fortdodgeiowa.org

Issued by R3

About this certificate

This digital certificate with serial number 04:da:28:6b:31:4b:02:a5:94:12:d5:11:7c:22:23:9b:ae:31 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fortdodgeiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:28:6b:31:4b:02:a5:94:12:d5:11:7c:22:23:9b:ae:31
Serial Number (int): 422684425411181833392522856719781958757937
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:8e:31:4b:b6:70:98:1e:1a:72:91:8b:e6:5e:79:34:d1:11:c7:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:19:77:bb:29:66:d6:a9:c1:c7:13:b5:5c:d4:df:c5:99:12:61:08
Fingerprint (sha256): 1c:fa:86:84:28:2d:e6:74:af:ef:19:08:22:61:3a:49:8d:5e:76:fd:c2:91:91:a5:1a:85:4b:dc:0a:c9:83:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fortdodgeiowa.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fortdodgeiowa.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fortdodgeiowa.org
lakesidemgc.org
rogerssportscomplex.org
rosedalerapids.org
www.fortdodgeiowa.org
www.lakesidemgc.org
www.rogerssportscomplex.org
www.rosedalerapids.org

Other certificates including the domain name fortdodgeiowa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for fortdodgeiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgISBNooazFLAqWUEtURfCIjm64xMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjMxMzAwNTVaFw0yNDAzMjIxMzAwNTRaMBwxGjAYBgNVBAMT
EWZvcnRkb2RnZWlvd2Eub3JnMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC
AYEAhI1qd2kRCshqJBkxumUCJtGoDQQlF7bjuzLr21dID2NSMVoXXQpihW7WFaXE
SmsfmpUCcavsff8l7DGCrrHV33mEIhxG2h4zm22yNMRyymglFSEKF7qzQkSRJoHX
VpFVJYrd/ptOWa+xo/4BB9Syum00ClJzsO2j5XUylD2s1eBpq6A5RMZbPm9bdWo7
Fbs71sN2TfT2uIs6Dnnl/B9RKcF0MuNqZhCzfFLfkpc2TK7bmkinhaDNQN0qUgsj
I4Ht/EDHTz+EEuUAGP01es5qjwjcCEZpLfwnYQMCeS+pvxUKRvNfHUDH8hOeEEFF
eq5gK+FzZHxbBolCjh9/lC6uXyvVzs46b5XHsB5gXnhckI4q20HIlv63exTe+VeW
uYBqqrRPNR87DqA1yopOgPPfPplfes64M8LvKYPDqM8LWn0tgJboaLQfwgzJEL0K
CzhllROiMLpblvrqlBqw5fkYQkMH4QpNcYPEHNdUbM9TVXILAUaaJtUGyUe6bC95
mzKZAgMBAAGjggK1MIICsTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOuOMUu2cJge
GnKRi+ZeeTTREccAMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUG
CCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3Jn
MCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIG9BgNVHREEgbUw
gbKCEWZvcnRkb2RnZWlvd2Eub3Jngg9sYWtlc2lkZW1nYy5vcmeCF3JvZ2Vyc3Nw
b3J0c2NvbXBsZXgub3JnghJyb3NlZGFsZXJhcGlkcy5vcmeCFXd3dy5mb3J0ZG9k
Z2Vpb3dhLm9yZ4ITd3d3Lmxha2VzaWRlbWdjLm9yZ4Ibd3d3LnJvZ2Vyc3Nwb3J0
c2NvbXBsZXgub3JnghZ3d3cucm9zZWRhbGVyYXBpZHMub3JnMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3dT4tuYBOizBb
Bv5AO2fYT8P0x70ADS1yb+H61BcAAAGMlvqdbAAABAMARzBFAiAPupzc91GF5Smk
K6Idn5Xy58eO50yPmosiyBLPPPRRcQIhANwN1ne+NFFZd6tXAlGR9Nbt4N4sulZe
0zSzQKkUVKJhAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGM
lvqd7QAABAMARzBFAiEA04rG48FmCwomuJ5UUXXwL+g11OtUtjQ7kJKzYxc2/I4C
IFTvw+iRnSEFMErFRk7wW2XwQ6EVe1dcS2EDy9+aLbotMA0GCSqGSIb3DQEBCwUA
A4IBAQAZhr3ZTYsvuxLS7bg82PQXvvn8If5yAIPgWw4iFRHuRa/NOnvCftsjdv+f
/wDPmDhm57CZ5AZkP0Z5ZnOpBe0xBEQuk5x1TM9nwLSefiICQg1HmudpI6oG1u7M
3ACHdcKm2J+rrOgqBn60N8xSIXYJlfB/H1JCaSaXrUcveytJ5Yz2nCfPrj7EkGAz
4XXJcR7Z7Z5dvqg3FibtKZP9gsoHu3BaDZ9Xqh4jlT4N6hDBm15XFvTsZ51sHHqk
m/sUK/alTHGS6W6c/Af4fp3CAcqSWykftPTVVRrFiA7XiJLzeg5nIAIdluLMye2k
KarOO85LB+0/rMq8N4CQ2elDF7BX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422684425411181833392522856719781958757937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 13:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 13:00:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fortdodgeiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3008114263401983375866582317955739834626223920126757454314875187597462937266402949836747751564494822415384135790415741526566523222932091266844289517901481607933963859573794983242907151803242647970839639992952141953145465822639104936274236766890829942349349250879760815838792494341911189683966841102132901418696890651287944663597727704802847611479275514193222864654027404437820313915652491503532932455964133082589002030796926401272869762935036797580033444266801342384404910344390510735810888592255025530759007941572178199131305931095396407076201532952848249103517627756857762904686549305744797910827196512689544548800031466839964018307320742540650973926639198153996374454249804027886149533894982903218095715404692897388626709160507648220697065135547081947332277383133220575126433729621877130642978140205263010384715289801721876951705056935993867552989278160900798172370547253214051552241131230444258068753592655093722123023001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb8e314bb670981e1a72918be65e7934d111c700
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortdodgeiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakesidemgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerssportscomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosedalerapids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortdodgeiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakesidemgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogerssportscomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosedalerapids.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c96fa9d6c000004030047304502200fba9cdcf75185e529a42ba21d9f95f2e7c78ee74c8f9a8b22c812cf3cf45171022100dc0dd677be34515977ab57025191f4d6ede0de2cba565ed334b340a91454a26100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c96fa9ded0000040300473045022100d38ac6e3c1660b0a26b89e545175f02fe835d4eb54b6343b9092b3631736fc8e022054efc3e8919d2105304ac5464ef05b65f043a1157b575c4b6103cbdf9a2dba2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001986bdd94d8b2fbb12d2edb83cd8f417bef9fc21fe720083e05b0e221511ee45afcd3a7bc27edb2376ff9fff00cf983866e7b099e406643f46796673a905ed3104442e939c754ccf67c0b49e7e2202420d479ae76923aa06d6eeccdc008775c2a6d89fabace82a067eb437cc5221760995f07f1f5242692697ad472f7b2b49e58cf69c27cfae3ec4906033e175c9711ed9ed9e5dbea8371626ed2993fd82ca07bb705a0d9f57aa1e23953e0dea10c19b5e5716f4ec679d6c1c7aa49bfb142bf6a54c7192e96e9cfc07f87e9dc201ca925b291fb4f4d5551ac5880ed78892f37a0e6720021d96e2ccc9eda429aace3bce4b07ed3faccabc378090d9e94317b057