www.jacksoncntyschs.ky.schools.bz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:0e:6e:48:6e:c6:f4:ff:b1:f2:25:58:9b:1e:d6:e7:29 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jacksoncntyschs.ky.schools.bz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:0e:6e:48:6e:c6:f4:ff:b1:f2:25:58:9b:1e:d6:e7:29
Serial Number (int): 262036604342828208076878174611080421500713
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:f0:a7:44:15:ce:40:22:54:51:2e:73:df:3c:24:08:2c:1b:19:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:7f:ae:90:fa:0d:b5:83:b2:b9:81:a0:b2:f8:65:c3:01:d8:7b:c5
Fingerprint (sha256): 06:d1:97:db:9a:c4:09:5c:6e:ae:99:2d:4d:ef:91:29:19:84:52:74:f3:37:eb:1f:e4:24:43:3f:4a:45:04:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jacksoncntyschs.ky.schools.bz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jacksoncntyschs.ky.schools.bz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jackson.k12.ky.us
www.jackson.kyschools.us
www.jacksoncntyschs.ky.schools.bz

Other certificates including the domain name schools.bz

(limited to 100 certificates)
www.mitchell.k12.in.us.schools.bz
www.huberheightscityschs.oh.schools.bz
www.scott.k12.ky.us
www.winstoncntyboe.al.schools.bz
www.salmonsd291.id.schools.bz
www.jasper.k12.al.us.schools.bz
www.alabamaedutechconference.al.schools.bz
www.westerville.k12.oh.us
www.lyoncntyschs.ky.schools.bz
www.elizabethtoncityschs.tn.schools.bz
www.bucyruscitysch.oh.schools.bz
www.mountvernoncmtyschcorp.in.schools.bz
www.tuckertonelemsch.nj.schools.bz
www.northridge.k12.oh.us.schools.bz
www.logan.kyschools.us.schools.bz
www.kalispellps.mt.schools.bz
www.madeiracityschools.org.schools.bz
www.jeffersontwplclschs.oh.schools.bz
www.stpiusxsch.oh.schools.bz
www.hockinsonsd.wa.schools.bz
www.postfallssd.id.schools.bz
www.estillcntyschs.ky.schools.bz
www.centralcolumbiasd.pa.schools.bz
www.adaircntyschs.ky.schools.bz
www.luvernecmtysd.ia.schools.bz
www.brookvilleschools.org.schools.bz
www.lincolnviewlclschs.oh.schools.bz
www.dallascntyschs.al.schools.bz
www.minnesotarivervalleyedud.mn.schools.bz
www.marplenewtownsd.pa.schools.bz
www.blackvillehildaps.sc.schools.bz
www.hockinsonsd.wa.schools.bz
www.richmondcntyps.va.schools.bz
www.menifee.kyschools.us.schools.bz
www.athensmeigs.com.schools.bz
www.lowellville.k12.oh.us.schools.bz
www.palmyramacedoncentralsd.ny.schools.bz
www.elidalclsd.oh.schools.bz
www.lapromesaearlylearningcntr.nm.schools.bz
www.southpikesd.ms.schools.bz
www.boone.k12.ky.us.schools.bz
www.eastliverpoolcityschs.oh.schools.bz
www.westerville.k12.oh.us
www.pikevilleisd.ky.schools.bz
www.paysonusd10.az.schools.bz
www.madeiracityschools.org.schools.bz
www.idahofallssd91.id.schools.bz
www.butlerschools.net.schools.bz
www.washingtoncommunityschools.org
www.bowlinggreencityschs.oh.schools.bz
www.plainlocal.org
www.meigslclschs.oh.schools.bz
www.plainlocal.org
www.worthschools.net.schools.bz
www.elkhartglenbeulahsd.wi.schools.bz
www.wilkinsonsd.ga.schools.bz
www.dallascntyschs.al.schools.bz
www.msdpiketwp.in.schools.bz
www.starkcntyesc.oh.schools.bz
www.elizabethtoncityschs.tn.schools.bz
www.northwestlclschs.oh.schools.bz
www.whittmoreprescottareaschs.mi.schools.bz
www.yisd.org.schools.bz
www.ashland.kyschools.us.schools.bz
www.westnobleschcorp.in.schools.bz
www.minerva.stark.k12.oh.us.schools.bz
www.johnsoncntyschs.tn.schools.bz
www.nelsonvilleyorkcityschs.oh.schools.bz
www.canfieldlclsd.oh.schools.bz
www.campbell.kyschools.us.schools.bz
www.fredericktownk12.com.schools.bz
www.panthercountry.org.schools.bz
www.new-miami.k12.oh.us.schools.bz
www.hockinsonsd.wa.schools.bz
www.belgradesd.mt.schools.bz
www.southpikesd.ms.schools.bz
www.cmtycharterschofpaterson.nj.schools.bz
www.athenscitysd.oh.schools.bz
www.jacksoncntyschs.ky.schools.bz
www.treutlencntyschs.ga.schools.bz
www.nelsonvilleyorkcityschs.oh.schools.bz
www.calloway.kyschools.us
www.juandiegoacad.tx.schools.bz
www.nlsd.k12.oh.us.schools.bz
www.camdencntyesc.nj.schools.bz
www.breathitt.k12.ky.us.schools.bz
www.fortthomasindschs.ky.schools.bz
www.frankstonisd.tx.schools.bz
www.mountgileadsd.oh.schools.bz
www.gallipoliscityschools.k12.oh.us.schools.bz
www.basdk12.org
www.dlk8.dadeschools.net.schools.bz
www.newburylclsd.oh.schools.bz
www.merrillvillecmtyschcorp.in.schools.bz
www.cmtycharterschofpaterson.nj.schools.bz
www.cherokee.k12.ga.us
www.lordstownlclschs.oh.schools.bz
www.libertychtrsch.id.schools.bz
www.rscoyotes.net.schools.bz
www.rowan.kyschools.us.schools.bz

