ajhs.dcs.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:d6:e9:f4:c5:84:f0:fd:48:ea:d8:8e:3c:e6:0b:f4:d5:08 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ajhs.dcs.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:e9:f4:c5:84:f0:fd:48:ea:d8:8e:3c:e6:0b:f4:d5:08
Serial Number (int): 334468265365980330993555793738357603095816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:45:d2:f6:1a:14:a5:31:12:23:81:80:fc:3f:54:c1:4f:64:d0:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:88:3c:0d:f5:01:bf:c4:a3:db:06:17:e6:f7:7f:15:ea:66:2c:82
Fingerprint (sha256): 1d:db:e2:96:16:c2:85:16:9f:42:5b:bd:54:04:7a:b8:cd:9f:71:33:6c:3f:e7:67:13:f9:29:31:e4:c2:3a:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ajhs.dcs.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ajhs.dcs.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajhs.dcs.edu

Other certificates including the domain name dcs.edu

(limited to 100 certificates)
duff.garvey.k12.ca.us
ms.bsd29j.com
www.cranburyschool.org
1fairfield.org
1fairfield.org
cad.dcs.edu
admin.cad.dcs.edu
10.bellevilleschools.org
admin.ajhs.dcs.edu
admin.newbernmiddle.gocats.org
*.dcs.edu
admin.ahs.ardmoreschools.org
flcobras.net
www.bduesd.org
elementary.plsd.k12.pa.us
admin.ahs.ardmoreschools.org
aahs.aasdcat.com
10.bellevilleschools.org
admin.veca.gocats.org
adelphia.howell.k12.nj.us
dcs.edu
admin.ams.dcs.edu
bell.robla.k12.ca.us
sre.dcs.edu
www.ptcbus.org
www.british.edu.mx
admin.almadinah-school.com
wje.dcs.edu
dcs.edu
ajhs.dcs.edu
acatitlan.edu.mx
www.hilltopprep.org
admin.jhe.dcs.edu
www.bronxdalehs.org
admin.grupocedva.com
www.healthystartacademy.com
admin.bgisd.org
aahs.aasdcat.com
admin.mcduffie.k12.ga.us
aahs.aasdcat.com
10.bellevilleschools.org
wolcs.org
acatitlan.edu.mx
meadowsschool.org
acacia.fullertonsd.org
acacia.fullertonsd.org
admin.alma.cv.k12.ca.us
www.sycamorepreparatoryacademy.org
aak8.org
aahs.aasdcat.com
burney.hattiesburgpsd.com
acacia.fullertonsd.org
10.bellevilleschools.org
aak8.org
hhs.hattiesburgpsd.com
excel.dcs.edu
1fairfield.org
admin.memphiseast.com
lorena.exteraschools.org
admin.sre.dcs.edu
jhe.dcs.edu
admin.ahs.ardmoreschools.org
acacia.fullertonsd.org
woodsboro.pylusd.org
painesville-city.k12.oh.us
aahs.aasdcat.com
admin.bms.dcs.edu
academiamaddox.com
aak8.org
admin.elementary.bridgeportisd.net
grahames.org
www.lisboncsd.org
aak8.org
aahs.aasdcat.com
admin.sre.dcs.edu
admin.woodley.hattiesburgpsd.com
www.grupocedva.com
lsm.dcs.edu
ps26.jcboe.org
admin.excel.dcs.edu
10.bellevilleschools.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
admin.loudoncounty.org
acatitlan.edu.mx
admin.ajhs.dcs.edu
acatitlan.edu.mx
jhe.dcs.edu
admin.bfes.wilkescountyschools.org
admin.ajhs.dcs.edu
aahs.aasdcat.com
creekside.cv.k12.ca.us
*.dcs.edu
admin.lng.otsegops.org
admin.ahs.ardmoreschools.org
admin.creekside.cv.k12.ca.us
aahs.aasdcat.com
*.dcs.edu
mabelpaine.org
balloustay.com

Certificate

The complete raw certificate details for ajhs.dcs.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334468265365980330993555793738357603095816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 04:26:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 04:26:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ajhs.dcs.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1018948077121516714586422743212180422537046511870312728618814624337518023817678012080045065760025974706015775766635953665571496355501353015904179852746467845538898508911784307571104350908445069907692823616522420816477520588716906996050926557280327517384533298134343659383221214504841642123068838424049425593039661775479605617652162556749224686348352000507441707661235420509543966964766438287170103352502857966425728574163030149872033350133594439177105143075353509438044469068202692057056271757421332823289712553401305147269083951963075465181398833054438323427991135132480442157155137764570658632683530939259084535733586924408790315028059585917183338564283386596413362892480513932879085409120746916674262423381386417946309604567502701633634635356900744686577141039391827573739539001637647486649250241697508234844688334044864318862247000737136123197512194921029431972201565335764761607951647316484596738202881755002919230478499563649914725072516926421752324336875858913996475790946493267859370543352521156860049575714938290037705688661059411203147202982825513033904053024017672909281918224686680251370908083379252266860111056015760028968653869931985706324110399799859386648463304503855752652680584610945318991608138165620089729077513851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f45d2f61a14a53112238180fc3f54c14f64d048
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajhs.dcs.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187bc06e4d60000040300473045022100849dd0757a68d6e6dfe4f2e948778a9872a42e91ae1d1cc11a606acea051551f0220753927f8c9377b02851d63fc393eb038e4a5f3231129df1184549ea19f42ab47007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187bc06e4d20000040300463044022008426a747887e1972322fc4b88bae7f905063af615a786ec63178bef8d7c7cbb02206052d9f41d3c69b7d3b753fea3dd1555b7ffadab097a611a0b5dc34a3670d3a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001dbfbed97145755afa0a4941f685b8dc2471215bf3be1a9d23f4c746c61a7f5525f98d3dabf5558ae7cb911daa0fa7cdd6070017c1cc1be19ada98176cb6def7042976e4a1124c692d3978183d10b1884c7b20e509370180243b0a62c7080df02611009ba0b442ac2b71b156d6e0ee84d1911344209ac43f4de160f983849cea707f08daceb4909ee14b0baa738a40debd1df319efefbc7a33cb58048c25216a302d2182e4b573d0f625517929485127ae225bf07e6c983015d068fa145f30d80c541af36e30c36c9bd5628413bb2971417915b69c2110c7dd18a1eb34e02912f61f38d89f6493fb9560e6991bd14a3527e4e901585f4a39f5041500a9499443