mfilter.niesc.k12.in.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:3a:16:37:05:04:09:d5:7f:88:97:0b:73:9e:7e:5b:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mfilter.niesc.k12.in.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:3a:16:37:05:04:09:d5:7f:88:97:0b:73:9e:7e:5b:5e
Serial Number (int): 336616471455024472094115231844135669226334
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:3d:b2:20:fb:16:6b:da:a3:a1:76:5c:b0:c8:71:40:53:6f:23:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:c7:65:b3:81:3d:72:bb:c6:a6:39:c1:19:f5:24:1a:03:88:86:79
Fingerprint (sha256): 0c:dd:ed:99:1f:f3:27:08:09:7b:f8:e3:4d:bc:2e:b7:1b:fd:72:85:74:04:31:46:7e:42:aa:aa:08:39:36:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mfilter.niesc.k12.in.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mfilter.niesc.k12.in.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mfilter.niesc.k12.in.us

Other certificates including the domain name niesc.k12.in.us

(limited to 100 certificates)
niesc.k12.in.us
ns2.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
www.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns2.niesc.k12.in.us
ns1.niesc.k12.in.us
www.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns3.niesc.org
events.niesc.k12.in.us
ns2.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns3.niesc.org
ns1.niesc.k12.in.us
ns2.niesc.k12.in.us
niesc.k12.in.us
procurement.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
www.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
www.niesc.k12.in.us
invoice.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns1.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns2.niesc.k12.in.us
www.niesc.k12.in.us
ns1.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns2.niesc.k12.in.us
ns1.niesc.k12.in.us
ns2.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
www.niesc.k12.in.us
niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns1.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
ww2.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns2.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns2.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
www.niesc.k12.in.us
niesc.k12.in.us
mfilter.niesc.k12.in.us
ns2.niesc.k12.in.us
ns2.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns1.niesc.k12.in.us

Certificate

The complete raw certificate details for mfilter.niesc.k12.in.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU4UyNScFXZ3t3jAc47q
NMyyfQpdsQI06CkGfDtXVZs0xSTESDtlWWk6L+bjpe09imV44fWTqf5adgXe8nOu
8rwcqFszp3TOIFZVZLxCh3GYbtbfxj6RZIIiXYVNnMB/je99xc/H8GiKa7VHbUZH
aSKDp6aATDRyYeH7641JqEmpg9NuPRDFgqB1WA7b+vWAM00gmH7gtWLpSCbiUxuP
aSj2qlnDnjsSA4Kh38GKMwKvpt35UqOUXS2QI1MaNxGNP/+o1j5aXQoCP1Ck/iaE
o2/glAogT0uwsE7iJ4h0xn1qnv+enROOWtKme50n71GI//63iaugpdSlagdOxkjD
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336616471455024472094115231844135669226334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 06:41:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 06:41:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mfilter.niesc.k12.in.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20867823588944280637369750645774923113099359143866263302133060085615965921857197997940204326569159874573512650983477709574417200158379077716247932164214820713170030594254305244328948538715559202266048554173898684343430497380264711653792217705941332515650919867949370023875242990534915390897814532089171774629254892128263229885414331851817104321265840220473795571637356881233415797359713831934751832919505805202177142294569805664069082567708909074378715130267582314254997518019602159988661322778877304951266115563809551545761108849510141125574341459026692480899767411782763016970693503585377848112404798821723271644029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d13db220fb166bdaa3a1765cb0c87140536f2365
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfilter.niesc.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163963f261a0000040300483046022100b345f4f6ed6958b9bc087f05a7dad9c48f27de44fcfacba07ae7ff3e86a1f1830221009ea19df2332c093f6d1588c0a0f0ef85c12f87c3f4f1f1b360988349f777c2fc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163963f2625000004030047304502200ae62571c87e3395c4136b26d61f7e5c41a64753f5a0be1fc95570bb0a8fe4660221008a054a0b750c8e27169cd36800dff81a8bcc602460c99b559010b3dca9b12a4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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