www.needlesusd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:7f:b6:22:ff:ad:fd:be:e0:c8:2c:ed:de:8c:66:23:87:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.needlesusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:b6:22:ff:ad:fd:be:e0:c8:2c:ed:de:8c:66:23:87:ae
Serial Number (int): 304794819613365421183765030631385688410030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:16:51:61:b9:f2:d3:1c:f4:1b:0d:9d:3d:56:28:3a:dd:b3:47:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:bb:b2:5a:e1:8f:b9:98:7d:0a:33:bb:5f:71:ca:3d:57:65:b6:29
Fingerprint (sha256): 2b:a2:00:fd:49:4a:0e:05:5f:53:c4:b6:da:7f:d0:8d:0a:19:f3:25:6b:24:e6:0e:e6:16:52:a0:bb:f6:d1:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.needlesusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.needlesusd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.needlesusd.org

Other certificates including the domain name needlesusd.org

(limited to 100 certificates)
hs.unitedsd.net
abramfriedmanoc.org
abramfriedmanoc.org
abchandler.henderson.k12.ky.us
nms.needlesusd.org
tcms.todd.kyschools.us
abramfriedmanoc.org
admin.tcms.todd.kyschools.us
peck.cps.edu
admin.espanol.tecsalvord.org
admin.athlosbrownsville.org
nms.needlesusd.org
admin.mes.mayfield.kyschools.us
athlosaustin.org
hms.frenship.us
admin.clarabartonhs.org
www.needlesusd.org
www.nicholsonstemacademy.org
6gc.owassops.org
abchandler.henderson.k12.ky.us
116elementary.org
admin.alvahscott.org
abchandler.henderson.k12.ky.us
clarabartonhs.org
admin.liholiho.org
116elementary.org
www.pacificschool.com
admin.stonecanyon.owassops.org
camden.cuhsd.org
balloustay.com
lawtellelem.slp.k12.la.us
abramfriedmanoc.org
abramfriedmanoc.org
admin.alvahscott.org
needlesusd.org
admin.alvahscott.org
admin.alvahscott.org
7gc.owassops.org
sunrisewaldorfschool.org
trinitystelementary.com
abchandler.henderson.k12.ky.us
116elementary.org
admin.alvahscott.org
www.notredameacademy.org
nms.needlesusd.org
admin.edlio.mx
www.eshelmanelementary.com
admin.alvahscott.org
admin.alvahscott.org
admin.alvahscott.org
www.ascisd.net
admin.7gc.owassops.org
bishopmacdonell.wellingtoncdsb.ca
delbosquemexico.com
abramfriedmanoc.org
116elementary.org
holyfamilyhs.com
www.ccs-nc.org
etc.needlesusd.org
admin.alvahscott.org
116elementary.org
abchandler.henderson.k12.ky.us
etc.needlesusd.org
abchandler.henderson.k12.ky.us
www.summitacademyschools.org
www.macademy.org
admin.ntes.todd.kyschools.us
116elementary.org
admin.clarabartonhs.org
abchandler.henderson.k12.ky.us
garfieldelementary.org
vces.needlesusd.org
arnaudvilleelem.slp.k12.la.us
admin.sssq.org
nhs.needlesusd.org
116elementary.org
es.franklintowne.org
admin.sierra.bcsd.com
116elementary.org
stonecanyon.owassops.org
admin.cuhsd.org
admin.sandiaprep.org
lennox.k12.ca.us
admin.pes.davidson.k12.nc.us
abramfriedmanoc.org
admin.alvahscott.org
admin.alvahscott.org
needlesusd.org
admin.brightfutures.grandviewc4.net
abchandler.henderson.k12.ky.us
116elementary.org
admin.needlesusd.org
admin.tcms.todd.kyschools.us
admin.br.needlesusd.org
abramfriedmanoc.org
admin.sssq.org
admin.barnes.owassops.org
116elementary.org
admin.todd.kyschools.us
admin.alvahscott.org

Certificate

The complete raw certificate details for www.needlesusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304794819613365421183765030631385688410030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 12:22:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:22:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.needlesusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647532756151459852350885725297916909169368907105936788046348940887144026386426297796491958433049261406548841192649306566963892611587093603792016322134088366445782792306571272767888134969158858208188036793483089711715959611007425641312149008286553309992711550151309735913269468483841175904923086973230257925899580279207493614641344514305378873220349047974826416410517614017489744505023065691367664049404724795641405107146594979708409922491535490702247027571924518238103398614765602161753105515119116642236183297796683380994359438827600815640330603832985941924406038155225271210947363441723683654595578145644913529215646081526587194049803596224649042909988822136953601914111072318289111870622760387388952724745237569299573445246214042751315010333905920138650105973373679105038353899889531492296617405813293524675497810109824623825352129834909006059792565853525051362250766488631217337056977926302893709747578658561904975003582711645236722799134806351753118135065270710993874676627287977268870402363342246319276204882702307966853696953981083862505292559942471258403769285286695573774990809477750388204267729894388694352489829891924657652973464727528424153131120027999706053247195824036559677146171494313898179803983543869650936457924571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f165161b9f2d31cf41b0d9d3d56283addb347e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needlesusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b240da1b5000004030047304502205ba2effb7ed637c0bf123cfd3ec13feb7ca300bbab256936a8b8e8e5c25c0d68022100f69297931b761e9c1c139a16df44d272b95d866b322425fdb53660ed215b65b9007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b240da1bc00000403004830460221009b1d736027d716be4eeade73a082d20ac43f40901aa32d958b21cc4c84eb55c8022100ee10cb9c1ad9454b6aef06f0ec1da9dd2f6a1b820e33bff9bae34feca3389c14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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