verifhigh.com.kosonk12.org
Issued by R3
About this certificate
This digital certificate with serial number 03:9d:e0:9d:c4:68:54:c2:28:98:6a:a5:bb:73:8b:b2:19:cf was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=verifhigh.com.kosonk12.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9d:e0:9d:c4:68:54:c2:28:98:6a:a5:bb:73:8b:b2:19:cfSerial Number (int): 315059755647148932508440785539468455188943
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c5:45:d8:8d:17:3c:c7:40:37:5c:b0:30:13:ad:01:a7:a1:23:93:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:e7:d1:47:62:73:3f:81:23:2c:5d:9c:8a:4e:cf:80:9f:0d:30:b3
Fingerprint (sha256): 13:09:0b:db:7d:b7:56:75:cc:72:78:e0:6a:a4:fe:e3:61:97:9c:27:f4:64:41:51:54:cf:a5:d1:bc:e5:0b:9d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate verifhigh.com.kosonk12.org
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for verifhigh.com.kosonk12.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ctrlpew2.net
easrmoney.com
equal.info.shopsanantoniohomes.com
healthfine.org.xespo.com
jagadambe.com
parkersburgtourism.com
pwcclassifieds.com
rottenland.net.quotidiamo.com
rxsugarswealthystix.com
verifhigh.com.kosonk12.org
easrmoney.com
equal.info.shopsanantoniohomes.com
healthfine.org.xespo.com
jagadambe.com
parkersburgtourism.com
pwcclassifieds.com
rottenland.net.quotidiamo.com
rxsugarswealthystix.com
verifhigh.com.kosonk12.org
Other certificates including the domain name kosonk12.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for verifhigh.com.kosonk12.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISA53gncRoVMIomGqlu3OLshnPMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMTMxOTIyMDFaFw0yNDAxMTExOTIyMDBaMCUxIzAhBgNVBAMT GnZlcmlmaGlnaC5jb20ua29zb25rMTIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1OV5RslLCvOaB4/z6r/3tJ29N+FWCPCmyMcTNFe9r2Gip0s7 LJRx5i6iJ11XVZz2ZTC0aQI/R5aHBf0l2Cj13M9a05SKFLjibDh9VF4/mzsj6Fgr ZVV8x7L+lC4T3VHLG9LVE4xerWfyd0G5l+bxT0PjZ7XnOkciY7oTmqLVbpZe6UYG 72HKDfPC/PcMqkiN5ZjA1tU7zE2aJl9K1DJRQ6BZtRjXccvRqAHanY5e31HJOjkt 2y5VbcZr5R0WgGEV2mZgC/RR+kJqCvlKqtwLNl/rhiTKzztgxsr13pL73tLIhvUT axmNkAqGyJ2EQq2oj51nqtez6v4YB8CYwwv/IQIDAQABo4IC7jCCAuowDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBTFRdiNFzzHQDdcsDATrQGnoSOT+DAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCB9QYDVR0RBIHtMIHqggxjdHJscGV3Mi5uZXSCDWVhc3Jt b25leS5jb22CImVxdWFsLmluZm8uc2hvcHNhbmFudG9uaW9ob21lcy5jb22CGGhl YWx0aGZpbmUub3JnLnhlc3BvLmNvbYINamFnYWRhbWJlLmNvbYIWcGFya2Vyc2J1 cmd0b3VyaXNtLmNvbYIScHdjY2xhc3NpZmllZHMuY29tgh1yb3R0ZW5sYW5kLm5l dC5xdW90aWRpYW1vLmNvbYIXcnhzdWdhcnN3ZWFsdGh5c3RpeC5jb22CGnZlcmlm aGlnaC5jb20ua29zb25rMTIub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y b+H61BcAAAGLKrQAaQAABAMARzBFAiBRwE66pbv++6Y05/bJam8E1icXNHePmaph 64EqvVefiAIhAN0MeOv2bP1Km9sVgmtzS3tauNtrUSVZXBuBHABR2tuqAHcA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLKrQAewAABAMASDBGAiEA rg2T5vwcgO8e14YxO4Fia0bSO11neMGZT4QMAK9gZUUCIQD7kQVZn9TjKf8EBena BUeHKyju1I1D6KP8HTlxzks9GDANBgkqhkiG9w0BAQsFAAOCAQEAIdm01RRTe8dE u3DI9+TuXJVIKeDAq/RkNyycEI1/90/mU+WDbMVemCXQN+GCuLmCpnJRtxXkD43v 69c1E1zjxot0Kq5iawOdYC3juJlPLUJ1Yjk63pi7uDIiE20rebJ76nyJVKuRDt+/ nRHbmAG0k5hQCFWbAwJ9Jkl2hNReKTXmSNDonDbdaP8ewfYAGL5h256qWobb6WDG AxHKWMuEbeXMOH7PkS09atUfUDg/9PlpixBA3ifwHuks0YjlT4ze40m+HP+ChJZl XJQSIU8ynkgBXHIY5nQSw2pXB9AgeczNx0tDOT2e/vfSOw6YMPIfF4b0v4q9/6zf Bvrz1tcllA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OV5RslLCvOaB4/z6r/3 tJ29N+FWCPCmyMcTNFe9r2Gip0s7LJRx5i6iJ11XVZz2ZTC0aQI/R5aHBf0l2Cj1 3M9a05SKFLjibDh9VF4/mzsj6FgrZVV8x7L+lC4T3VHLG9LVE4xerWfyd0G5l+bx T0PjZ7XnOkciY7oTmqLVbpZe6UYG72HKDfPC/PcMqkiN5ZjA1tU7zE2aJl9K1DJR Q6BZtRjXccvRqAHanY5e31HJOjkt2y5VbcZr5R0WgGEV2mZgC/RR+kJqCvlKqtwL Nl/rhiTKzztgxsr13pL73tLIhvUTaxmNkAqGyJ2EQq2oj51nqtez6v4YB8CYwwv/ IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315059755647148932508440785539468455188943 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 19:22:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 19:22:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'verifhigh.com.kosonk12.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26875678369651004704584925149606404272847058083270381220407590269560007866788422789377752805064384239100729186218479136425565976571347477317453027298228227873515602874869033184956731325936413622984732194763236475691415284953699626288531612828960358015850815956726831546387936934437505276832185173396981914412539487451973101262570571050950642576411812058315042688134532547583089059503991220477915466395490235228926702427042699067852557818585028788447456681880734397627676711340124441504966686741720222628500998621210682984902689115096811939312945138026684914875596355760505398069324505495582735169224736879094614720289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c545d88d173cc740375cb03013ad01a7a12393f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrlpew2.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easrmoney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equal.info.shopsanantoniohomes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfine.org.xespo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagadambe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkersburgtourism.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwcclassifieds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rottenland.net.quotidiamo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarswealthystix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifhigh.com.kosonk12.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b2ab400690000040300473045022051c04ebaa5bbfefba634e7f6c96a6f04d6271734778f99aa61eb812abd579f88022100dd0c78ebf66cfd4a9bdb15826b734b7b5ab8db6b5125595c1b811c0051dadbaa007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b2ab4007b0000040300483046022100ae0d93e6fc1c80ef1ed786313b81626b46d23b5d6778c1994f840c00af606545022100fb9105599fd4e329ff0405e9da0547872b28eed48d43e8a3fc1d3971ce4b3d18 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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