somerset.k12.md.us

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:80:fa:7c:7c:15:31:d9:8f:db:a6:30:b8:9d:af:be:5b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=somerset.k12.md.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:80:fa:7c:7c:15:31:d9:8f:db:a6:30:b8:9d:af:be:5b
Serial Number (int): 332627314264281624196910369759730517130843
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:38:a9:00:12:2f:7f:30:47:d4:8c:ed:b3:df:70:7c:85:2c:3e:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:4a:75:ea:29:c9:80:36:6d:95:32:5c:62:af:83:ce:14:a8:e7:1b
Fingerprint (sha256): 2d:b4:21:9f:9b:cd:d1:a1:b1:78:f7:1d:b3:dc:73:d2:24:b7:31:4e:e3:d9:b2:45:f5:32:2c:d5:4a:9f:b5:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate somerset.k12.md.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for somerset.k12.md.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

somerset.k12.md.us

Other certificates including the domain name somerset.k12.md.us

(limited to 100 certificates)
wes.somerset.k12.md.us
admin.arcataafterschool.org
somerset.k12.md.us
admin.bayhaven.org
chs.somerset.k12.md.us
admin.bayhaven.org
shepherdstown.mbgsd.org
admin.chs.somerset.k12.md.us
somerset.k12.md.us
stmmsa.org
admin.elmwood.mbgsd.org
admin.bayhaven.org
cristoreytc.org
admin.whs.somerset.k12.md.us
somerset.k12.md.us
admin.somerset.k12.md.us
admin.bayhaven.org
upperallen.mbgsd.org
admin.pes.somerset.k12.md.us
admin.bayhaven.org
pa.somerset.k12.md.us
portrichmondhs.org
sp.somerset.k12.md.us
admin.portrichmondhs.org
ps.somerset.k12.md.us
admin.dis.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
monroe.k12.tn.us
admin.scths.somerset.k12.md.us
admin.chs.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.highschool.mbgsd.org
mail.somerset.k12.md.us
admin.bayhaven.org
admin.gulfstreamschool.org
somerset.k12.md.us
ps.somerset.k12.md.us
admin.bayhaven.org
lightspeed.somerset.k12.md.us
admin.sis.somerset.k12.md.us
admin.scths.somerset.k12.md.us
admin.ees.somerset.k12.md.us
mail.somerset.k12.md.us
admin.arcataafterschool.org
www.usd465.com
somerset.k12.md.us
admin.broadstreet.mbgsd.org
mail.somerset.k12.md.us
admin.upperallen.mbgsd.org
admin.bayhaven.org
mail.somerset.k12.md.us
msp.somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
admin.ges.somerset.k12.md.us
sis.somerset.k12.md.us
admin.wes.somerset.k12.md.us
stmmsa.org
mail.somerset.k12.md.us
lightspeed.somerset.k12.md.us
somerset.k12.md.us
mail.somerset.k12.md.us
mail.somerset.k12.md.us
somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
www.somerset.k12.md.us
admin.middleschool.mbgsd.org
somerset.k12.md.us
sp.somerset.k12.md.us
scths.somerset.k12.md.us

Certificate

The complete raw certificate details for somerset.k12.md.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTKYwPBchH8Z7YU7TIfK
sneOv1mplI3ZDqzB6DAQrHYFzqkyA66Z0Slh9sbohKV4h+8/UJL3kZWevZFxFO+k
+sHibZEwY5g8zm//BhTAPL5Opa4lPoE/chSyDoe09E9byXZPJ8p5WNjmGqA6k3po
ak09eJnPBHna704xQAwLkpTRMvUkS3axaTKUe2cuWhNhMWncH4S5T1/IhBEALNCd
tTAK6vDQZ9Z0kZygpGVkl1N8Tf4JNfF/MFKQ/fWuJux6EMEPBeRBZnC0D4HbG+js
vHesi0XhLGTHAUutFrATkwoCdsGB+X41O+4/AD7H+mXZQVl55D9Sxd1Ages6J1AU
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332627314264281624196910369759730517130843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 22:57:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 22:57:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somerset.k12.md.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24893896238037116306816778753678991270979737439408509108112169086117982292411225254802812072778216042522877888523954265052191032419297844286780514609393812153355703229590027470700077657235137928958426238655113740791663644432286753354378751233016218872539103446148019469975760043389160953798870289030876615848292368245445744939974721835324450485433928715402715857674457707771448123304186712164064025439878973078093315186037602978681403150363140696069509479490087393485939109735550942768203677251092826895427126070416990166802946023096396421074230383518490828502974861393878531000956729506352880315053782593595792954393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e938a900122f7f3047d48cedb3df707c852c3ec9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somerset.k12.md.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b59d222dd000004030047304502204fa3b1386357dd9d3c47dcc71eb64ea3a366bf4e9ddee1f54b4d2253ab6b482f022100b5dd0e6794702532befd005f67e25b59888daf32e7c0b8dd9e42f8c8baa2d2c6007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b59d222c4000004030046304402203a33f2013668112ad866f6c988fe6a805b32813a2e016db5631b5e9de284280502200d327f0d1351969e9f70ce339ea382e0a4909d1c1461d2276b3a4f34d4b13f54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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