Certificate

The complete raw certificate details for www.jacksoncntyschs.ky.schools.bz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262036604342828208076878174611080421500713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 23:09:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 23:09:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jacksoncntyschs.ky.schools.bz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640928584273495775718788948576600898927337300300943860518598124697333578725033706505516875928902810916876123454992552490956808742495280690067223085304639696656751792213153071463808746160388745813281377116386335176862089013814089511000661257515641219266641320194027906743550359908483673422222548501053510622720101435603800147543817399398041519516615759024217821804741341596355817510113497389229008361460278330101664490773341845221001126943157996269813292006222601815044784615490974473587450342909717479594868012830170320259619218441381475795620360785582972242921213404344238301602119199923911454546858330091957104224431553799848967203074278273250129192948387663857769046642806616428805309269139023614438531544573002700868256756574773686575654069607076152888143398006193990222844277263343120495580041141740277633070020730751762612272191021495562276461689998331724200223950067164398291722886859253074460632903884551907786472791439140754904688187641162306317454279164741636930777793037426131729272765168488870381164234117532359234593582378880584781804427720860707998303217823198673827666220705666226108547102764836501383369623902661176747326213340410131243399891929824704133929325997569067667520134061951373839474192787613174441734260631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56f0a74415ce402254512e73df3c24082c1b19be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackson.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackson.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksoncntyschs.ky.schools.bz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f68bbe7b20000040300483046022100e3c8aca59ef8757ee172c7ffcecc107b8f6239459e2455e4befeefc5a24edceb022100a658293433bf823e485a61ca54f12adfc50302c20beb4a944bdc42fe9147a1f400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f68bbe7d50000040300473045022100c2a8036844afdb02dc48004e3501670b571e73c68829e2fe058812d08416628002200a50ce03552d7ab608e8dc72adaeba2f32b5da39970447c25376731e17d1fabd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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