ses.goshenlocalschools.org

Issued by R3

About this certificate

This digital certificate with serial number 03:76:01:19:78:b3:08:c5:3a:07:d1:e3:6c:24:d2:a8:cf:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ses.goshenlocalschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:01:19:78:b3:08:c5:3a:07:d1:e3:6c:24:d2:a8:cf:47
Serial Number (int): 301491638575442434755873828665261321408327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:a1:2c:42:bf:8e:e8:23:fd:68:e7:cc:2b:13:94:8f:e0:93:3c:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:ff:0b:38:cf:30:0a:d4:0e:62:78:f8:c4:ab:ba:75:69:0d:c2:a6
Fingerprint (sha256): 13:81:e9:19:0e:41:10:4b:ce:4e:e0:71:0b:77:a3:63:51:60:6e:01:3f:c2:31:19:3a:16:61:24:d1:e5:23:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ses.goshenlocalschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ses.goshenlocalschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ses.goshenlocalschools.org

Other certificates including the domain name goshenlocalschools.org

(limited to 100 certificates)
admin.raak6.richardallenschools.com
admin.newbernmiddle.gocats.org
sunnyside.goldenruledallas.org
ses.goshenlocalschools.org
bell.robla.k12.ca.us
www.msd120.org
admin.illinois.goldenruledallas.org
admin.bclc.burke.k12.ga.us
admin.almadinah-school.com
admin.nichols.bcsd.com
fes.comalisd.org
desoto.goldenruledallas.org
leonardeulerd.edu.mx
admin.vannoy.cv.k12.ca.us
mc.goshenlocalschools.org
admin.evergreen.bcsd.com
pg.goldenruledallas.org
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.longfellow.bcsd.com
goshenlocalschools.org
admin.redwood.cv.k12.ca.us
admin.athletics.goshenlocalschools.org
lorena.exteraschools.org
admin.alma.cv.k12.ca.us
dvms.comalisd.org
admin.athletics.goshenlocalschools.org
admin.harding.bcsd.com
admin.hlc.gocats.org
gp.goldenruledallas.org
harding.bcsd.com
admin.almadinah-school.com
admin.bethune.hattiesburgpsd.com
admin.thorner.bcsd.com
gms.goshenlocalschools.org
downtown.bcsd.com
ruggleselementary.org
athletics.goshenlocalschools.org
admin.athletics.goshenlocalschools.org
admin.pg.goldenruledallas.org
admin.sunnyside.goldenruledallas.org
goshenlocalschools.org
admin.almadinah-school.com
www.gordonbernell.org
admin.fletcher.bcsd.com
admin.ghck12.com
admin.almadinah-school.com
wilmer.goldenruledallas.org
admin.athletics.goshenlocalschools.org
stanton.cv.k12.ca.us
admin.almadinah-school.com
admin.lindenusd.com
admin.wilmer.goldenruledallas.org
goshenlocalschools.org
gfes.comalisd.org
admin.goldenruledallas.org
www.phcsd.org
admin.wilmer.goldenruledallas.org
admin.almadinah-school.com
www.goshenlocalschools.org
school.sp-apostle.org
admin.almadinah-school.com
admin.gp.goldenruledallas.org
admin.newbernmiddle.gocats.org
ses.goshenlocalschools.org
mc.goshenlocalschools.org
admin.washington.bcsd.com
glenwood.lindenusd.com
goshenlocalschools.org
admin.curran.bcsd.com
ghs.goshenlocalschools.org
illinois.goldenruledallas.org
admin.almadinah-school.com
hort.bcsd.com
bchs.burke.k12.ga.us
admin.bcsd.com
admin.almadinah-school.com
admin.desoto.goldenruledallas.org
admin.hills.bcsd.com
admin.cecdc914.org
admin.almadinah-school.com
admin.bcsd.com
admin.almadinah-school.com
admin.monessenschooldistrict.com
ghs.goshenlocalschools.org
illinois.goldenruledallas.org

