mps.aacs.net

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:b2:a3:b3:b8:0d:3c:e2:0c:15:ac:88:8d:c0:95:2d:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mps.aacs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:b2:a3:b3:b8:0d:3c:e2:0c:15:ac:88:8d:c0:95:2d:bf
Serial Number (int): 410277704712501902540074976281063757000127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3b:a1:c5:fd:1a:e0:64:cf:bb:b3:f0:77:61:c4:c0:9c:88:b1:ff:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:69:4a:8c:a3:bd:29:2e:df:e5:ba:1d:16:8a:30:35:0d:ba:8f:f2
Fingerprint (sha256): 18:f6:90:53:1d:72:ea:2d:d0:c6:97:08:89:b5:7d:74:d1:6d:53:b4:b6:ba:25:93:46:69:fc:b6:d1:b1:da:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mps.aacs.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mps.aacs.net

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mps.aacs.net

Other certificates including the domain name aacs.net

(limited to 100 certificates)
school.stveronica.org
aacs.net
acrma5.org
academy.pycsd.org
admin.alexandergrahammiddleschool.wearecms.com
admin.athlosindiana.org
marvin.wisd.org
hps.aacs.net
www.aacs.net
www.waldronschools.org
admin.athlosindiana.org
hps.aacs.net
academy.pycsd.org
admin.croftcommunityschool.wearecms.com
ige.humphreyscountysd.org
mps.aacs.net
aacs.net
academy.pycsd.org
admin.aieahs.org
lhs.gvusd.k12.ca.us
admin.bcca.bibbed.org
olson.mpusd.net
admin.shackelford.wisd.org
www.icabh.org
aacs.net
www.pilibospreschool.org
wes.bibbed.org
admin.keillerleaders.org
admin.crumpton.mpusd.net
rsu14.org
aacs.net
ops.aacs.net
es.glendaleacademy.org
acrma5.org
3rcs.org
www.ms358q.org
academy.pycsd.org
www.sfdslv.org
admin.lsprep.org
admin.elc.aacs.net
admin.mas.mpusd.net
charlotteteacherearlycollege.wearecms.com
academy.pycsd.org
corneliuselementaryschool.wearecms.com
admin.delreywoods.mpusd.net
edlio.com
aacs.net
aacs.net
admin.ntxca.org
academy.pycsd.org
barbaravick.org
ms358q.org
hps.aacs.net
www.corecharter.org
adams.k12k.com
ljhs.aacs.net
admin.stjohnspds.org
admin.aieahs.org
admin.aieahs.org
aacs.net
admin.aieahs.org
gvusd.k12.ca.us
charlottemecklenburgvirtualhighschool.wearecms.com
aacs.net
admin.vapa.mvusd.net
admin.hps.aacs.net
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
admin.lshs.wuhsd.org
admin.cchs.mpusd.net
admin.sfdslv.org
dbexcel.k12k.com
aacs.net
lhs.aacs.net
aacs.net
ops.aacs.net
aacs.net
admin.elc.aacs.net
admin.aieahs.org
admin.wuhsd.org
aacs.net
sis.aacs.net
admin.apexhomeschool.org
edlio.com
arletahigh.net
www.ntxca.org
lhs.aacs.net
elc.aacs.net
admin.wuhsd.org
sketches.edlio.com
aacs.net
admin.casee.chebschools.org
irlandesmonterrey.com
academy.pycsd.org
aacs.net
aacs.net
help.edlio.com
eis.aacs.net
wcms.mpusd.net

Certificate

The complete raw certificate details for mps.aacs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410277704712501902540074976281063757000127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 09:35:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 09:35:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mps.aacs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3481996864799522657843647896234111753116912447631911991286629560563747880836989998620602898677455979500839904913438885440551607144928505857176337289355193250647845272986585928720354140337570397594516490641693491792942099179816541652307073947303455743685630783381663379212144149037584903321081359676990270322723982179632562978192341720896700126185145178266777618790643013884874362199369700484057114038076644034631764693031839562248105984188205052569610475152102764066509929676302079793860644729469940590410186267301421363123949370635702915121709376618641534420850138288218793489982872274328957172815599212296934825222456035500007195356653995410672127620316707892375807551408428702784188737452684023422717408311974580158883599210187109971747328460361210189819047610586973129374699157095100230576169162975227838816843186640038343217637025469954526587129424308238922244722421250216159838123117102858960799387453613424067121302901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ba1c5fd1ae064cfbbb3f07761c4c09c88b1ff80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mps.aacs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3d34bc81000004030046304402206a24badf73e84ecadcdc976f1d19638dbedd54f05c7c87fa160a94beb659f0c80220369220a34755d9cb2a554f49f236403de2d5e8a393a437f71b6a4c26f89f22c80075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3d34bc7a000004030046304402206f2f56312d676b13d339e087e87a664920b26272e01694f82e915949b8b8851902203c96459227c83108bbc345bdf16b505f8932d3709efe76f881b26f6a5e93cec6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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