mynhusd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:53:b6:a1:81:e3:17:1f:28:16:f7:bb:4d:ca:3c:c3:14:94 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mynhusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:b6:a1:81:e3:17:1f:28:16:f7:bb:4d:ca:3c:c3:14:94
Serial Number (int): 289823052339168498786496604163816183501972
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:01:23:6a:4a:7a:19:cc:50:14:23:fc:e5:53:26:e3:ba:a4:18:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:e0:80:b8:25:dc:b4:fd:69:0c:c9:ba:91:72:82:05:5c:bb:5e:94
Fingerprint (sha256): 15:70:d8:9b:c2:48:10:87:a4:63:99:43:9d:da:6b:e6:e8:5c:5b:6d:f1:ae:99:b8:80:4c:1e:16:7e:0d:da:6f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mynhusd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mynhusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mynhusd.org
www.mynhusd.org

Other certificates including the domain name mynhusd.org

(limited to 100 certificates)
www.brewermiddleschool.wsisd.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
www.yorkprepsc.org
bankjagostatus.mambu.com
cloud-marketplace.status.broadcom.com
admin.bakerschools.org
admin.dsamsokc.org
admin.calhanschool.org
www.colegiofranco.edu.mx
admin.casee.chebschools.org
cloud-marketplace.status.broadcom.com
cloud-marketplace.status.broadcom.com
moodle.mynhusd.org
www.chebschools.org
sea.mynhusd.org
admin.hes.huntingtonisd.com
admin.ambassadorhigh.org
combshs.jocombs.org
admin.msab.msa.state.mn.us
admin.centerpreschool.centerusd.org
mynhusd.org
admin.ourcommunityschool.org
admin.bhs.baker5j.org
mynhusd.org
admin.lds.freeholdtwp.k12.nj.us
dew23ru98r2949283r9d.profitbricks.de
admin.ambassadorhigh.org
cloud-marketplace.status.broadcom.com
admin.casee.chebschools.org
admin.bakerschools.org
sv.gvusd.k12.ca.us
admin.casee.chebschools.org
admin.ecps.us
acrma12.org
admin.ambassadorhigh.org
www.dsatulsa.org
nhstitans.org
admin.ambassadorhigh.org
ccms.mynhusd.org
dew23ru98r2949283r9d.profitbricks.de
bankjagostatus.mambu.com
www.slcd.org
cloud-marketplace.status.broadcom.com
admin.ambassadorhigh.org
dew23ru98r2949283r9d.profitbricks.de
acrma12.org
6h60rqz7vjhj.stspg-customer.com.como3.pl
6h60rqz7vjhj.stspg-customer.com.como3.pl
pwm.mynhusd.org
dew23ru98r2949283r9d.profitbricks.de
admin.centerpreschool.centerusd.org
6h60rqz7vjhj.stspg-customer.com.como3.pl
admin.bakerschools.org
6h60rqz7vjhj.stspg-customer.com.como3.pl
mynhusd.org
cloud-marketplace.status.broadcom.com
dew23ru98r2949283r9d.profitbricks.de
www.sjwschool.net
dew23ru98r2949283r9d.profitbricks.de
admin.bakerschools.org
admin.ptcbus.org
dew23ru98r2949283r9d.profitbricks.de
plummerpanthers.org
cloud-marketplace.status.broadcom.com
bankjagostatus.mambu.com
dew23ru98r2949283r9d.profitbricks.de
mynhusd.org
6h60rqz7vjhj.stspg-customer.com.como3.pl
admin.3rcs.org
texasleadership.net
6h60rqz7vjhj.stspg-customer.com.como3.pl
6h60rqz7vjhj.stspg-customer.com.como3.pl
dew23ru98r2949283r9d.profitbricks.de
dew23ru98r2949283r9d.profitbricks.de
athletics.ambassadorhigh.org
acrma12.org
admin.cfn.edu.mx
dew23ru98r2949283r9d.profitbricks.de
admin.bhs.baker5j.org
dew23ru98r2949283r9d.profitbricks.de
dew23ru98r2949283r9d.profitbricks.de
frayluisdeleon.edu.mx
bankjagostatus.mambu.com
dew23ru98r2949283r9d.profitbricks.de
6h60rqz7vjhj.stspg-customer.com.como3.pl
cloud-marketplace.status.broadcom.com
admin.bakerschools.org
cloud-marketplace.status.broadcom.com
www.cristoreymiami.org
admin.kit.mynhusd.org
school.sjnewhaven.org
6h60rqz7vjhj.stspg-customer.com.como3.pl
dudley.centerusd.org
admin.bhs.baker5j.org
cloud-marketplace.status.broadcom.com
ace.pusd.org
admin.fcue.franklincountyschoolsms.com
www.carnegieschools.org
www.sttheresaschool.com
dew23ru98r2949283r9d.profitbricks.de

Certificate

The complete raw certificate details for mynhusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mYUOSobpC05yhSwAsKc
RK1oBrybleMyIMsWT3RJiLRhpUbsSmlXda7TofYZ7uqk7eZzMs82nIedOssIpr+N
ippIcnO72ypZWqcNaQWW+sidwQt9wLYbWuIUcvVsMbyyIDfYeBh3Tx9n6xQ+jU2k
YojU0gijliZoxRlxggSJkrrfA7O7pt7v/LnnQvMNIzgk44MqgARiNzzR+d0v5AJY
2IRFo1njoZ7edAkmGWPq12cesCnFFsvMXelOb3V35jrSJofM7ABzSzuLIJWgAuq4
cXaS0z6d0ZLSxaSagDwhgezKnk9H1sPs0uU8tWtqR/hNOhChn/88yUWmFUC4qUsw
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289823052339168498786496604163816183501972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 10:03:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 10:03:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mynhusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28580193951965339514770551151865922761509338592068322282498168406362330378080237265930543301646932635923845074333024101862370974336510916916173084044132896434478880001032326552367007652068690462621877668463139145005170777174864148798972602549070249440094196707423678494282649412958037378917390402434988112420195393576204618703835622569518262410740911942103415445862927846600189790948502741600844855170181105875008987456193973441246501534847789836042887068670886785995379985292413489920567182912256820174535057621380737132808073459092262706149258228143086843517195611267021268760757237308206651519804320699669663133839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f01236a4a7a19cc501423fce55326e3baa418fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynhusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynhusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c39a56a120000040300473045022072220dfffa6a60a3d0273572980ea744116177f88e76bfa9afea73543bf23c7e022100cfe3c3f73e53cfaee6bc455c56bebd61b75964c67a5869016647b949e05d552200750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c39a56afe0000040300463044022073fda95b72ea3b64b7075ef1e521e3c9a630030cf19a96bd4589255623d51f2b022065f5b77758f3350896c2185a1979e08f1c997a4b4b37faf6076e8d5cba1e9783
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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