www.marioncountyfl.org

Issued by R3

About this certificate

This digital certificate with serial number 04:62:a1:72:4b:40:72:31:7d:96:15:75:92:ef:7d:07:7e:a8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.marioncountyfl.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:62:a1:72:4b:40:72:31:7d:96:15:75:92:ef:7d:07:7e:a8
Serial Number (int): 382011414840742864228130837081791893307048
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:93:39:a7:fc:a8:e8:7b:bf:15:1b:04:0c:4c:e7:56:7e:43:09:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:7b:59:18:91:b4:25:ec:96:1a:8f:1e:89:04:69:95:77:14:13:a5
Fingerprint (sha256): 1c:64:b1:a1:81:96:65:cb:a6:d9:4a:21:78:04:50:57:d7:3c:9c:48:29:e8:ce:0c:82:3f:a5:fd:99:52:28:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.marioncountyfl.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marioncountyfl.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.marioncountyfl.org

Other certificates including the domain name marioncountyfl.org

(limited to 100 certificates)
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
www.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
np.marioncountyfl.org
*.marioncountyfl.org
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
*.marioncountyfl.org
*.marioncountyfl.org
marioncountyfl.org
eplans-test.marioncountyfl.org
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
mcbcc-public-wifi.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
mail.marioncountyfl.org
marioncountyfl.org
marioncountyfl.org
san-b1.granicusgovaccess.net
GIS-MGR1.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
citrix.marioncountyfl.org
san-b1.granicusgovaccess.net
marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
marioncountyfl.org
*.marioncountyfl.org
patron-wifi.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
marioncountyfl.org
lync.marioncountyfl.org
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
*.marioncountyfl.org
marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
egovplus.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
www.marioncountyfl.org
mail.marioncountyfl.org
san-b1.granicusgovaccess.net
*.marioncountyfl.org
marioncountyfl.org
san-b1.granicusgovaccess.net
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
san-b1.granicusgovaccess.net
*.marioncountyfl.org
library.marioncountyfl.org
*.marioncountyfl.org
trackitweb.marioncountyfl.org
*.marioncountyfl.org
marioncountyfl.org
san-b1.granicusgovaccess.net
np.marioncountyfl.org
*.marioncountyfl.org
Inside.Marioncountyfl.org
citrix.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
lync.marioncountyfl.org
*.marioncountyfl.org
*.marioncountyfl.org
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
*.marioncountyfl.org

Certificate

The complete raw certificate details for www.marioncountyfl.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAgX9SAKRKImM2K4VaptUW
7iVFdUYp5D1GWZ5jj2JUI8NXL5o1bJjPjSfjFmsOzdG4nRigFEEV1as+Vjr+bTh/
o+WGPJ8Iv0F81EtWO73u77JjONTYqpQt8Ucvwi9GLEkU4Z/4xi4Pul3JSp9y7FB+
uK5I7gXqnocQX57e3VoX2BByh83wHqsuiKOG2BCK8whyqCUT0E6WhtpdXrJdb0aT
Vj9dFPC4i4qtzMXr75XorOyhsNJVdFhM3kwkaNSy4r5nziA7/o6R5Erk1pybcNls
artG8BARSyQOVvbWjy2hV38C+z0KrMRCJYyUvxkmBa2L+TUVg0pr30Y3xvcLronA
6MCAf1pGT12lw7LfFk9gxbo5OAMUHksdJ5IKq5Ya7dYCoiUlLmUU0lebAVGbcDYP
lICwtl0g81Ng2pLGe/LxWY85g40GXHq0TEylsDGY1zUJm2xh+gVt1m/8cQoI6aP5
QAYDRq7EpxzcL+OntAq/ES1NkXwUZ1VCH+pnbAL/JDORAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382011414840742864228130837081791893307048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 09:06:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 09:06:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marioncountyfl.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2938783406048888978056347282423695664130027633292192083412292856514967970140547836364403364631308082335710985885299257338109573244280725493752088952576878981907020207300712341713590350411955912312974062232377947792373511229854981297796108758683792578614298656531657339915499308970772589788957100292645860892427500351886687300107137793700617209235384563739581715685058247710765108683180691622531506869511807589542962282260950629618178644843317669944269871019851478487782114922306865233014671686344128091194722731129340616874114160923943582340820264939120794751695077926290986126866298957577253968432383123539182650574002873949709457960855048867541505599760231200604021416509581954473247950122238913747485308987163245714060398942420920384987852031528137671236845884473414890824299471068180754560178106855887344752139907455377550818807820910073543221306414231356951520921463303245748373108342973184449490854297178423352751305617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							349339a7fca8e87bbf151b040c4ce7567e4309bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marioncountyfl.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c86b0b5540000040300473045022100e5945c8d8de989925badbad5aa87049d3ac748f652b2b85ee064a1fcd6296f8102204d81882baf7074819f95d40932b0ccdfd0cdd95ddf26f2899ce79e4051128a7d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c86b0b57e0000040300473045022050b23c979331d3cf181f7a4e26059c5bba562fce08d63c70d038b79441835d3a022100841e5aec3f4c5a44243b313b172ad99ca80b93d39b12aa33bdf3ff5e3f6b8983
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae3b56e8193814a5af6f12c50770f348bc4c1314d01f98af1194cbc29e328820afac8cb47d3d08507576a42f5138c144ba0c7e5e7ff8dfe8bfbf522fd6905f1ad15f2ddeab10b63fdd70703c134e30cd12acaa66407f2fd03f44c1d4db530c61d1b134844ef18afe5fe36172c56792bbbd289497f11813214472799bb611117009682f0ed2b2600b44314ff8f2364df6d95a271e383b16603a21f32c7b07ad07b9bc40a1e6e482f09c7e80686e5b98f9a8c4d9d71b12962de3c52f597924ce61442d57019c88c62251fdcd15f66e3f9f7bf92f9d790662b0a43691dbc7edcdfed2d576e789071c8a388b9470a551da86c0043fcd58e5ea2aac824303ac8a1829