helpdesk.ausdk12.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:66:da:c5:02:9b:8e:b1:c8:6a:af:bd:87:35:f4:7b:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.ausdk12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:66:da:c5:02:9b:8e:b1:c8:6a:af:bd:87:35:f4:7b:4b
Serial Number (int): 342120495927669668720102888247212639550283
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:12:a4:ef:2d:0e:57:54:32:66:38:14:a2:08:f6:29:6b:bb:5c:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:2f:54:b7:26:d8:ff:38:82:d3:b6:56:f2:9c:11:7a:a7:97:0e:c2
Fingerprint (sha256): 0b:2f:2e:85:dc:fa:35:8e:cd:c9:1d:b9:70:94:6e:42:ba:27:fb:2a:8f:2e:ab:63:1f:2b:5c:8a:71:91:06:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.ausdk12.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.ausdk12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.ausdk12.org

Other certificates including the domain name ausdk12.org

(limited to 100 certificates)
acc.ausdk12.org
ausdk12.org
marin.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
cf.aceroschools.org
helpdesk.ausdk12.org
mercury.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
helpdesk.ausdk12.org
ahs.ausdk12.org
ams.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
aceroschools.org
aeries.ausdk12.org
www.torreselapamagnet.org
acc.ausdk12.org
acc.ausdk12.org
*.ausdk12.org
acc.ausdk12.org
*.ausdk12.org
ausdk12.org
hermes.ausdk12.org
helpdesk.ausdk12.org
acc.ausdk12.org
acc.ausdk12.org
abi.ausdk12.org
admin.ov.ausdk12.org
ahs.ausdk12.org
ausdk12.org
ahs.ausdk12.org
www.brackettisd.net
helpdesk.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
admin.ov.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
admin.ausdk12.org
admin.rmcacs.org
ahs.ausdk12.org
mac.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
acc.ausdk12.org
admin.acc.ausdk12.org
acc.ausdk12.org
*.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
*.ausdk12.org
ahs.ausdk12.org
*.ausdk12.org
*.ausdk12.org
*.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
ov.ausdk12.org
reset.ausdk12.org
www.torreselapamagnet.org
*.ausdk12.org
acc.ausdk12.org
acc.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
acc.ausdk12.org
mercury.ausdk12.org
aeries.ausdk12.org
admin.adulted.ausdk12.org
acc.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
cornell.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
*.ausdk12.org
admin.dm.aceroschools.org
*.ausdk12.org
ahs.ausdk12.org
cornell.ausdk12.org
rowlandschools.org
ahs.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
admin.aceroschools.org

Certificate

The complete raw certificate details for helpdesk.ausdk12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp3gvcYyGbKCSJOqje9HC
xe1fGu+vf6tPuBQgUMGndUdjpZLlMU75wjOOZO2HQfrKDZrDmeeCw1Yj3SaWaOdr
pxo4l0XD9Wsu+QfHBBi1U+gYVHOybPw7BTYHwPK2m3iDDSYcBtp/fo5EIlkkIMDQ
H0ooA17LMriCnh2uCPlxxmZp7gEBIgcA5If7RCvKSAatJZhIgRdGLaGUJ4NuTYBU
5j1VK1EfMgqLb0e3GqbVM3RGHKqaZbchUMCVRekGuIzFsoBE5yTw7BnaMrLHiC69
rL9AYQLYLq2G0ztx5/UQiepeYUySbZWL1nm7MJJR2z8Npc6eq+h0fQKNB+iUFx7E
8k0YX8tGjG9pb5wyyb/DNCJs3ALC9PPSkwYtExws8Lb24Q0Zzntnpjz9wsHLFr0F
zzy8r1de+mFARJpR96mYepWE6ZRO0U/Tnf+laRRzwCtWw+vvK3AGHBf1Udi9pFlJ
cowS7/DNmaieuFpn7JapUVz2aNj9OBRBqe/Q/nDNbnHb1TKz3hzj+VNWYwkuEgFG
9ZigZXQ0K9TSkgBSjG/gPjygaaMz509XhKvDKAtBGumWcgvZZObSHCgDtJBylBq/
p2tkJr+tG/zf72k+sBvEDk9EX1a6onbKe8kPk2Nonr6vC8Y7S/CI7TI1EUyQeDQ6
2wZlGiQN5kbiXKHSvIHZVBMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342120495927669668720102888247212639550283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-15 23:42:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-16 23:42:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.ausdk12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683215845897583129303129732107785749654420259114242839930382507360591191241479952992786250407994563831945769178029470134106109088635295113490878088475439931848492756924175106905771927365003222715355859483175282863081341134391838558974369905743383835836582025073006836071426347993585183382729621893302774179678947903119652471424081032265615270043420962755774132380096556186478782280220492744285228192592904511940318473425746755719459977079055395425123290424377305474451244401810477081494483217664235400742331200794952804305028091660293667490228222062979822545422841936331082550532872654824293513211723940421049587006156318409764974490496838500240231173542275169017530578521441845978720919460991722652157668176856257568720082859100154340355242724335921872870731248280385397411457303772678975844923491545481904053559651100804325915206333264308427059659924631973656489444348780281711250066935614732101608033136922616403497258513749964118504920361067140686673091221992838297607080133767408923578503377853952957742801686124656961810961656301065106353390422806884175421664456584556633753175741535678227161113150509020898554753673451503089782241604377299875446907852277355488973642921842917506034111435301553268952630968637671343199406871571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:29|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ausdk12.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017efffb06f90000040300473045022100e91ab51a4e12f55144e6f3542968c1df4fe3d8f364a85a2049331f5daec31b9f02207531a857caea7b765e01504c8fcfb71ca23590b84405b9f9f58384af55d22a5300760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017efffb07aa000004030047304502210086142ff509b84920e4764f930bd5148996fa43ac806f270f08d1867ef0edcff202204ab14aaea72e54a463a7b04d4206403f5244850662fc0db346006a6b08a5ffd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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