cpcontacts.butlercoiowa.org

Issued by R3

About this certificate

This digital certificate with serial number 04:af:c7:79:3e:3b:c2:7a:cc:64:42:8e:c5:af:99:1b:e3:f6 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpcontacts.butlercoiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:c7:79:3e:3b:c2:7a:cc:64:42:8e:c5:af:99:1b:e3:f6
Serial Number (int): 408263703839530344226249793137372057822198
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:05:89:b1:3a:f5:c8:20:3b:8d:1d:28:f8:5d:76:f3:8f:3b:8c:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:4c:d4:3b:ec:68:5b:4b:af:dd:52:d9:34:74:6f:6a:b9:5f:1b:71
Fingerprint (sha256): 19:62:b5:69:46:e9:ab:e6:81:95:70:c2:a5:dd:f5:96:b5:2a:5e:e4:05:c1:d7:69:0f:56:45:72:33:83:97:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.butlercoiowa.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.butlercoiowa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

butlercoiowa.org
butlercounty.iowa.gov
cpanel.butlercoiowa.org
cpcalendars.butlercoiowa.org
cpcontacts.butlercoiowa.org
webdisk.butlercoiowa.org
webmail.butlercoiowa.org
www.butlercoiowa.iowa.gov
www.butlercoiowa.org
www.butlercounty.iowa.gov

Other certificates including the domain name butlercoiowa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcontacts.butlercoiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+cCadWOlSFzK9s7XPwz
HTPzvXOcPfDXDDwcJpody3Vh07LIdnAMMq9k5rtHWNOt7P3haJHmRtXv32fvbj0Y
RZdju0stJfsRE0xmtedShMAfnvV+4M8Z4UHCY1VlL2mMUloZ6/vgou7I5t5Xzt8P
QQk0Y0MGm1G9XntMjvDxgKEp1K9/z9SGDDHFjw1uiD/I9zoAab9nDr48EoHqGMx4
9bmpbEg5b3wavgOQbKG0Ap0e/U3kgqVrwbm2OcwxfuHXduYiY++gplqruzPWl2gr
yIH/SMdT2lK8U4AXIAqljQTWOR1Fx5u7BKfHvy4qM0jfdoTMboRA5ujiQ7JFFaBP
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408263703839530344226249793137372057822198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-01 16:56:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 16:56:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.butlercoiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24730384462703258943690485834669775307355555569002265251087387617117769698972539112295687676286214941528942920223096902923108441759943285646162671678256151668259007004796737091666852930567658729540035428035064135414014016054705879666665730121129318948056419828808284455942968688518906505168486626280743079074269993120360944607844433189753257806932584123397794503368325864025082377374216071229091012759351327632548562318466541016527014189216029182663758551213255430874065941994867673804844922812434176180735874430486211761538627444469073210738614291355041190641667356393415525074479550584266494611082370933250135707423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c90589b13af5c8203b8d1d28f85d76f38f3b8cb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butlercounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlercoiowa.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlercoiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlercounty.iowa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181206924190000040300473045022100d5ce96cb2acb7118d8b8a939dd92dade263feb6963a47ded4198a4f5c2734457022059bb63617d50fa501f5aaa73e90072a8a46c6b4dcf34ac913c198578c7af6b970076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000018120692408000004030047304502200f922a44d100e7ee906ba7e4041040ff0d75aaa8ce414acc317f98096dc31f1e022100ab7c58ff8ab1587d9b3f27f982bd015877b9d3e162f1ca6e93b701c49ee2d596
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000cd0adc7c30139ad041fdf83c4b027d307b4e66901e7464ee930709bdda62d3f95216342b6ce4d3ebc5c0dcef325fe11c76a7a305b2ec3527f197b74758bba32a44b34bca81a926f5cd3efcf82a413558c6a50628e0b17ea6829d9c67f28f4bd47d81263ca10ebc85f75d24b8fd4cc3e61cceb6213ca6e2bb3536c467280edd43eebd85727b2606e787f26b20b3a792724edb005fe24715d6dbed3801ee7264f27a159f88ad4068bb04b3905ddbaef3e9ba481a90239422e53d46dcfb96e14bce1c7442fa8af9e2e697c2370dc327af8d32928ce1ea59cd6e62c5f4456c906d95796e65a984cb38caa978a290b5f4d32faf424e6581695edcb3b141a24eb9127