mes.logan.k12.wv.us

Issued by R3

About this certificate

This digital certificate with serial number 03:db:36:b8:8e:63:cc:96:57:67:a2:d5:ae:ed:3e:07:ee:45 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mes.logan.k12.wv.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:db:36:b8:8e:63:cc:96:57:67:a2:d5:ae:ed:3e:07:ee:45
Serial Number (int): 335931432733369687804854691064390907063877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:dc:c9:e4:17:22:46:ae:8a:60:4e:41:06:ba:66:9b:af:05:29:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:b5:ed:32:44:29:32:08:8a:8a:ef:ba:79:e3:e2:b6:38:99:3d:f7
Fingerprint (sha256): 25:7c:ae:32:89:50:d1:f5:82:4e:6b:f1:43:b7:54:f2:38:c5:b2:ca:34:9c:58:63:6c:76:fa:51:bd:86:14:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mes.logan.k12.wv.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mes.logan.k12.wv.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mes.logan.k12.wv.us

Other certificates including the domain name k12.wv.us

(limited to 100 certificates)
sso.k12.wv.us
roster.k12.wv.us
procket.rale.k12.wv.us
*.kana.k12.wv.us
admin.ninth.frenship.net
hayes.kana.k12.wv.us
boe.webs.k12.wv.us
boe.hancock.k12.wv.us
boe.hancock.k12.wv.us
boe.jack.k12.wv.us
sems.rale.k12.wv.us
eschool.mine.k12.wv.us
home.mono.k12.wv.us
wvlearns.k12.wv.us
gcw.kana.k12.wv.us
cpes.rale.k12.wv.us
res.mono.k12.wv.us
admin.ahs.ardmoreschools.org
procket.rale.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
kcs.kana.k12.wv.us
boe.hancock.k12.wv.us
wvlearns.k12.wv.us
admin.ahs.ardmoreschools.org
kcs.kana.k12.wv.us
intranet.kana.k12.wv.us
plad.k12.wv.us
boe.rale.k12.wv.us
etsts.wood.k12.wv.us
rocket.rale.k12.wv.us
*.jeff.k12.wv.us
sub.lewi.k12.wv.us
boe.hamp.k12.wv.us
boe.hamp.k12.wv.us
iforgot.kana.k12.wv.us
cia.cabell.k12.wv.us
sso.kana.k12.wv.us
home.mono.k12.wv.us
airwatch.roan.k12.wv.us
*.jeff.k12.wv.us
schoolforthedeaf.wvsdb2.state.k12.wv.us
boe.hancock.k12.wv.us
www.brooke.k12.wv.us
sid.resa7.k12.wv.us
procket.rale.k12.wv.us
*.k12.wv.us
reporter.kana.k12.wv.us
makakiloelementary.k12.hi.us
boe.jack.k12.wv.us
boe.ohio.k12.wv.us
owa.harr.k12.wv.us
boe.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
destiny.putn.k12.wv.us
*.jeff.k12.wv.us
www.wayneschoolswv.org
kcs.kana.k12.wv.us
rocket.rale.k12.wv.us
rocket.rale.k12.wv.us
sub.lewi.k12.wv.us
kcs.kana.k12.wv.us
www.bpbraves.net
iforgot.kana.k12.wv.us
*.sis.k12.wv.us
wvsdb.state.k12.wv.us
home.mono.k12.wv.us
mes.logan.k12.wv.us
owa.harr.k12.wv.us
eschool.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
warwood.ohio.k12.wv.us
boe.mono.k12.wv.us
enrollment.kana.k12.wv.us
wvsdb.state.k12.wv.us
alban.kana.k12.wv.us
wvlearns.k12.wv.us
cb.mono.k12.wv.us
bes.mono.k12.wv.us
boe.hamp.k12.wv.us
virtualschool.k12.wv.us
bethlehem.ohio.k12.wv.us
*.sis.k12.wv.us
boe.wayn.k12.wv.us
procket.rale.k12.wv.us
mms.mono.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
mitel.rale.k12.wv.us
boe.putn.k12.wv.us
jacksonmdm.jack.k12.wv.us
plad.k12.wv.us
south-nac.mcs.mono.k12.wv.us
el.westwoodisd.net
sems.kana.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
riverside.kana.k12.wv.us
vpn.harr.k12.wv.us
kcs.kana.k12.wv.us
boe.mcdo.k12.wv.us
wvdegps.k12.wv.us
destiny.harr.k12.wv.us

Certificate

The complete raw certificate details for mes.logan.k12.wv.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335931432733369687804854691064390907063877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 13:22:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 13:22:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mes.logan.k12.wv.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766561947063497716255795846530058622998307491126648720270888290372018857317275740541746133848957324493835547833445554283698042119049880267286720178945639289582946071353717173085551008882853520831970363929032423546927654749423813205381506168765736839380207757677821226915992857074865405150266515008507955833754707437736205510412271463681722664646331301798759618820118467243720523951433903983024793061483339085070470040329131903878001601697901366750204231918023569256414013727650407973276632265104829608096798925272109117126268209245668981818831327770315084336689588545510622281533811795625237365511909631506339968626513439914670296281332143115644177756400158340302366300772839412830423302718939002020841243794041067686763864513921929273024579881924787733316972660006519586785334074250051777571654638244752556238381462059996531496595682524540591483923223843184968023837404887953891417794151240844478293044476832985407062512286796682602984666059127848233772274273690073373007292319778071754755246457189579079186270523272538262052566691673042684935578617664966314933074809948939303882054590842904155564088938742033901174281869018351812659535025003759405516992773914588320148002118675255645953129000658839656369923692946385892352122339963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0dcc9e4172246ae8a604e4106ba669baf052907
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.logan.k12.wv.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ed2aff88b0000040300483046022100b15bbc8d69f1860db50e6936df913c4c1d8a6cabd3b1e930791dc8d02f27e13c022100bd094f25ce7ed239caae71397a4e9b414f8a060158764ade196ffece0eb466410075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ed2aff8aa000004030046304402204713f44f95dcbf04db8103c1c7eeb69734081ac31d6584f239368c42ba1f86ee022012ca323f55ab4947ee53a4895ac6d9e799114f8c08020e73d6e2c94e8600fb27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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