richgrove.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ef:31:21:44:39:62:69:cd:d5:46:3c:cd:ec:e1:1c:ea:87 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=richgrove.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:31:21:44:39:62:69:cd:d5:46:3c:cd:ec:e1:1c:ea:87
Serial Number (int): 342729648390725140986521811782642589035143
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:3d:e5:ff:bb:28:ce:30:90:15:bd:fe:90:bc:54:7c:be:86:d1:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:3a:38:ce:ba:25:d8:70:4f:1d:55:b2:64:85:2f:ca:8a:9b:fd:c0
Fingerprint (sha256): 0c:a1:02:c7:7a:c0:ce:b6:40:e0:cb:3a:e0:13:39:87:d8:e6:18:d5:58:48:d1:57:eb:05:4e:6d:51:51:18:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate richgrove.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for richgrove.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

richgrove.org

Other certificates including the domain name richgrove.org

(limited to 100 certificates)
www.lighthousecs.org
www.richgrove.org
richgrove.org
richgrove.org
*.richgrove.org
*.richgrove.org
careerprograms.comoxvalleyschools.ca
www.richgrove.org
*.richgrove.org
*.richgrove.org
admin.nohum.org
admin.andersononline.org
*.richgrove.org
lighthousecs.org
*.richgrove.org
*.richgrove.org
richgrove.org
admin.whhsny.org
www.athlosprep.org
*.richgrove.org
www.tulsalegacy.org
admin.monessenschooldistrict.com
richgrove.org
admin.rmcacs.org
admin.andersononline.org
powerschool7.richgrove.org
www.richgrove.org
www.whhsny.org
powerschool7.richgrove.org

Certificate

The complete raw certificate details for richgrove.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwljuYmRmWaugWtI2u/8T
N2UeelXuiVkT/Z7U/XFmogr0ugg1fJmHNBdC4QcBTidvzWk0CLxsS5M4HN0RZFD1
xfY8L5rKRqyUeR2pcLFh+ONgrTF9MrOPixd2oeL7/AAb5xYj+Oc9CBi0z6f4nNnn
bTwENF+RSUlGdoBWJhgPAB4SbrTLo6qN/nWhn1RxQEN5VBXJdtEHQxemk8dzEsBl
FQavl0D1hYPwE4qxtwnqODrqucGEB8BzNROL8PGuOmUWtbDZ9+KUtBpKPtLwPn0c
rrJJTkMFGlNG0ZjVHLeqWYnFiAFmEsqnL5MRdVnXoWRkth/DDL+IDHQHLQRm5xOd
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342729648390725140986521811782642589035143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-10 22:52:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 22:52:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'richgrove.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24534084767081341049531227942164612516945400140994924959011352747827244447538835159118400114903769948353053033127938697419595052363494501175590380916524585467790350710698065638852096645228834963578822259462530281644289788850088797359216824506241369238859974969437662253108335796697841160696920793226081775255563917597110696385399329493224062088996285944898169939141709633449812705654817641959221521945582223451197456123062864279854594446089720776308971998117148342429415249975227421311013086608452999369761792781452669671335678648789975998433270098121540233241157911485335745927181411315310261764188996291480821931447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f3de5ffbb28ce309015bdfe90bc547cbe86d1e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richgrove.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188a7b97f930000040300463044022010a32321fc75ef9ebb77564428295701172e39721d81d7738e1e9b6d697c765502207d4c2509b1cef5269f598831a26efb57daacbfbca7fc42d33431d1b29834b6c6007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188a7b97f790000040300483046022100d18e8f2beb2ab3f2cc39eb827465b0b15ad7782d6ef11bff477633f4fb11621e022100de4481bb69e03a0f77e98236cced433127cfb3db5374383561e98ba9afd680ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005bdf178e68ca2c222945394a9415e4467fa2fdcb1753f59a20d147fb00022ac31cef5c1900bd18e1c75d3bdad51f6a79846d5871693d806539fc31e58c751d6a91c999c371b32f3dc4d7a02fa2818fe10755e10892cf4fd29591b45bf7b3bc4b172e13a72d330bc1ddfd39f914a5b26e2493d7a8f93c6d52c61aef482de54f2e75a06b34570172ce183fdd00b50df99696f1e2b6a3ecfd7e0421b1f9167cf7b25403e3751299ea6b0ec6e31eb54442e2ea8ca57b1445fb3a78e5722fbf813963892415ee6ba87488e863430ead2dec9692954f646c86eb28348041091662c64667efdb7e565771c0ae677130660beb4a2a048b5282aef077314e3d176de30098