www.resedahs.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:bb:14:e8:27:26:a2:2f:9f:a1:06:06:8b:6a:2b:70:d8 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.resedahs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:bb:14:e8:27:26:a2:2f:9f:a1:06:06:8b:6a:2b:70:d8
Serial Number (int): 342232452945312988631972759174853379715288
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:63:cc:80:ae:88:64:a6:90:45:59:30:c8:9b:c4:2f:49:0a:b6:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:10:9f:f8:42:10:87:9e:46:84:63:11:5b:4e:f9:1c:e7:80:dc:e0
Fingerprint (sha256): 22:99:25:cb:70:c4:e3:75:73:dc:af:a3:a1:49:c6:6c:46:f1:67:fd:8e:10:a4:d0:2f:3e:f0:bd:20:99:b8:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.resedahs.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.resedahs.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.resedahs.net
resedahs.net
www.resedahs.net
www.resedasciencemagnet.net

Other certificates including the domain name resedahs.net

(limited to 100 certificates)
resedahs.net
resedahs.net
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.aristoiclassical.org
sgmission.org
resedahs.net
resedahs.net
admin.nms.davidson.k12.nc.us
www.resedahs.net
resedahs.net
lifeschools.net
admin.cfn.edu.mx
admin.fges.davidson.k12.nc.us
resedahs.net
resedahs.net
mas.mpusd.net
ms.gsd.wednet.edu
resedahs.net
admin.ahs.cherokee.k12.nc.us
resedahs.net
resedahs.net
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.aristoiclassical.org
hy.hpisd.org
resedahs.net
rosebudacademy.com
resedahs.net
stmmsa.org
hartorah.org
www.resedahs.net
www.resedahs.net
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
ace.pusd.org
admin.aristoiclassical.org
www.resedahs.net
admin.resedahs.net
pes.cherokee.k12.nc.us
admin.nes.davidson.k12.nc.us
admin.ves.monroe.k12.tn.us
admin.aristoiclassical.org
hs.cumberlandacademy.com
admin.wal.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
admin.hs.hpisd.org
admin.aristoiclassical.org
resedahs.net
es.glendaleacademy.org
admin.colonies.sunrisesd.ca

Certificate

The complete raw certificate details for www.resedahs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYGLREPtZS1A9mwMGxVH
7NUJ8mc08X+GPGQp2NeQQCn/x/w5AxpJjdYDhgoCpQxBFoHfvvq+T1GvONQARrUo
aeFi7aesnafMThfsYH9b7BMoT35NKzReoa4TiN+UqhkZ7d7oTpwDsEgcEEpAtk0H
q7mqjZgPgXiGMcZF4cLb7YLzYlF5TAM6tzBlg0w5Sta9mWEg+9MrbFbNvtZhpEpN
aB2GC66w9BbxojjCdHWbPi5p187i9ymYNwcmchwtNCZRGJeNfUMuXWc6u4nXjYhV
CkxeHTWtFcVG5d83d1aAoG8V6nh8WFziTAQSWNj8lDbF9tq3If1LhbKCPvy5ZmFj
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342232452945312988631972759174853379715288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 14:52:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 14:52:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.resedahs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17863481532600797393695843334421507876192714955700109026757256473986835981117738825168328669835320461600340558186807109696228556377559487117777026259608427246689562360179529378062716611762399231807215877841192238690934033884798572442123206690933723581475459900207148108007136188717699278358300857303415390438238517323545926479154471447970175462145575758133216461654515205652507858217686694008496851183656830305687649371160873714891589710067081945900560789508851793586672091350977775865367930045324053037880535829417812808334966509422749703910147034350497752998559140625804022059003331703232976400140556506000072467419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6363cc80ae8864a690455930c89bc42f490ab6a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resedahs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resedasciencemagnet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001690b9ba06d00000403004730450221008438544993218c2655618242c5b6a0376bb797ac5467dbdb26f44fdd000fad7402206f51a817f94b4ef1125295a0f807cddc42593bbbdc9af984439bfdd1471cef55007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001690b9ba0a60000040300463044022006e541c69dddf2447f4e734e702570c0c92114c53eac740ccc6211930e7ccb7102201989b7460bea0cb48bee2fa0b260f02e6966bfbaa9ee4d9a149fb1d5565a82bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001df286466744c611b4da4c047ab0e9c4e23c0591f7bde2be102e8b9d6a0325d4ed869fb489c5a8601f983d46d2916019a7b9d6cea64ed8669d697d688706ae049108207a6dfea4c67d0c74597013b02da7016d5f5db9d62cdf6bcd8c10806911a660aa403da88b1fe6cd72be0e23c48f610fb17307af36d71e2fcdb1c8c817ae8155ec60e88ef4ebfb10967e7f6fcac1de0060cd78799f28b4cfc0252b7067f1501fcbd20188527a6bff4ee4f6f10779923826461fb2a516e52d53aca769377924d678fcbbc8d8383e3c4fc0aa894404058bee2c4f1c1fee8a7f70ea3b06b6e26bfd33175fa77d7aaf913f99a0434ea28d7fd63f859c3f700e758200b60f250d