educationfoundation.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:60:b5:a0:0a:76:e0:e6:2a:07:ad:f5:ba:7f:52:67:cb:17 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=educationfoundation.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:b5:a0:0a:76:e0:e6:2a:07:ad:f5:ba:7f:52:67:cb:17
Serial Number (int): 381357672198428136531215157635753974418199
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:80:7c:49:29:e0:93:19:07:60:2c:90:eb:f7:f1:91:bf:6f:61:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 26:98:45:e3:aa:23:46:d3:cd:e4:91:09:94:ef:94:e4:44:ca:de:f3
Fingerprint (sha256): 37:ab:c3:4b:81:d1:db:77:08:96:00:f3:30:b6:f9:21:20:e0:a7:be:e7:0d:e9:fe:51:a8:f8:f6:5d:3b:14:87

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate educationfoundation.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for educationfoundation.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

educationfoundation.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for educationfoundation.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISBGC1oAp24OYqB631un9SZ8sXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDUwMTMxMjhaFw0yNDAzMDQwMTMxMjdaMCsxKTAnBgNVBAMT
IGVkdWNhdGlvbmZvdW5kYXRpb24uYnJ5YW5pc2Qub3JnMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA7RqaOS39H3PrVz/kYXj9CuI3l9dD/LB0gLO04UZN
1L7zHzL/ghRLZL/R08Ssfvm3lTownJk54owyTR72tDQz9C6jTrWL3j3WQwUZ3fBt
rxs3hNtmTOHjPPxLIelFbHZOEg0STNx6twgpVyAiRhWZOOEEwqi1GD5KY/kf1vzv
hprF18waXrr8AhiF/i39TmDdZjRgFQcjMwsrZB9SxeeDHE9+FRh7ULcxtBRr8/CJ
xFdh6ylJ9Akk157gQhiSfhNZREq8CAHmlg/YBCuSDuKMjjsUxCoCSKbTrOysiCKS
jliXxYl2arBhc9OSyz72ky4wixpo8uz2OOO5T2jCiy5AsJwtc53hBym0JBc/Ldr+
ne706jouDDOaAYpZBLzXsK34AVrL4jjH8nQ7ZTsOmE/UIA8F8vET0miDGmNtv0er
WEb+ejdd+pc0/CmIXF4jYx4XrRbq6+udW7m1GeIW5oU2sLWJDdeNtd7HatRn4y3t
2hKXVeoJ61oNq1jS/Q6NEiqYgqWUVI6ZAKaC8FhjRmHaveL1StDVRiwFzfs2U24W
W5oQ5O9mWxCESbrwPEVWERKY6XIpZdxpNy8vZwMmSl7OWPJUK8NpUNsHEkcj0S4Y
I+DU44QF4+ixtL5RFIskIoUhum3Twnd9gKZYJ/KygIgcupZihdiUwp48rwfwd16U
UwMCAwEAAaOCAiEwggIdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4oB8SSngkxkH
YCyQ6/fxkb9vYfkwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYI
KwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcw
IgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKwYDVR0RBCQwIoIg
ZWR1Y2F0aW9uZm91bmRhdGlvbi5icnlhbmlzZC5vcmcwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAYw30O99AAAEAwBHMEUCIFnRS9l5m3z7vMLJIHfQ
VOjrZ1PUcVAPl4MtoZGQXPRTAiEAjsMNPylyfYCPC2v28dx8q1+D6mP5iIY2UxUj
bHoVY5cAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYw30O/V
AAAEAwBGMEQCIDH8lF5A6SOKCXAMsoRNlHKCfsx06MgJrKYSREB+j/BYAiAR6Npb
BFRJEG1ZdvfyuqeQUbLk9XjEcNRJ/Jmhg1pjjTANBgkqhkiG9w0BAQsFAAOCAQEA
O6NtwNdavpS7L2fpcGX85LPuI9FByPyLxsPJRtuRFeB8TLKl3i6GJtVUiS23jWT2
YajWC9xbEqX6Eeg77C8jrNrD6vB0W3VfIEGhRAq/NdoL+C4kWtb4ou4/dg1Axf5S
US2UTeaAsY8tPWmItojQW7tAiI857FxiV4nXrkeS+F1MyH6ZHGdUVd68Hu4/Iin9
b++9cnLiNiCTjEXYl23QnPe59wHrcr2VoD9Nfk07JjWeF5kkuh+l8V53BJebwf6t
uSmlZqbmwBnYx8heZq7K8dAdSo4VFSYX8lg6sPhoU5/cGEmulfz/pQQnaNbyPYVX
nk40HuQTKLaVfG1ej5ADgg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381357672198428136531215157635753974418199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 01:31:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 01:31:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'educationfoundation.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 967299583441514214334932580079082018079905336338216114358527284252233098935017338055768806641521870995833505526453397576773080707921626013387685089396692520697027958069108972224019442347322220482329327649651668317195766159052144644950879065478066739125265752115842581985986310249643508134345771905757144953552982607745076354939899221663284480196087886206615511233023054490399451813917753613316392707498507939082554305128514830074120806345166941466170005356702792375716288072283342701808734691710134325663239018857511952943113768307111046662712379817027059773506629828172473235198998959622970583717549542761828404701992876014279863998613467495126329975656103744214953638108956837035758674633724241936533506315841443014326080154891412553650486413552592576352038254701587467135172276998720831379706600141969014162824295600413714200025886792122320866808925194380651720253643493809688544282227699373308174202607873933818249008975728303537534023303823866484081755601800513991562266579772053026128452024765622093688632611732660135324312757177996895817265089687210293409871874860919468112581354644898457712260810904483230537656454492599163153111367242958197523413785512145898051255147347478866690955030548912025097506403565133847901636940547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2807c4929e0931907602c90ebf7f191bf6f61f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationfoundation.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c37d0ef7d0000040300473045022059d14bd9799b7cfbbcc2c92077d054e8eb6753d471500f97832da191905cf4530221008ec30d3f29727d808f0b6bf6f1dc7cab5f83ea63f98886365315236c7a15639700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c37d0efd50000040300463044022031fc945e40e9238a09700cb2844d9472827ecc74e8c809aca61244407e8ff058022011e8da5b045449106d5976f7f2baa79051b2e4f578c470d449fc99a1835a638d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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