www.breathitt.k12.ky.us.schools.bz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:09:7a:98:20:f9:27:22:4d:e3:a9:13:73:8b:15:7b:ad:01 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.breathitt.k12.ky.us.schools.bz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:09:7a:98:20:f9:27:22:4d:e3:a9:13:73:8b:15:7b:ad:01
Serial Number (int): 351674640742714720957547756850142412254465
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:9d:11:f8:5b:44:ff:be:d6:b9:5d:7f:4f:df:ba:42:0c:41:e8:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:52:1a:1f:23:92:8b:8e:80:56:6f:d5:91:f5:31:d8:59:a3:ff:64
Fingerprint (sha256): 07:70:fa:12:f5:4e:5a:58:ae:e0:e5:1b:ba:b2:8c:dd:89:35:14:6d:f3:d0:3f:64:fe:1f:52:48:b8:a0:17:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.breathitt.k12.ky.us.schools.bz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.breathitt.k12.ky.us.schools.bz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.breathitt.k12.ky.us
www.breathitt.k12.ky.us.schools.bz
www.breathitt.kyschools.us

Other certificates including the domain name schools.bz

(limited to 100 certificates)
www.mitchell.k12.in.us.schools.bz
www.huberheightscityschs.oh.schools.bz
www.scott.k12.ky.us
www.winstoncntyboe.al.schools.bz
www.salmonsd291.id.schools.bz
www.jasper.k12.al.us.schools.bz
www.alabamaedutechconference.al.schools.bz
www.westerville.k12.oh.us
www.lyoncntyschs.ky.schools.bz
www.elizabethtoncityschs.tn.schools.bz
www.mountvernoncmtyschcorp.in.schools.bz
www.tuckertonelemsch.nj.schools.bz
www.northridge.k12.oh.us.schools.bz
www.logan.kyschools.us.schools.bz
www.kalispellps.mt.schools.bz
www.madeiracityschools.org.schools.bz
www.stpiusxsch.oh.schools.bz
www.hockinsonsd.wa.schools.bz
www.postfallssd.id.schools.bz
www.estillcntyschs.ky.schools.bz
www.centralcolumbiasd.pa.schools.bz
www.adaircntyschs.ky.schools.bz
www.luvernecmtysd.ia.schools.bz
www.brookvilleschools.org.schools.bz
www.lincolnviewlclschs.oh.schools.bz
www.dallascntyschs.al.schools.bz
www.minnesotarivervalleyedud.mn.schools.bz
www.marplenewtownsd.pa.schools.bz
www.blackvillehildaps.sc.schools.bz
www.hockinsonsd.wa.schools.bz
www.richmondcntyps.va.schools.bz
www.menifee.kyschools.us.schools.bz
www.athensmeigs.com.schools.bz
www.lowellville.k12.oh.us.schools.bz
www.palmyramacedoncentralsd.ny.schools.bz
www.elidalclsd.oh.schools.bz
www.lapromesaearlylearningcntr.nm.schools.bz
www.southpikesd.ms.schools.bz
www.boone.k12.ky.us.schools.bz
www.eastliverpoolcityschs.oh.schools.bz
www.westerville.k12.oh.us
www.pikevilleisd.ky.schools.bz
www.paysonusd10.az.schools.bz
www.madeiracityschools.org.schools.bz
www.idahofallssd91.id.schools.bz
www.butlerschools.net.schools.bz
www.washingtoncommunityschools.org
www.bowlinggreencityschs.oh.schools.bz
www.plainlocal.org
www.meigslclschs.oh.schools.bz
www.plainlocal.org
www.worthschools.net.schools.bz
www.wilkinsonsd.ga.schools.bz
www.dallascntyschs.al.schools.bz
www.msdpiketwp.in.schools.bz
www.starkcntyesc.oh.schools.bz
www.elizabethtoncityschs.tn.schools.bz
www.northwestlclschs.oh.schools.bz
www.whittmoreprescottareaschs.mi.schools.bz
www.yisd.org.schools.bz
www.ashland.kyschools.us.schools.bz
www.westnobleschcorp.in.schools.bz
www.minerva.stark.k12.oh.us.schools.bz
www.johnsoncntyschs.tn.schools.bz
www.nelsonvilleyorkcityschs.oh.schools.bz
www.canfieldlclsd.oh.schools.bz
www.campbell.kyschools.us.schools.bz
www.fredericktownk12.com.schools.bz
www.panthercountry.org.schools.bz
www.new-miami.k12.oh.us.schools.bz
www.hockinsonsd.wa.schools.bz
www.belgradesd.mt.schools.bz
www.southpikesd.ms.schools.bz
www.cmtycharterschofpaterson.nj.schools.bz
www.athenscitysd.oh.schools.bz
www.jacksoncntyschs.ky.schools.bz
www.treutlencntyschs.ga.schools.bz
www.nelsonvilleyorkcityschs.oh.schools.bz
www.calloway.kyschools.us
www.juandiegoacad.tx.schools.bz
www.nlsd.k12.oh.us.schools.bz
www.camdencntyesc.nj.schools.bz
www.breathitt.k12.ky.us.schools.bz
www.fortthomasindschs.ky.schools.bz
www.frankstonisd.tx.schools.bz
www.mountgileadsd.oh.schools.bz
www.gallipoliscityschools.k12.oh.us.schools.bz
www.basdk12.org
www.dlk8.dadeschools.net.schools.bz
www.newburylclsd.oh.schools.bz
www.merrillvillecmtyschcorp.in.schools.bz
www.cmtycharterschofpaterson.nj.schools.bz
www.cherokee.k12.ga.us
www.lordstownlclschs.oh.schools.bz
www.libertychtrsch.id.schools.bz
www.rowan.kyschools.us.schools.bz
www.rosslclschs.oh.schools.bz
www.nicholascntyschs.ky.schools.bz
www.basdk12.org
www.clairtoncitysd.pa.schools.bz

