mcdowell.k12.nc.us

Issued by R3

About this certificate

This digital certificate with serial number 04:0a:92:70:7b:1a:0c:13:da:cb:30:ff:c2:ee:b2:f6:a0:ed was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mcdowell.k12.nc.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0a:92:70:7b:1a:0c:13:da:cb:30:ff:c2:ee:b2:f6:a0:ed
Serial Number (int): 352046618717683176136726572140070239117549
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:64:e3:97:86:b6:de:dd:d2:d4:8f:93:c9:8a:1d:c4:22:73:3f:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:2a:0a:41:eb:bf:81:b3:a2:1c:39:2e:9d:63:7c:af:34:44:7f:73
Fingerprint (sha256): 27:b2:00:c8:ff:29:81:2a:10:44:e2:63:57:2c:49:4f:de:6b:31:89:eb:e5:24:2e:79:e3:41:67:5a:21:30:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mcdowell.k12.nc.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcdowell.k12.nc.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcdowell.k12.nc.us

Other certificates including the domain name mcdowell.k12.nc.us

(limited to 100 certificates)
5.bellevilleschools.org
admin.amschool.edu.sv
www.duchesneacademy.org
mcdowell.k12.nc.us
admin.allenparkschools.com
admin.amschool.edu.sv
mail.mcdowell.k12.nc.us
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.eahs.swcsd2.org
mcdowell.k12.nc.us
admin.ccti.pgsd.ms
admin.missionprep.org
admin.ccti.pgsd.ms
*.mcdowell.k12.nc.us
admin.amschool.edu.sv
aec.mcdowell.k12.nc.us
admin.ccti.pgsd.ms
www.medford.k12.ok.us
mcdowell.k12.nc.us
admin.amschool.edu.sv
5.bellevilleschools.org
admin.arete.prsd.us
admin.eahs.swcsd2.org
admin.amschool.edu.sv
admin.ccti.pgsd.ms
5.bellevilleschools.org
dimensions.org
5.bellevilleschools.org
5.bellevilleschools.org
www.stlouis-batesville.org
www.bhswca.com
admin.amschool.edu.sv
dietz.crandall-isd.net
ba.tcs.k12.nc.us
admin.ccti.pgsd.ms
fcs.mcdowell.k12.nc.us
www.mcdowell.k12.nc.us
mcdowell.k12.nc.us
hs.bgh2.org
5.bellevilleschools.org
reed.crandall-isd.net
admin.amschool.edu.sv
admin.jllomax.gocats.org
admin.omardblaircharterschool.com
lvmhs.lucernevalleyunified.org
admin.chms.mx
ldes.tcs.k12.nc.us
5.bellevilleschools.org
5.bellevilleschools.org
5.bellevilleschools.org
admin.amschool.edu.sv
admin.amschool.edu.sv
admin.eahs.swcsd2.org
admin.ccti.pgsd.ms
bduesd.org
admin.arthuracademy.org
admin.ccti.pgsd.ms
5.bellevilleschools.org
alt.crandall-isd.net
www.mcdowell.k12.nc.us
admin.fcsk12.net
www.coahoma.k12.ms.us
www.lasgs.net
ccti.pgsd.ms
es.notredameacademy.org
admin.eahs.swcsd2.org
admin.eahs.swcsd2.org
fa.fcsk12.net
cms.wvsd.org
admin.arthuracademy.org
admin.eahs.swcsd2.org
admin.hs.notredameacademy.org
admin.sqhs.monroe.k12.tn.us
*.mcdowell.k12.nc.us
www.somonauk.net
www.dcsocal.org
admin.ddaa.arthuracademy.org
admin.allenparkschools.com
admin.cove.prioritycharterschools.org
admin.amschool.edu.sv
5.bellevilleschools.org
adulted.sanjacinto.k12.ca.us
svhs.wvsd.com
admin.sfxcatholicschool.org
5.bellevilleschools.org
waa.arthuracademy.org
5.bellevilleschools.org
mhs.mcdowell.k12.nc.us
admin.eahs.swcsd2.org
mcdowell.k12.nc.us
cms.wvsd.org
8e6filter.mcdowell.k12.nc.us
admin.ddaa.arthuracademy.org
vapa.mvusd.net
www.lcelions.net
admin.komarekschool.org
aec.mcdowell.k12.nc.us
admin.ccti.pgsd.ms
www.trinitystelementary.com

Certificate

The complete raw certificate details for mcdowell.k12.nc.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352046618717683176136726572140070239117549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 23:27:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 23:27:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcdowell.k12.nc.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783876780312367974317758209228032001854224645651122679479668602046856909435416555129051893692735156493421186780984072766266737063606934347282727279773404923299719431187525121713298012305783027308129718691238054001227359167990744307482458104391535007717917379664463419190852023311368203265795946534799142082224707969789379983175213259755816629552540409337310373416656069541622412718310238870464046007884691335035752265069216216770184534633238309681385579483956997985484339954970437218373469720844433753485371940455218029782850540508642547548454821281209454157610763014587118321431764016454824816503548330506646651159693811346603214369092741337910036357767627745079794438992215031790831891887162825882748553940500116759525145193490188422285758763897705027216879597900049828268905690467815794814658364413736184346531227753556813371256119471625463848732878489790645913389035089904031203150845782205068804482758860518259538158519868907774806861550689684804943891412422484084279725255480724225565822337812181690106258257170212659630239433866352651872871088057077862463705270228725986356824301892060203515553382436437741721915946086746135134220228059757184042695145192341359330378667843341175925580064751092663644407289697324647125924462243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf64e39786b6deddd2d48f93c98a1dc422733f3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdowell.k12.nc.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186e2aa41b20000040300473045022100af01ac131394b705926fde6367c6725f0394eb138d3224ab5bebd6eddba7905d0220337a2445b343afa48fbfa90c098dd283aeb35f2e18d3e764d3775213bac979da007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186e2aa41a500000403004830460221008649ba234df03416df544483348fb0582eef4422836dd687905f9d7c0642a233022100d19095602ba0494cc113b60f88dc4b5dae209ef41b556bfd3a981b15b8dceb9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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