www.trimble.kyschools.us

Issued by R3

About this certificate

This digital certificate with serial number 04:15:6a:2d:e2:32:9d:30:10:81:b3:94:46:65:58:d5:9f:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.trimble.kyschools.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:15:6a:2d:e2:32:9d:30:10:81:b3:94:46:65:58:d5:9f:ce
Serial Number (int): 355736209841127155272920011313121770971086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 82:3e:5e:b8:dd:84:c2:53:26:1d:64:9e:c2:6a:0c:b3:db:4d:3e:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:a1:0b:30:5c:39:ac:dc:28:6d:66:d3:88:6e:f5:82:ab:51:8b:6d
Fingerprint (sha256): 05:79:22:8a:c2:58:b8:05:d6:37:d5:ac:e4:de:5f:f1:6d:e3:cd:8b:1f:50:07:9c:bb:7d:a5:99:e8:5b:e1:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.trimble.kyschools.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.trimble.kyschools.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.trimble.kyschools.us

Other certificates including the domain name kyschools.us

(limited to 100 certificates)
carroll.kyschools.us
www.scott.k12.ky.us
athletics.godleyisd.net
ilearn.woodford.kyschools.us
estub.corbin.kyschools.us
www.lyoncntyschs.ky.schools.bz
activities.madrid.k12.ia.us
*.henderson.kyschools.us
www.trimble.kyschools.us
admin.agl.sbcisd.net
infinitecampus.bell.kyschools.us
ccms.caldwell.kyschools.us
activities.madrid.k12.ia.us
www.logan.kyschools.us.schools.bz
ssl803646.cloudflaressl.com
admin.dover.k12.nh.us
estub.harlan.kyschools.us
cchs.crittenden.kyschools.us
augusta.kyschools.us
ccms.caldwell.kyschools.us
mccreary.kyschools.us
infinitecampus.ashland.kyschools.us
*.schoology.com
www.estillcntyschs.ky.schools.bz
www.adaircntyschs.ky.schools.bz
estub.beechwood.kyschools.us
estub.garrard.kyschools.us
infinitecampus.bullitt.kyschools.us
www.eminence.kyschools.us
elliott.kyschools.us
elliott.kyschools.us
bes.nelson.kyschools.us
infinitecampus.hopkins.kyschools.us
estub.corbin.kyschools.us
www.menifee.kyschools.us.schools.bz
tnhs.nelson.kyschools.us
www.boone.k12.ky.us.schools.bz
www.pikevilleisd.ky.schools.bz
dkies.org
gutierrez.hcisd.org
admin.rap48.richardallenschools.com
www.butlerschools.net.schools.bz
infinitecampus.henderson.kyschools.us
estub.christian.kyschools.us
academy.swartzcreek.org
www.hoganprep.net
www.kipling.edu.mx
schoology.com
admin.stes.todd.kyschools.us
caldwell.kyschools.us
nolacollegeprep.org
www.trimble.kyschools.us
*.larue.kyschools.us
www.estub.taylor.kyschools.us
www.ashland.kyschools.us.schools.bz
*.jessamine.kyschools.us
estub.bellevue.kyschools.us
www.grant.kyschools.us
www.campbell.kyschools.us.schools.bz
ges.dover.k12.nh.us
estub.lincoln.kyschools.us
harrison.kyschools.us
estub.covington.kyschools.us
ssl803645.cloudflaressl.com
ludlow.kyschools.us
www.locker.ashland.kyschools.us
www.jacksoncntyschs.ky.schools.bz
mdm.hopkins.kyschools.us
estub.allen.kyschools.us
www.calloway.kyschools.us
infinitecampus.marion.kyschools.us
infinitecampus.nelson.kyschools.us
estub.fultonind.kyschools.us
www.breathitt.k12.ky.us.schools.bz
www.fortthomasindschs.ky.schools.bz
admin.kernhighnetwork.com
ilearn.woodford.kyschools.us
second.exteraschools.org
infinitecampus.ashland.kyschools.us
aca.carroll.kyschools.us
www.estub.taylor.kyschools.us
portal.webster.kyschools.us
tech.campbellcountyschools.org
www.rowan.kyschools.us.schools.bz
www.nicholascntyschs.ky.schools.bz
estub.greenup.kyschools.us
*.oldham.kyschools.us
lpms.lincolnparkpublicschools.com
estub.mayfield.kyschools.us
www.mcleancntyps.ky.schools.bz
www.pullmanschools.org
www.gallatin.k12.ky.us.schools.bz
www.triggcntyps.ky.schools.bz
estub.monroe.kyschools.us
admin.wq.mtpcsd.org
infinitecampus.harlan.kyschools.us
ccms.caldwell.kyschools.us
safari.wayne.kyschools.us
www.adaircntyschs.ky.schools.bz
activities.madrid.k12.ia.us

Certificate

The complete raw certificate details for www.trimble.kyschools.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355736209841127155272920011313121770971086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 02:45:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 02:45:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.trimble.kyschools.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617136478971319281762084720273007465135242526650742841676510900324572639530327949675105133969626838981852780563492506199164389310602185890500687819553912765571585744330259834573147228942735339714649595311783278581273726401725351420228562126682197141342726809869074730945998435055027813419058537732778525544877730444299456229634729566932752005248996090364128008714475689231212661792222983977926534604406975178617854317377416173237908176532206435350938583320891531036236035203353111695642810155018208093854666417719809755979190971389586256088041754407611234983726485535919690127729938378248265680086802961506264773036604936020885233169599272007823819360118247312095653522248915388263022128230171125002698394480334955404695283848326853344698692346376553251770072890126639433875211203977624018997498321516104102469770836262818961771997431307698899673863398866187441886961353208006586852055370874870405305658022355647374403709150334562493569353717737011869994987512010964182712678298328109245976602936555069176866391587292164212720293418178384246949929284790583838503701963759197041424161572987345329283742772389944534064961153720280174596687334171557276655868524741125506442297089745900718743049478703425292965815816661053842072508473651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							823e5eb8dd84c253261d649ec26a0cb3db4d3e03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trimble.kyschools.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3992c0a900000403004830460221009357591f9a426c28fc5d0b50300333b98dc03a1f9668aba4a13f3c66bfebe135022100f01012a186b1b321a57c5eee2440ca15468b49f698484f3f0b9302b0368dc1f6007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d3992c0af0000040300483046022100823b6bed5a7d0d8427c4e184ec6d3d96fde08bd2102be479ad3bb93738509ed9022100e064748d4418cd8ae5b3577c32c3e35a5501b01d53c9098943d31d1cb3fc982e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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