bethlehem.ohio.k12.wv.us

Issued by R3

About this certificate

This digital certificate with serial number 04:2a:2b:23:95:ca:e1:61:cb:62:77:df:2c:be:d1:5f:28:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bethlehem.ohio.k12.wv.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2a:2b:23:95:ca:e1:61:cb:62:77:df:2c:be:d1:5f:28:5f
Serial Number (int): 362798344710082074278910603028327735175263
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 14:7d:38:ae:a5:1f:c4:68:56:f4:8b:e7:3a:10:b4:2b:4d:6f:83:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:2a:b6:fc:f0:da:a3:4c:18:e2:fa:cd:92:7b:b9:20:72:17:46:49
Fingerprint (sha256): 2a:44:72:f4:5d:ce:a8:0b:26:13:47:6b:2d:c3:30:26:38:03:e7:b9:c8:cc:a8:9e:3e:27:52:bb:d2:d2:9b:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bethlehem.ohio.k12.wv.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bethlehem.ohio.k12.wv.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bethlehem.ohio.k12.wv.us

Other certificates including the domain name k12.wv.us

(limited to 100 certificates)
sso.k12.wv.us
roster.k12.wv.us
procket.rale.k12.wv.us
*.kana.k12.wv.us
admin.ninth.frenship.net
hayes.kana.k12.wv.us
boe.webs.k12.wv.us
boe.hancock.k12.wv.us
boe.hancock.k12.wv.us
boe.jack.k12.wv.us
sems.rale.k12.wv.us
eschool.mine.k12.wv.us
home.mono.k12.wv.us
wvlearns.k12.wv.us
gcw.kana.k12.wv.us
cpes.rale.k12.wv.us
res.mono.k12.wv.us
admin.ahs.ardmoreschools.org
procket.rale.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
kcs.kana.k12.wv.us
boe.hancock.k12.wv.us
wvlearns.k12.wv.us
admin.ahs.ardmoreschools.org
kcs.kana.k12.wv.us
intranet.kana.k12.wv.us
plad.k12.wv.us
boe.rale.k12.wv.us
etsts.wood.k12.wv.us
rocket.rale.k12.wv.us
*.jeff.k12.wv.us
sub.lewi.k12.wv.us
boe.hamp.k12.wv.us
boe.hamp.k12.wv.us
iforgot.kana.k12.wv.us
cia.cabell.k12.wv.us
sso.kana.k12.wv.us
home.mono.k12.wv.us
airwatch.roan.k12.wv.us
*.jeff.k12.wv.us
schoolforthedeaf.wvsdb2.state.k12.wv.us
boe.hancock.k12.wv.us
www.brooke.k12.wv.us
sid.resa7.k12.wv.us
procket.rale.k12.wv.us
*.k12.wv.us
reporter.kana.k12.wv.us
makakiloelementary.k12.hi.us
boe.jack.k12.wv.us
boe.ohio.k12.wv.us
owa.harr.k12.wv.us
boe.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
destiny.putn.k12.wv.us
*.jeff.k12.wv.us
www.wayneschoolswv.org
kcs.kana.k12.wv.us
rocket.rale.k12.wv.us
rocket.rale.k12.wv.us
sub.lewi.k12.wv.us
kcs.kana.k12.wv.us
www.bpbraves.net
iforgot.kana.k12.wv.us
*.sis.k12.wv.us
wvsdb.state.k12.wv.us
home.mono.k12.wv.us
mes.logan.k12.wv.us
owa.harr.k12.wv.us
eschool.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
warwood.ohio.k12.wv.us
boe.mono.k12.wv.us
enrollment.kana.k12.wv.us
wvsdb.state.k12.wv.us
alban.kana.k12.wv.us
wvlearns.k12.wv.us
cb.mono.k12.wv.us
bes.mono.k12.wv.us
boe.hamp.k12.wv.us
virtualschool.k12.wv.us
bethlehem.ohio.k12.wv.us
*.sis.k12.wv.us
boe.wayn.k12.wv.us
procket.rale.k12.wv.us
mms.mono.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
mitel.rale.k12.wv.us
boe.putn.k12.wv.us
jacksonmdm.jack.k12.wv.us
plad.k12.wv.us
south-nac.mcs.mono.k12.wv.us
el.westwoodisd.net
sems.kana.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
riverside.kana.k12.wv.us
vpn.harr.k12.wv.us
kcs.kana.k12.wv.us
boe.mcdo.k12.wv.us
wvdegps.k12.wv.us
destiny.harr.k12.wv.us

Certificate

The complete raw certificate details for bethlehem.ohio.k12.wv.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362798344710082074278910603028327735175263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 01:11:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 01:11:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bethlehem.ohio.k12.wv.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790093655528360313299418315211531651909072426708643785927127538190058588584090577393541883802835377322025129122917774081563173099198729994269426159219834222282486500653886697179572080641315050626295831818907609026708602542622918705842383416913048940976119207619435982742166879139565633913197209358347811491989900606055468942216711956219452285104541407593905999877179341345784800646926130163710584927686509446533045706402057908094988820368878655856400650037406586731386009256795358698353268581455195802811879683170929097634645687598645644971080492312383890929486323989467536996115322607784342814123408595330593131425101487658361094234674191754985607354222523510515253427813899966560048705640365064909552628054104265282602892806370252511627762808227218580756464435136871842063962491486829419583882747715623902299245791823771668230434367787160606692854952698689233223369536684194226159286072283789979680643043220716605827616374085897588017973576296746840456729397888358790504179506709510098720726478538685094086518081045983629542570430218687163341252507748957800612964097820322412673549969656066448524191478395554077152002062453527565081960917697334860132430308369256846823020486751361385614681991791776556299195157726799772335508968793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							147d38aea51fc46856f48be73a10b42b4d6f837e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethlehem.ohio.k12.wv.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018942b8266800000403004730450220426e5fea32854d046456cf342209435424e804bb3998ffcfdfb4af1dc69549b0022100c2ff25d8291c1ae351404361625048c5993e63c3fd735223bd31c3bdf5907e14007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018942b8265500000403004630440220235c4d29e3087de042d0e07224c13d013f7028741f3ddc047377bd3ef07361e202204f60d28a7e073016efdf574f3fafff74ae88d9d98b733817aee5b3e59acd4bb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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