cms.roaneschools.com

Issued by R3

About this certificate

This digital certificate with serial number 04:14:ab:c9:ff:eb:e7:cb:18:89:27:55:45:f6:a7:7f:95:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cms.roaneschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:ab:c9:ff:eb:e7:cb:18:89:27:55:45:f6:a7:7f:95:e7
Serial Number (int): 355483137895112345657487999492901788685799
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8b:bd:cf:4e:bb:66:b0:de:22:47:4a:b3:b8:ff:00:b0:d1:22:b4:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 14:5a:da:7f:b2:9f:7c:d4:0f:74:66:af:d5:80:ab:ec:92:2f:c0:93
Fingerprint (sha256): 2b:1c:3c:3d:fb:b3:47:2b:69:03:5a:4a:bb:08:0a:f2:fe:de:5c:1e:bd:b7:43:09:8b:90:a8:d7:6f:c8:fa:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cms.roaneschools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.roaneschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.roaneschools.com

Other certificates including the domain name roaneschools.com

(limited to 100 certificates)
prep.warrentonschools.com
admin.fruitvale.k12.ca.us
reset.roaneschools.com
reset.roaneschools.com
admin.kes.rcschools.net
elementary.plsd.k12.pa.us
admin.athenour.unionsd.org
sre.dcs.edu
roaneschools.com
www.ptcbus.org
rcs-micollab.roaneschools.com
aak8.org
paralosninoscms.org
admin.grupocedva.com
roaneschools.com
roaneschools.com
aak8.org
admin.ccnth.org
roaneschools.com
admin.ramaroadelementaryschool.wearecms.com
cms.roaneschools.com
reset.roaneschools.com
rcs-micollab.roaneschools.com
reset.roaneschools.com
acacia.fullertonsd.org
acacia.fullertonsd.org
aak8.org
acacia.fullertonsd.org
aak8.org
memphiseast.com
admin.unionsd.org
rcs-micollab.roaneschools.com
admin.memphiseast.com
roaneschools.com
rcs-micollab.roaneschools.com
acacia.fullertonsd.org
aak8.org
aak8.org
www.grupocedva.com
*.roaneschools.com
admin.durangoschools.org
*.roaneschools.com
admin.dearbornelem.com
admin.oms.rcschools.net
roaneschools.com
www.paralosninoscms.org
grupocedva.com
rfe.rcschools.net
aak8.org
rcs-micollab.roaneschools.com
acacia.fullertonsd.org
acacia.fullertonsd.org
rhs.roaneschools.com
sbc01.roaneschools.com
admin.athenour.unionsd.org
rcs-micollab.roaneschools.com
*.roaneschools.com
wje.dcs.edu
rcs-micollab.roaneschools.com
admin.athenour.unionsd.org
paralosninoscms.org
admin.bes.roaneschools.com
reset.roaneschools.com
reset.roaneschools.com
*.roaneschools.com
aak8.org
roaneschools.com
admin.athenour.unionsd.org
rti.roaneschools.com
admin.oshs.roaneschools.com
admin.oshs.roaneschools.com
aak8.org
reset.roaneschools.com
acacia.fullertonsd.org
rcs-micollab.roaneschools.com
weec.dcs.edu
mail.roaneschools.com
cms.roaneschools.com
reset.roaneschools.com
aak8.org
admin.bes.roaneschools.com
*.roaneschools.com
admin.athenour.unionsd.org
admin.clearcreekelementaryschool.wearecms.com
mail.roaneschools.com
acacia.fullertonsd.org
cet.edu.mx
roaneschools.com
admin.athenour.unionsd.org
*.roaneschools.com
admin.carmelmiddleschool.wearecms.com
*.roaneschools.com
sphs.spusd.net
*.roaneschools.com
*.roaneschools.com
fhs.gvusd.org
hhs.roaneschools.com
acacia.fullertonsd.org
rcs-micollab.roaneschools.com
*.roaneschools.com

Certificate

The complete raw certificate details for cms.roaneschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355483137895112345657487999492901788685799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 01:49:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 01:49:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.roaneschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664672259635519506982496617744509698649539600528264733672997194851412463429570181028423274853275735060143782354808570444852898148617755467761595334343881017786283280258958533153591998274800557772239146446739682940058972518705408771223030703449169485344074884684621154866309700623712682587279776545400979727646324387533405437423030393333017274039272914606788718707213248346324966106542996563142285394522899453577963000606484980246819275770703459347073405514005330988030692592334222716472175210024425793885325605290544940784746282327120260431525811846420812954670110293022382760351105541795141529496352113229740135031025837214707942103741856781110868583479606598446710916834887097765163567796351526147537641192515745981944229495103522046802395481088410070291875562285468404302085469531287197624177120425252878710014537968536280922033351852823833529309008317982087281587203912862698547437628542797258877384594456895801154838180334753862248162019953792526035398665934906252242986563654301061211369198794901528310587628884518654806711481958545058065769904917063947565515962342721979510431829800191618661260284708057460238286411889749145689844790976697559661110582007754362603130126571525581755645096499065898337487637211206582777325859741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bbdcf4ebb66b0de22474ab3b8ff00b0d122b40a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.roaneschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001868153c9100000040300473045022011ff3591eb6cc29b1d1cca56b72f3957dd808d6f1ccf9b455401e5669a1e0d80022100ab95eadc10875efd6fae8f44f93c6028fe849404ab9391e02c79503777d8cf850075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001868153c9220000040300463044022018f7260c88a81a5a9a6708ad82ce918b5cef84506d54639dbd65af25de5022ce0220228ac766231a931cf69f5c51fb4cd09fe80b4ad297f7e013c680d15814ae249c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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