www.muncie.in.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:12:fe:01:1e:2b:49:a3:e3:f9:53:68:e3:d6:51:8f:26:fc was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.muncie.in.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:fe:01:1e:2b:49:a3:e3:f9:53:68:e3:d6:51:8f:26:fc
Serial Number (int): 354911856046745995730247012267197826279164
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:1d:47:0a:77:46:5e:ab:82:86:c1:56:99:a4:46:ad:dd:16:0a:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:56:35:25:b0:a2:f6:70:c5:49:35:b8:5b:6e:3d:44:4b:ff:cc:73
Fingerprint (sha256): 00:b1:9c:75:1b:d5:4c:ca:2f:97:45:94:0d:ee:bc:ea:01:fa:2e:f7:fc:39:ad:7f:cb:d4:86:55:e9:78:39:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.muncie.in.gov

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.muncie.in.gov

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cityofmuncie.com
muncie.in.gov
www.cityofmuncie.com
www.muncie.in.gov

Other certificates including the domain name in.gov

(limited to 100 certificates)
transparencyqa.iedc.in.gov
ucruat.in.gov
test.iot.in.gov
techberry.iot.in.gov
mobilerequests.iot.in.gov
rpsadminuat.dor.in.gov
intaxpay.in.gov
devfs.gmis.in.gov
oas.iot.in.gov
in.gov
eocfusion.in.gov
www.northliberty.in.gov
tools.dpla.library.in.gov
www.franklin.in.gov
incite.in.gov
in.gov
passwordreset.iot.in.gov
smartbeta.fssa.in.gov
ema.knoxcounty.in.gov
*.greenwood.in.gov
byodportal.iot.in.gov
clearcreekdistrict.in.gov
impactuat.fssa.in.gov
cmsdev.iot.in.gov
www.in.gov
www.muncie.in.gov
dotwisetest.indot.in.gov
inprs.faqs.in.gov
admindev.aos.in.gov
indianaems.isdh.in.gov
agingdev.fssa.in.gov
pla.in.gov
*.columbus.in.gov
starstrain.bmv.in.gov
ilead.in.gov
www.vigocounty.in.gov
myoracle.in.gov
ddrs.fssa.in.gov
vhost.in.gov
mywebdev.in.gov
camssinternal2015.fssa.test.in.gov
camssweb.fssa.in.gov
vfiresubscribergroupadmin.iot.in.gov
tempstagebatch.dwd.in.gov
azauth.hamiltoncounty.in.gov
ddwsuat.dwd.in.gov
chirptest.in.gov
inclass.dcs.in.gov
healthnet.isdh.in.gov
solutions.dwd.in.gov
iportal.isdh.in.gov
lookup.iot.in.gov
webfusion.in.gov
ingangnetwork.in.gov
immdashboardqa.isdh.in.gov
knoxcounty.in.gov
bpmqa.aos.in.gov
www.westlafayette.in.gov
ecmqapz.idem.in.gov
lrsn.indot.in.gov
extraqa.in.gov
cmpolicysecure.iot.in.gov
bdmt.indot.in.gov
mail.lagrotownship.in.gov
icesqa.fssa.in.gov
gisqa.in.gov
maps.dhs.in.gov
dmhamir.fssa.test.in.gov
clearcreekdistrict.in.gov
lochotlistdev.fssa.in.gov
capwiseqa.indot.in.gov
ssdqa.isdh.in.gov
wccdev.idem.in.gov
scholartrackstg.che.in.gov
mylicenseofficeqa.in.gov
warrencounty.in.gov
aosftp.auditor.in.gov
chirp.in.gov
trackone.dwd.uat.in.gov
warrencounty.in.gov
gms.isda.in.gov
obieedev.dor.in.gov
ody17.courts.in.gov
dnrimages.dnr.in.gov
pims.iedc.in.gov
ssl3.revizesites.com
gisq.in.gov
indianavoters.in.gov
essence.isdh.in.gov
bosqa.dor.in.gov
wmsdev.indot.in.gov
in.gov
winfield.in.gov
*.carmel.in.gov
autotest.bmv.in.gov
test.in.gov
inprs.test.in.gov
cpe.indot.in.gov
www.spencercounty.in.gov
investimagingnonprod.dcs.in.gov