Certificate

The complete raw certificate details for www.breathitt.k12.ky.us.schools.bz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351674640742714720957547756850142412254465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 23:15:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 23:15:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.breathitt.k12.ky.us.schools.bz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711978510852988247081246538672262462662187431262758483615283813404280441961952247959312748293417301401625714301211653263919382897073270696061852609770536741017466514530284949361284196132059468683775897028479165406232453222173087159489174304998496050012438620625915044526048064474089362934488893353798687901810893538104540103271122724083556932279569480954408408045772830399642129650358501433249694578868987451074296885946067568947885925309390473308066962147278102657263810267184105323260656555032031312226493497789968886266042789975000997451919173192962733732916276568352437420355544703783535386266226816811499437656922028651089738885068775874905276107451766983449649773161696002975215409311637111277155439916461950557279028657031124831407239286852620215413125471890683308904568177710355814645690730685625869766159585235445336425320300506478650297077986841908031993551758671038590094367942809408023839301712595120900696168391779351039354083059734362165965006962897075214804063616099512483123790229319355195138587828626679229710677286931303140226642455872520615143618948913245461011856201072842726610493141018192082661263100311249519951363280824429841006726108278381557408952056779003152460029386264047450749755663773855388427076965767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e9d11f85b44ffbed6b95d7f4fdfba420c41e8d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breathitt.k12.ky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breathitt.k12.ky.us.schools.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breathitt.kyschools.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ffe1ab02c0000040300473045022100de2fe16f24d9a2e9daee3e6e5e7dbca7ae033729a5e91cca4348220169dd3cc50220791e93bc2b7d1f31bd972afbc052e6805ee933619ee73492356c9ff6759b2f5800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ffe1ab02700000403004830460221009b8601c0047fafcb3898172d39eacf4a963e86797d7d32c97ac1ac3a2fa3d23802210091fbc52c877c7dabd9d4e8bbc943072de60665d9dd7daa12deec63b6e52fde87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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