boe.wayn.k12.wv.us

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:d7:c1:f0:02:76:2f:c9:9b:f1:c3:f6:d3:1c:27:7f:48 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=boe.wayn.k12.wv.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:d7:c1:f0:02:76:2f:c9:9b:f1:c3:f6:d3:1c:27:7f:48
Serial Number (int): 321513345373726701848006454774942975622984
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:0e:26:5c:07:3f:6c:56:15:8a:9f:89:07:78:80:47:40:2c:38:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:bf:48:59:3a:84:58:e4:91:16:e7:2c:46:20:4e:c2:99:53:ee:e7
Fingerprint (sha256): 2c:40:a7:84:d8:55:6a:3a:52:3a:fa:38:d0:bb:8b:ce:e6:1c:15:85:35:35:8e:13:a1:1e:ac:7a:9b:1a:8c:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate boe.wayn.k12.wv.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boe.wayn.k12.wv.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boe.wayn.k12.wv.us

Other certificates including the domain name k12.wv.us

(limited to 100 certificates)
sso.k12.wv.us
roster.k12.wv.us
procket.rale.k12.wv.us
*.kana.k12.wv.us
admin.ninth.frenship.net
hayes.kana.k12.wv.us
boe.webs.k12.wv.us
boe.hancock.k12.wv.us
boe.hancock.k12.wv.us
boe.jack.k12.wv.us
sems.rale.k12.wv.us
eschool.mine.k12.wv.us
home.mono.k12.wv.us
wvlearns.k12.wv.us
gcw.kana.k12.wv.us
cpes.rale.k12.wv.us
res.mono.k12.wv.us
admin.ahs.ardmoreschools.org
procket.rale.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
kcs.kana.k12.wv.us
boe.hancock.k12.wv.us
wvlearns.k12.wv.us
admin.ahs.ardmoreschools.org
kcs.kana.k12.wv.us
intranet.kana.k12.wv.us
plad.k12.wv.us
boe.rale.k12.wv.us
etsts.wood.k12.wv.us
rocket.rale.k12.wv.us
*.jeff.k12.wv.us
sub.lewi.k12.wv.us
boe.hamp.k12.wv.us
boe.hamp.k12.wv.us
iforgot.kana.k12.wv.us
cia.cabell.k12.wv.us
sso.kana.k12.wv.us
home.mono.k12.wv.us
airwatch.roan.k12.wv.us
*.jeff.k12.wv.us
schoolforthedeaf.wvsdb2.state.k12.wv.us
boe.hancock.k12.wv.us
www.brooke.k12.wv.us
sid.resa7.k12.wv.us
procket.rale.k12.wv.us
*.k12.wv.us
reporter.kana.k12.wv.us
makakiloelementary.k12.hi.us
boe.jack.k12.wv.us
boe.ohio.k12.wv.us
owa.harr.k12.wv.us
boe.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
destiny.putn.k12.wv.us
*.jeff.k12.wv.us
www.wayneschoolswv.org
kcs.kana.k12.wv.us
rocket.rale.k12.wv.us
rocket.rale.k12.wv.us
sub.lewi.k12.wv.us
kcs.kana.k12.wv.us
www.bpbraves.net
iforgot.kana.k12.wv.us
*.sis.k12.wv.us
wvsdb.state.k12.wv.us
home.mono.k12.wv.us
mes.logan.k12.wv.us
owa.harr.k12.wv.us
eschool.mine.k12.wv.us
jacksonmdm.jack.k12.wv.us
warwood.ohio.k12.wv.us
boe.mono.k12.wv.us
enrollment.kana.k12.wv.us
wvsdb.state.k12.wv.us
alban.kana.k12.wv.us
wvlearns.k12.wv.us
cb.mono.k12.wv.us
bes.mono.k12.wv.us
boe.hamp.k12.wv.us
virtualschool.k12.wv.us
bethlehem.ohio.k12.wv.us
*.sis.k12.wv.us
boe.wayn.k12.wv.us
procket.rale.k12.wv.us
mms.mono.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
mitel.rale.k12.wv.us
boe.putn.k12.wv.us
jacksonmdm.jack.k12.wv.us
plad.k12.wv.us
south-nac.mcs.mono.k12.wv.us
el.westwoodisd.net
sems.kana.k12.wv.us
www.monongaliacntyschs.wv.schools.bz
riverside.kana.k12.wv.us
vpn.harr.k12.wv.us
kcs.kana.k12.wv.us
boe.mcdo.k12.wv.us
wvdegps.k12.wv.us
destiny.harr.k12.wv.us

Certificate

The complete raw certificate details for boe.wayn.k12.wv.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321513345373726701848006454774942975622984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 01:11:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 01:11:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boe.wayn.k12.wv.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730596506944113701895772051253767606822140644078225529893054108302999591765447000587914376679022946917695038590140080834083503966647198181831580753384893769632901717525167793579723849613815083841458245778515659441596713460407659007435258735904896616593775175438768564289755286373247066243684770204146966075752693548503778685415340006014728664575321843596348997128475577645245257611260982722805819277556553536220597795280347010219152278685468849643685526749218104018958936819496243331549680326083958182917235377891901404110354096679588527564756575672856396713432890942579146759899751382423676085240038367208896041040654059400224071942096885083937089328836021537412186528552302149719873732952283782092106367999898970064554086260816161037768774470168879379248907174693982373540945791661827213199037833333018589594544786226647549925864794685564252090866418958305061901549281338188746682176076071336697559746584733642111540045427012356459268473964208151129467957918067750828220116594891140638822166966140024148068998437769798786876777693555782119187070824624439936624260483171418659876787022337616363710066404717013577184017155528576539017898810236026721495247967448984972632583900319092803537355157322347858214704656225745349566863799899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af0e265c073f6c56158a9f8907788047402c38db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boe.wayn.k12.wv.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aee27d7560000040300483046022100e50e58c0040e5cb06478247721170b11918a3f7992986436707f476ebf03971b022100965420d5621eabf8b303735a94976c0851941a036805e24583299964445fea1e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aee27d74a0000040300473045022068ab2de30e491bf0dced0052fc5572fafd4950814e83a0cd41db06172d203e59022100af40089e411090ef0002d1a4fc4ce8c6d34326e87c819134fbe45e86d14c86e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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