sapphire.homercenter.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:db:c6:9f:a3:b5:9d:04:90:ba:78:50:66:d9:aa:09:58 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sapphire.homercenter.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:db:c6:9f:a3:b5:9d:04:90:ba:78:50:66:d9:aa:09:58
Serial Number (int): 329685463423196843184714263823990127200600
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:90:62:37:7d:14:41:07:46:52:c8:12:03:31:ef:a9:ef:58:cc:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:14:be:86:2f:30:6d:4c:93:c8:74:c2:77:b8:e9:38:ae:f3:7b:93
Fingerprint (sha256): 2d:59:4d:5e:a0:b8:c6:8b:02:f2:30:ce:30:d7:6c:e3:ac:dd:a9:14:b5:e5:bf:ba:78:65:21:ec:09:01:42:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sapphire.homercenter.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sapphire.homercenter.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sapphire.homercenter.org

Other certificates including the domain name homercenter.org

(limited to 100 certificates)
admin.agl.sbcisd.net
www.goodshepherdschool.us
admin.pierce.southredford.org
admin.jcles.org
www.mountalverniaacademy.com
admin.bethune.hattiesburgpsd.com
admin.marquettecatholic.org
admin.veca.gocats.org
admin.aes.alcoaschools.net
www.dms.dover.k12.nh.us
www.collegeachievecentral.org
www.hirschhs.org
admin.collegeachievecentral.org
www.panoramacityelementary.org
homercenter.org
mms.mpsdnow.org
www.homercenter.org
admin.ohds.org
admin.burney.hattiesburgpsd.com
www.ellwood.k12.pa.us
admin.magnoliaheights.com
admin.hedgescps.org
les.magnoliaisd.org
www.hilltopprep.org
admin.castaichighschool.org
www.junctioncity.k12.or.us
www.hubbardhighschool.org
mes150.org
ais.alcoaschools.net
admin.burger.hattiesburgpsd.com
harlanfalcons.org
dover.k12.nh.us
admin.elementary.homercenter.org
admin.decaturclassical.org
sapphire.homercenter.org
admin.cvlcc.org
admin.masd209.org
www.morseschool.net
*.homercenter.org
cdc.inglewoodusd.com
aes.alcoaschools.net
admin.alma.cv.k12.ca.us
admin.lisawesthigh.lisaacademy.org
ebjshs.ebps.net
homercenter.org
admin.cdms.coltsneckschools.org
burney.hattiesburgpsd.com
highschool.homercenter.org
admin.dover.k12.nh.us
www.gctech.edu
mountalverniaacademy.com
admin.homercenter.org
eec.rs-wolves.com
admin.highschool.homercenter.org
admin.collegeachievecentralcharterschool.org
www.whitmanhs.org
admin.mabelpaine.org
inglesdurkheim.edu.mx
desoto.goldenruledallas.org
admin.bennett-kew.inglewoodusd.com
admin.mainlandregional.net
admin.mabelpaine.org
painesville-city.k12.oh.us
athletics.hattiesburgpsd.com
www.jcoms.org
thecije.org
sapphire.homercenter.org
admin.ps290juanmorelcampos.org
www.castaichighschool.org
admin.woodley.hattiesburgpsd.com
admin.homercenter.org
alio.homercenter.org
admin.icefps.org
admin.elementary.homercenter.org
holualoa.school
sapphire.homercenter.org
admin.elementary.homercenter.org
highschool.homercenter.org
admin.elementary.homercenter.org
admin.cvhs.cv.k12.ca.us
admin.cve.cv.k12.ca.us
tipton-county.com
travisranchschool.org
alpha.magnoliaisd.org
admin.chesterfielddayschool.org
admin.milam.hcisd.org
www.paulrobesoncs.org
admin.lng.otsegops.org
highschool.homercenter.org
www.jctes.org
admin.athletics.hattiesburgpsd.com
admin.creekside.cv.k12.ca.us
admin.elementary.homercenter.org
admin.harlan.mtpcsd.org
alio.homercenter.org
admin.egbertintermediateschool.org
admin.marshall.cv.k12.ca.us
elementary.homercenter.org
www.bischool.net
homercenter.org

Certificate

The complete raw certificate details for sapphire.homercenter.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu9yAl1ZqH1LqVLZE/UK
v/fF2SzFEMDMLTifjE2YAOZ7LHrb8gzzCRUr+FJ50629/QspWChboD78YEHWYmMA
3c5Jqv78e81n18fuvD2uXans2tb8KvmFgo3xZYVhNKSvZUoqgAtY552OWsj80CNC
T7aecEdGQTgDrEiqNrkz+OsJzxhQkbbTG79yJOHvDdeEEtedwuJMQKV9j89Tva8r
hC/6gNBPLggZk87HSYm0mz9T7fAGGEyhF9eqbatBrRRnsasUyDnmVi20FuM2Qd1k
047eGPqhYDIPM8U1gzsH3Zr7sc5bIyaSQcFIcq9msljBt9Nd63+UbyaTVYTRcukJ
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329685463423196843184714263823990127200600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 16:28:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 16:28:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sapphire.homercenter.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24103352845648634308421801367346711958143275683651678623282654671418731202392337053763905988203591437407879988044130171623389612714215385458417728599753550225823839045009528998767922631274508380619112535805450807973029857354579781880798045331491094989599726597517361591024400312638925191597145368599517135015810662126634471517849621898660093073306402128944024302623719817309945603392204769571948789946356345419066805945374247113247862786582681075783687143836823174920282210640954807759371287555860051771450516584614404346246914366851109596350324299080017977358925540086124766359883424344758545381371244038499192080839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e9062377d1441074652c8120331efa9ef58cc13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapphire.homercenter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1db65e91000004030047304502202d495810b474707efc91eddc8ed6aefe4088c57d51237c3be4d28cd37a9f064e022100e043910e5086a4f25564e1296c9a9b6382f77f169dea53e093b2e1594a3eedea0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1db66096000004030046304402202356a6c91189f98f0721fcb5e1e43c47b09208541903e2f296ae89e799e8d74f02207116bb0ce0202227a85fe2dbb8c2df370a10cf4dc195f6566f00a609bc1bfda6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00929de6859eb74aa0f4e5be9a81fd829111bafbe56891ee70fc213441abc907cafcea73f52379301755b471e57cf6662641043f4bc8ec22fb27c78af720234af94123f1d5e2cb180f7c8a1929dc723e86f09c0161484686132acc55b5828f9542941064f997595aa50aad9c98f98b5304d19cfbf5d4400fd52592bf9b33ccae6c6e8fa4f85aab0047d1cbf08503b4288ec5d17c71fa95009401c17643e0372cebc46dcabe17ec53489c26e77616adf2cd7ad1397c196177331f6f62f1c6948d5f06bdeef6a9703a357dfd295bbd1e64a1dcd12f571f1bd83c482e6a1e97175c510e5e0d97156c9805f10a9aac18455bb439ea4e4ada4aef3edb3473c757ef2eb5