ehs.enumclaw.wednet.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:27:90:03:f0:f6:80:f3:a0:a2:2d:1c:6f:c3:78:cc:5f:22 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ehs.enumclaw.wednet.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:27:90:03:f0:f6:80:f3:a0:a2:2d:1c:6f:c3:78:cc:5f:22
Serial Number (int): 361911585332549531615459729222177884233506
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 92:9e:8a:4a:c4:b9:bc:7e:bb:c8:3d:c7:52:48:a9:12:58:6b:86:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:a5:28:d1:da:2f:cb:2b:16:c4:fb:15:81:41:ac:69:eb:b9:de:c9
Fingerprint (sha256): 01:1f:8d:ee:95:d7:78:24:b8:c8:12:6c:fb:c5:f0:3a:8d:52:ea:3b:11:3d:43:a2:f0:52:f9:30:dd:29:02:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ehs.enumclaw.wednet.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ehs.enumclaw.wednet.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ehs.enumclaw.wednet.edu

Other certificates including the domain name wednet.edu

(limited to 100 certificates)
warden.wednet.edu
admin-adu.slzusd.org
tech.sw.wednet.edu
renplace.osd.wednet.edu
hoodcanal.wednet.edu
library.mukilteo.wednet.edu
webauth.wsd73.wednet.edu
Payment.ycs.wednet.edu
www.rochester.wednet.edu
ehs.enumclaw.wednet.edu
cas.osd.wednet.edu
www.edmonds.wednet.edu
*.upsd.wednet.edu
Radius.centralia.wednet.edu
library.adserv.osd.wednet.edu
*.osd.wednet.edu
www.inchelium.wednet.edu
bke.enumclaw.wednet.edu
www.rainier.wednet.edu
hyak.oesd.wednet.edu
wireless.camas.wednet.edu
www.bradleyschools.org
tech.centralia.wednet.edu
psc.upsd.wednet.edu
mail.psd267.org
www.mtbaker.wednet.edu
destiny.sno.wednet.edu
nemo.adserv.osd.wednet.edu
waterville.wednet.edu
payments.monroe.wednet.edu
vpnportal.sno.wednet.edu
us-east-1-san2.blackboard.com
swiftclassroom.com
brown.osd.wednet.edu
safari.camas.wednet.edu
triton.oesdmail.wednet.edu
www.sw.wednet.edu
www.orondo.wednet.edu
heart.rochester.wednet.edu
www.tucna.wednet.edu
www.qsd.wednet.edu
nemo.adserv.osd.wednet.edu
ems.enumclaw.wednet.edu
sts.mukilteo.wednet.edu
courseguide.issaquah.wednet.edu
mccleary.wednet.edu
warden.wednet.edu
aspen.mukilteo.wednet.edu
*.gfalls.wednet.edu
SSD-EXCHCAS.sno.wednet.edu
www.klickitat.wednet.edu
admin.eceap.gsd.wednet.edu
ltes.dieringer.wednet.edu
mail.cusick.wednet.edu
bes.gobearsgo.net
tukwila.wednet.edu
touchbase.cksd.wednet.edu
ssdmedia.sno.wednet.edu
cougarmail.lwsd.wednet.edu
calendar.royal.wednet.edu
mail.camas.wednet.edu
psd.wednet.edu
cas.osd.wednet.edu
heart.rochester.wednet.edu
vpnportal.sno.wednet.edu
vpn.highland.wednet.edu
mtadams.wednet.edu
rhs.rochester.wednet.edu
meridian.wednet.edu
mtbaker.wednet.edu
files.enumclaw.wednet.edu
vpn.wsd73.wednet.edu
ohs.onysd.wednet.edu
gfes.comalisd.org
nemo.osd.wednet.edu
tls.automattic.com
*.whiteriver.wednet.edu
view-cs01.wsd73.wednet.edu
www.monte.wednet.edu
wmms.slzusd.org
lwe.edmonds.wednet.edu
washington.osd.wednet.edu
www.eatonville.wednet.edu
printcenter.mukilteo.wednet.edu
wsd73.wednet.edu
*.camas.wednet.edu
edmonds.wednet.edu
www.edmonds.wednet.edu
nemo.osd.wednet.edu
renplace.osd.wednet.edu
qsd.wednet.edu
mail.republic.wednet.edu
www.davenport.wednet.edu
psd.wednet.edu
wrsd.wednet.edu
slhs.edmonds.wednet.edu
www.mccleary.wednet.edu
library.adserv.osd.wednet.edu
admin.hs.gsd.wednet.edu
filter.qsd.wednet.edu

Certificate

The complete raw certificate details for ehs.enumclaw.wednet.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361911585332549531615459729222177884233506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 04:16:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 04:16:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ehs.enumclaw.wednet.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908200322870773028881958395375118662010393687134595526551898551208414683749729919832747287334251818092624647916578466176839170446099384781503960423877368812110463949741319420895934700187400355481456090714403297847621523433387887243755199950720185337896923887692849290828822106350078361278058437563169717688812008561559470402243335558805622583714132060652414320665499016236257616421351005157336718166601248996905681248718341053024636728635819545181073552289831539903322072555970541804498920407379090968691443914635361346335506085091141628596932147986399264637075668319704960197842162240198655002950069081454361691886401127827736102247844526701432757747026306201686953629931842529245549314240939520578035895401361771169373021436073421519068690398830446145732959726694906160240201137291866649882557719098550450476583765363566029490301877530142490226253915731239239348052197728772428666620904083568797633095999919180611316233900200234682264742871552381087635333662919255928091444525889658393590405075252679882485779457495768635108923635834231654111811180083315786352430977243422407745611334808619063002925999654991443972766951981192677983920648786342545796465553901923774214250201918150867867704992246741324703484041656388854504856586237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							929e8a4ac4b9bc7ebbc83dc75248a912586b8679
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.enumclaw.wednet.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fc2c74eb30000040300483046022100c2cd66f5938d3a592ca26e8756c4ac143ae94c2b6989cf53389420e0dd62a33f0221008e6487b170625e835fba0d03afab2d797f702b665ba5d070f795ec3f84962ad10075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fc2c755be0000040300463044022075fbdcd869a8f0cee754d5bea883eff450a7aa29e4f0783ec469d97f4ee09b7b02206171a695e83501c5f8cd57f596fa8217744f4745d5841b0bdff91ebf953e42ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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