsss.k12.hi.us
admin.allsaintsjupiter.org
pueo1.k12.hi.us
hs.unitedsd.net
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
fimportal.k12.hi.us
lokelani.k12.hi.us
CSDPMT2.k12.hi.us
www.maunawili.k12.hi.us
www.kulael.k12.hi.us
ociss1.k12.hi.us
admin.ahuimanu.k12.hi.us
rostersonline.k12.hi.us
mckinley.k12.hi.us
admin.sallasmahone.gocats.org
wes.bibbed.org
mauido2.k12.hi.us
www.kulael.k12.hi.us
www.pope.k12.hi.us
www.kuhioschool.k12.hi.us
kuhioschool.k12.hi.us
www.kuhioschool.k12.hi.us
0-3.texasdhhresources.org
admin.alhs.nyc
www.lehua.k12.hi.us
mokulele.k12.hi.us
m.ecsssonline.k12.hi.us
www.lihikaielementary.k12.hi.us
second.exteraschools.org
www.oahornets.org
www.cristoreysandiego.org
www.maunawili.k12.hi.us
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
traveler3.k12.hi.us
admin.akinseagles.org
admin.akinseagles.org
aliamanu.k12.hi.us
admin.newbernmiddle.gocats.org
admin.lorena.exteraschools.org
www.kulael.k12.hi.us
admin.ahs.ardmoreschools.org
www.ewa.k12.hi.us
kauaido1.k12.hi.us
www.helemano.k12.hi.us
www.doepassword.k12.hi.us
www.maunawili.k12.hi.us
servicelogs.demo.ecsssonline.k12.hi.us
academywest.hamadyhawks.net
hawdo1.k12.hi.us
admin.ahs.ardmoreschools.org
lotusnotes.k12.hi.us
www.ewa.k12.hi.us
admin.alhs.nyc
admin.ahs.ardmoreschools.org
admin.allenparkschools.com
sunset.k12.hi.us
hphs.flo2.k12.sc.us
www.kapalama.k12.hi.us
admin.allsaintsjupiter.org
whitaker.bpsd.k12.ca.us
www.kulael.k12.hi.us
admin.milmauka.k12.hi.us
admin.mokapu.k12.hi.us
www.pope.k12.hi.us
admin.sd925.org
kekahaschool.k12.hi.us
admin.aechs.mcallenisd.org
ehr.k12.hi.us
admin.calmecaacademy.com
www.kauluwela.k12.hi.us
www.kuhioschool.k12.hi.us
admin.adulteducation.pleasantonusd.net
www.fernschool.k12.hi.us
admin.allsaintsjupiter.org
www.rlsms.k12.hi.us
waiakeahigh.k12.hi.us
www.kaimiloa.k12.hi.us
digital808storytellers.k12.hi.us
standardstoolkit.k12.hi.us
admin.alc.ucboe.us
barbers.k12.hi.us
nes.k12.hi.us
lotusnotes.k12.hi.us
www.doepassword.k12.hi.us
ssesonline.k12.hi.us
puukukui.k12.hi.us
pauoa.k12.hi.us
www.kaimiloa.k12.hi.us

Certificate

The complete raw certificate details for www.kaaawaschool.k12.hi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaGgz1mU9g1vTwkWOFBP
euqlflE0dgM1GoR5bUkMRw92gmcuw72QD+kiWKzaC7yCLFfwtW5wu2sohu207dVs
umAX3lo8bKQ+co22y+CMTIpEP0mqK3sOXocLA3Dd2X6HvccBd0jsG+53ZeuBVqw4
al1uD9KlPjClkf7Uhmc1Xd4dCIE5YB8PzCtiIfdNonKGuNKXcuWLeOh8oCn9lqq2
aHLl5FdwMTRxwwC6Ny9pe1afJA3Z31EcyoWLaPIV7BjmbfV8PsZWWFX81s4eRRJb
yTgaVvK/WIncC/ScIPtm+gXwSzZgOB/BwW9YzNKpTRubMSfRFT97b5vHaRYl/zY4
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357410597517822366987757523100904483061504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 01:56:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 01:56:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kaaawaschool.k12.hi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22423881797143263832318993925152606493185783080637383887461235597624637738444584723364390593679790283760201643773401401781155123588784697971605070051674508740133874880878562915359404052165441150560600539304513939700695816545059828384646172400437911524890239680020215338155387202893986051721625341747157432866312095032001368367869960558811309112047378011650152768249725242003032173397347092654442720007606574479509119972922334500113380292371500340895664444156660524521967634441924962685446366379855102646708521792769375105443348326127508883619976919783187858177220043196511655065191895056648402814667582207834803550321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb2a0d99bad12b0235ec49ee968a87b4dd902211
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaaawaschool.k12.hi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168308a1d7a0000040300463044022016f5383eabd6ac1acaf0c5983469b161ddebfac3fc465381b088e96848e3e6f0022037e294b7f30ee45412ff5dcf96d84f4d6c877cc853d6612a646bc05672995f7b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168308a1d770000040300473045022100a77c8feccf80cd63d2a1be44a48507c5ab2647432c5937b9fa91d20cbfdc396602200e89bd4fb72d825ae455f298dae538d8d800d73fbb3edde4fd631d3d7580f638
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053ba3517f87dcd66697f378751c92183c82f9002e53bfcd95d6fe6c32d3dff2f8b0a97b388fbcfef365740a9a27750888e84b720d7b6b41d75dbd0789901635340d98c2ce759327e4089272b9031e456aa558be2b0179806ad23a5426843ca9413cfea57360342f2cb45b47b8dcaa1e45b95f1f4403caf282370f2a794dfdc2139e49e4368ad75636a50c8f73d1e30a9760dd544f0739388479ad8e75f499561cfe6b8daa444241f4a2ad457018816e00406a7a038183b989453972b0d85612880929868e64efd97ad55187c9f43084183ad68ab948563e9273fad48e34375407ee204bcd21f12fa381dd8558e604253bbb201210f29d2df1837e568a3028263