Certificate

The complete raw certificate details for ses.goshenlocalschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISA3YBGXizCMU6B9HjbCTSqM9HMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTQwMTIwNDZaFw0yNDAzMTMwMTIwNDVaMCUxIzAhBgNVBAMT
GnNlcy5nb3NoZW5sb2NhbHNjaG9vbHMub3JnMIICIjANBgkqhkiG9w0BAQEFAAOC
Ag8AMIICCgKCAgEA6BBslfFOgYJYyb0RlQ6c8N8vjA2BGEvbmh3q7ewcHkgx4je8
I+AvQkgkLZtyGYxvoZwsxdrqJRG8ktfD7hI3pz+gEIGUeIpetDN1/ApkUEdlOqQZ
iw3M7+yAfhAdbqoWhiToH50fFWV2kk69e2UAHA15Ffic/8dTQwXjBcXgsb0e+5GM
6fstnaEr4OrMXCFL+e2pHHm6fhcGs5Dpo5I99OaFJiak1b9XRTdz8LxQYefBqGR9
WoVvl+yfi79yM1Z6kXe3/LiTDKaniRKzbJGgC5ffzXwAzskAyuxC4XLNItGOSdz3
OoorZDZPNhsdhkE6iN94M9gMyg0/6LCJitqVMfKPdAMpS1n5nPicCoAD3hN//oos
4bq15WGfVtQeoAwSl9JHU6rIz0FBstMXxLTJwA//NOklo9I+4o9mAq8oO3APSLIR
eOnjH8zaYY949tKLcXAxJtmJftGowvQzHSbRRbbVtvF58NHGpedyMQDqQetAWBXI
JFuRU9n1FzA+nFmi6b+RNcshcZTr0OZ7mHkRpP/tBaLlpE0m5nzBTyGFbu0VFIgS
JZGDfeETtZZ2xz2pbd71e+SJJJBx+8VZSWsWlsQMWRxQyrCwKMw7DVwLgab9ea5H
Uxn8387ASZrOPjejmw4O78M8iSOS/VCM/mCQf/zMAE54MHpTK66i3P9iSI0CAwEA
AaOCAhwwggIYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSaEsQr+O6CP9aOfMKxOU
j+CTPG4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wJQYDVR0RBB4wHIIac2VzLmdv
c2hlbmxvY2Fsc2Nob29scy5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv
4frUFwAAAYxmIF/kAAAEAwBHMEUCIQCT2hl222zfAPXomYHdqnTz0jDjtjniAld0
c4gz6ugo3wIgVVfgG2ZqgTAr52lh0iCyXPygVy+Ir+QUJNcVzO0Re2EAdgCi4r/W
Ht4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxmIF/yAAAEAwBHMEUCIH+t
MATgiw36rOlbd/ZxIiWX9YiG6OZ7xEiis1l5igb+AiEAxIkJZaBhkLneu0b9ASXx
2DzWGaquGaZ+WtxWSRzNlbcwDQYJKoZIhvcNAQELBQADggEBADQTiuUNOZmgelHX
F4K1/PmhnkQE2eHOZvlauXrUtl+ZwG5rGej2N+KLJei/MEr7HoveEfnYoe4eg4T3
exD7+w2hscXaW5cLBMqZ2BiWuKWtvA8oa8SEnx03mm61vzAHNdehH6aLTaF1hDqD
3KbgXCVgQx9pS9mtO8LVH/8uZbeWAyzGdsk4cmbK/edmmdzYk3UzPs3fIQcgbMDZ
8FfF1WSH+F/YgHDZn/4Yb4NT5s11L08i2wnt/jxZ+piEOGv0tq8DzzYu+plXUqwJ
md8vc16eRLvNU0bIINXz13ZcgqoAuYi5/ZE8UgCFrI05E1WUt8ql8lhODX7BmnbT
6LTs3YU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301491638575442434755873828665261321408327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 01:20:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 01:20:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ses.goshenlocalschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946739161042079008732346193944406620205190660092325894041582285889964275127075748251211577498978325136469995888320285921635436855303283210249781133874708684631043730461159907259781523607424419876084504588885340384200666620398860218755672002178959660740277400841536782745761694669720426757515559158921683843920278922029530291433654763807237751593054259425839826106516039735350356359919449323636947834497276059881563876010501362469446083782361734115510758519726365983966508827638164403155382349634974541050294110916790825992156677057540394062886399876411943151919842162837185684860843929504966664128069354779011814869815337666621051052563218224349119398953132910071275704890300952398201017393304167627617177179746663189828584501223871037904339365207829941589695810282476618682156843077417576435470345826857992857793849310258544741098084434825513299839612254814563217128487698180245461917528291843145489938146180144403582601409182957666683503559635540040951880175890809894320179582514431888436640182381278445591326757835414099153834764429310120761003010130936744323057809530153400115841583500231232721738332922311537798908776361414561685507719981818428108880774587006489080378180981676686004474053583739827761475210062228898013004318861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49a12c42bf8ee823fd68e7cc2b13948fe0933c6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ses.goshenlocalschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c66205fe4000004030047304502210093da1976db6cdf00f5e89981ddaa74f3d230e3b639e2025774738833eae828df02205557e01b666a81302be76961d220b25cfca0572f88afe41424d715cced117b61007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c66205ff2000004030047304502207fad3004e08b0dfaace95b77f671222597f58886e8e67bc448a2b359798a06fe022100c4890965a06190b9debb46fd0125f1d83cd619aaae19a67e5adc56491ccd95b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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