digitalvirginias.org

Issued by R3

About this certificate

This digital certificate with serial number 03:58:52:6d:50:10:de:19:e2:a8:ad:44:23:2b:62:f2:d3:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digitalvirginias.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:52:6d:50:10:de:19:e2:a8:ad:44:23:2b:62:f2:d3:ef
Serial Number (int): 291391270364264423980492341528558788858863
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:21:73:3f:3b:5e:27:6d:52:a4:57:f9:f6:3a:03:25:02:4a:94:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:f4:fa:c4:3b:d0:d5:ec:54:a5:5c:45:51:0e:fd:50:64:12:8b:02
Fingerprint (sha256): 28:55:b4:3b:3e:39:ff:9a:80:b6:55:31:94:e7:a8:cf:ed:d3:e4:aa:f5:65:39:b2:f4:6d:95:51:76:a5:43:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate digitalvirginias.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digitalvirginias.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitalvirginias.org

Other certificates including the domain name digitalvirginias.org

(limited to 100 certificates)
digitalvirginias.org
www.digitalvirginias.org
digitalvirginias.rampages.us
digitalvirginias.org
rampages.us
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
www.digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
rampages.us
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
webmail.digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
digitalvirginias.org
webmail.digitalvirginias.org
digitalvirginias.org
digitalvirginias.rampages.us

Certificate

The complete raw certificate details for digitalvirginias.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwLmAgUP7qYcVvWTqBxg
bmPW1oOh25qBvbHMEjn+GHzJv4w0WdG25OziuKJrAT5+ctX1DEulRRK+h7txEHoU
b+wZTuxhxFGmNmiBBIEuxQt2dbsfwgCfk6JxIxP6xh4QD5NLVLQahXTxLIYQo8rE
bG3zFyNDJ3II3tIHJyOQ7W6LXt2wOx2D14HuTbItTiarCT6x9b5MaLBZcsKM83P7
u9kndbW1az4tLbzEUI4QUBdzN1VaSEBqNQsN1iVnL7DtLzjdU9w/jhp6hR5OaDWm
0kP13HZ7huTm9WuAzjNBdhe1dzcPprl3QrOO3QNyOX+MPrdTnJsFRMdDi2NlT74g
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291391270364264423980492341528558788858863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 17:29:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 17:29:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digitalvirginias.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25122851976244211235814605361929446938678550313610211104676003891903984060186363000821162791041825311495922235979101441667478949701746077302906471671293751679097100119948228358568448323549710609826424675444161698560127003875573331408406564427921960000603059003251387911566803068452333670766254931999297005117681873296153833778926820098186215852876667384884796497968123052505617211588594082123538485768306608374431246909640456621687734921931800520738440685481152762939072353648050429803206664760079631864092862735269123841962001896896284135440720344762983376109233033137241884789075238180117988429887228160988751470619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d21733f3b5e276d52a457f9f63a0325024a947e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalvirginias.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8fcdd9d80000040300463044022051aa0814ee7a8975f132ccef1001bb46d76278b088a0357a01348881e9a488a5022018ed7c4e6435ff427ca265fcb9035cd88a02ef42f1df67bed3f59cad8088ecb9007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a8fcdd9ce0000040300473045022100c113e42cca6d573b3f83be384004ac799b4c4f2af007d5dc0003c8d19bf2124802204282bf58a7c6ea3382b327c5beed794412fce3d5b46b582799d88c57e442afef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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