blanding-elementary.sjsd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d3:d4:ae:8f:47:34:a1:dc:62:6d:a4:9a:01:ab:33:bd:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blanding-elementary.sjsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:d4:ae:8f:47:34:a1:dc:62:6d:a4:9a:01:ab:33:bd:fb
Serial Number (int): 333419139916384604714712326330834922749435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:3b:60:00:dc:21:39:de:2d:6a:50:c6:57:ff:97:ef:b4:24:a3:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:00:d6:eb:9b:bc:7b:67:ba:1d:7d:37:16:cb:d6:a8:42:9e:36:78
Fingerprint (sha256): 08:34:40:b1:7e:1b:8c:d2:87:f6:2e:ab:45:1c:ef:81:16:70:1b:5a:c0:5a:4c:e6:db:fe:d5:3d:ae:54:37:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blanding-elementary.sjsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blanding-elementary.sjsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blanding-elementary.sjsd.org

Other certificates including the domain name sjsd.org

(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org

Certificate

The complete raw certificate details for blanding-elementary.sjsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333419139916384604714712326330834922749435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 01:18:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 01:18:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blanding-elementary.sjsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907427900609982799446573758568799275327525591803095596440536309304462579461111540398832284358278822088105419380207005092693733420707402021316240846262112303066840840048910235634745415335382001754555623564484410551069559493852619336663473172644036176409791020886343580838867467281633800283184325590749452957696738757336358630357324719904397799831434923253791967697455168235415958375121565756825840962374076095447974119813318916071484612697096646523377157781553379455518682444039115900519253677289663150893995083804065108739740844315875719631774627479347684501337432036828682581261589802983870102422564195165041018538231436929537406596652989113723791838998911721054562831454264090014604864127748206772942614121600626479548083839604946675483035704595840130671214275513177915429328847354024671254592772252847942142465732009756512662917185796551051502539963977834731689222596237930734524411058510335865123630112913013221275266158450311403691843335986802459559696656334818896055469765360159730724704734330336570123651120265571596254071012699744034783341688657325746840885395881424470765283952381372382603042389202934637760048414572098322428394533381987060508209971632161555361651946031653317153015799126784236357863201866825475040070421533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c3b6000dc2139de2d6a50c657ff97efb424a3b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blanding-elementary.sjsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d29cfe13b000004030046304402205ea3ff9ccf00fe6bc45dd994fca40816330bae4a437d57f43a459b060145b1fe02201e09a5f5e2e2ddb777ccf1a439d2f0ce48a9bde4928301c8b432645b565517f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d29cfe1bd00000403004730450220772805a154b42aed255672d8946736d223fa941a1411da861c8d728ec347033302210087598c847ea4253b4e5b9632d94cae02b3905150cae6daaf60244457f1d76f59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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