Certificate

The complete raw certificate details for www.muncie.in.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmVujdv9mS2XuNyIOrrM6
zFWFfusjxMilqVDaneTFweiCGl0H8VegDPMazIZ5PIL0+XXjaJhChM43iE0mfo++
Yi4tZt0R2c/7mWvMXioWqR+Vny3NXXtafpSDKu7JQxU3zlxmUplW6CRdcgxcIpST
yIY95ALApQAOdGkp9jMqW5wYM/8BJroihRkb68oWP6qZ1Zi3sbIuVZyu3Ud0Qb6j
Ejqqie7hjNKoEJDqLj2j0SuTscMjaoY1gVD06xvWRHFUA4fpYmqX0fnMUHsiRkbh
zDl/Zo9tz/SJAg2JtdBUXXnJOrI3UVPr3KIB/pXZhDR5Fd1BIYv79MJuUsjTHTkA
bTUtp3XJ5Z3sXbhsGl6q8ByDlJwtEv4lWVnkB6mj5MbSWd80D2TgZr7K6v+pOUpZ
MirbNzmzUNb/wqBfn/Sj4gN7Ig6wtdUWGwmBklJ6Y3Mh7U0WjkkOkr0ZxJ2kA7M6
9yjLVX3u8YqpZuMs/y4Qse4KqLfYxqOASrOZrh7YN18pAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354911856046745995730247012267197826279164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 13:00:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 13:00:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.muncie.in.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3480270864961965570259616639547823425592184179290389102973949268815529027829125582213254245147432061059065269639138055847769811826974521032050724773865617428907439488484442372754255389704080131711185874971989237521067504406690101230876176356335279324688006693972185304841833992287925596010026087522218273733898593969410427361526174849925263464998273866095736499545303418216837223800137703508713797803299614855943003537721150264992142314611055204034050002836811403125540197760054607041965985566759692241289745795445619998772965689571023877081501059243414713045677679035070005842994744906665776592365730082841337162629215584286060759944529794756382290788994696117259603236786513096025806269644364650983937890159293338978730895260017618438359855672562423344760241630207781425574667564787206411025000825506460631299147174441752986905050054601852139494649323827879769497909874206951081327526611793435509437439663571737893301346089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f71d470a77465eab8286c15699a446addd160a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofmuncie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muncie.in.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmuncie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muncie.in.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cfdf97ab70000040300473045022100f9d13f0d8809a7b1260e1a5b86345ad313914a573a2124496763b56c3a07d5ad02201253d06bd367ad00014082e7a22d7a6935a225fd0dde364b329b6a6b7961a5c60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfdf97ab800000403004730450220671b067ceac1ee7ada1444af1bfbd526c093ff31d48b2b746d4f6e69ee0409f0022100d76f8a69940f345fa9285b53120029b2aa340dc906bb3d40f1d5061eb1f10483
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f1d0f5dce0bce5a597131afaedbcd648309bdd3ffc8a914ade63c55d6a5020bde3f772dc13f5777a1a7d4b8e18576fa96f02f6c10e6827935c57cfe6948d77d758097ae1558c50c331254a1fd4258be148a0f7fa00cc6a496c708f4a73b0d5711097a091dd23df6325a5271bb74300dca6050edf01c09ca857c72581887907ce9e9ce5631b8038de89c86b60d56c254ebb209462ac3c0d475e454b140278bfc6061adf0b07baa8fc206254c6a36721873591769443791b74b819130d4dc7690be31049e18f5ccd641281b33ae0d57dfa38c2f7ea6936aba6123c26feddb93738bf6d53348336bd919e519138eb381cdbd27087cbbf6f87565f70c08a0a18db4