davila.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:3d:67:85:d0:68:c2:01:fa:bf:b6:f0:9f:72:28:5b:7c:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=davila.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:67:85:d0:68:c2:01:fa:bf:b6:f0:9f:72:28:5b:7c:c2
Serial Number (int): 369343973395307233270735366642319585148098
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dc:c4:dc:9f:b1:57:80:fa:1d:9c:bf:4d:aa:7b:14:6d:8d:ae:f0:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:41:c2:58:e8:2a:04:1f:59:79:d0:0d:de:b0:39:e9:69:72:03:fa
Fingerprint (sha256): 30:f9:ac:52:73:d8:98:94:9b:57:28:43:03:84:12:a2:a6:ed:57:a7:ca:f2:c2:24:cf:0d:ac:fc:20:7f:10:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate davila.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for davila.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

davila.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for davila.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369343973395307233270735366642319585148098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 01:20:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 01:20:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'davila.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 601289283328387850150297358736547250847177867075575353455415602129228890143891000312702086410802315538998820733937602897729874688634573986585334925729811279263674910631952552357874606630843011270782277491439623473504946265187205853328343764854925883996549894381826206872549834271563331585917318819031691316893319502300294291792840277396204885275151167094523806904153072997049370377110506342287172917438541860805743430697527710492464054127415726392339382047554788360097167249805679614265188941159955558045228818012001446559100322905972569964979513596151826338933839112182788050894913769775628002361082432851928230553715976903806177478492028957751908995174384187823246779185181993575891267410788270921498318368744606219360644228879751011044243750988516022290905763245844853214751696333666036621295447902079884174668273597188694409986974753341520741517826255938504451155023971729475830985951103035162009894322436961826919093927792837203651139881454405800039773414176156477146252452816306600139397838449302451245712291944407897059452165889818401892547975250381598296740616793564972484880134039631232334163271473389277138421256103746423585365810623249839978419544053901440987060810948873225740514363500028412314220451212269096361452545393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcc4dc9fb15780fa1d9cbf4daa7b146d8daef0e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davila.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c37c6d1b50000040300483046022100accffc5eabe7b5c249027e7c2c0ac7b4ef292e346ceb6d83cd8317ffa060e85902210094ee33481cfe8065f79f34bb7a63606a5fdf71b34f54b962826c1f676a659d6e007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c37c6d1c2000004030046304402201482d9409570dea91698de77880712a9092c2094840521b6d69ffd752088b93d022067b8f59b47b5f66568089e7ac7771f926ffcd7c6049acb3d726df646795b60b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b0d021f6b91c63a816e7cde13f22e7ce718a669c8d454034ae5b6ff77d6e76e25235dcee3db2fd518125ed635d4b6d45556e664c19100e176e718d1ed5112ccb2dab95ebc8752063b1babf45585e3f1e2baddeac2640a5d9782f80498103c94f76844ccc230abb4e2fa078e9da7dc10a1ab4570e588a06d1a9361ec8a25bfb85c1e87b294b41b50d0b7b3d7a9c9678224ef7871025e89d87943897bb0ce8dff436a95733aa0f784246379d434e3d7f8f9b4066674ad115a9ed57d41a34d1ba39a0ee30eab4630e0e8d84fde56282924933d94e7f4fc6935d61eb0304d9b9f923b125e9a9df0719693351672fce061c0fe52b9af874e5cd1de63913d7a8a3b9a