helpdesk.ausdk12.org

Issued by R3

About this certificate

This digital certificate with serial number 03:14:fc:e8:de:e2:60:9e:99:a3:b3:73:ee:2c:83:8b:95:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.ausdk12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:fc:e8:de:e2:60:9e:99:a3:b3:73:ee:2c:83:8b:95:05
Serial Number (int): 268478679722138887124779513864910715720965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:12:a4:ef:2d:0e:57:54:32:66:38:14:a2:08:f6:29:6b:bb:5c:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:26:6a:9e:36:94:6d:5c:1a:7a:24:85:11:f7:94:cf:a9:38:54:f7
Fingerprint (sha256): 38:4b:7a:fc:8a:91:b0:af:ce:d1:37:51:93:c0:bc:32:df:a4:6b:21:fa:95:bc:66:1f:81:0d:3d:1e:4f:94:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.ausdk12.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.ausdk12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helpdesk.ausdk12.org

Other certificates including the domain name ausdk12.org

(limited to 100 certificates)
acc.ausdk12.org
ausdk12.org
marin.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
cf.aceroschools.org
helpdesk.ausdk12.org
mercury.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
helpdesk.ausdk12.org
ahs.ausdk12.org
ams.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
aceroschools.org
aeries.ausdk12.org
www.torreselapamagnet.org
acc.ausdk12.org
acc.ausdk12.org
*.ausdk12.org
acc.ausdk12.org
*.ausdk12.org
ausdk12.org
hermes.ausdk12.org
helpdesk.ausdk12.org
acc.ausdk12.org
acc.ausdk12.org
abi.ausdk12.org
admin.ov.ausdk12.org
ahs.ausdk12.org
ausdk12.org
ahs.ausdk12.org
www.brackettisd.net
helpdesk.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
admin.ov.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
admin.ausdk12.org
admin.rmcacs.org
ahs.ausdk12.org
mac.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
acc.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
acc.ausdk12.org
admin.acc.ausdk12.org
acc.ausdk12.org
*.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
*.ausdk12.org
ahs.ausdk12.org
*.ausdk12.org
*.ausdk12.org
*.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
ov.ausdk12.org
reset.ausdk12.org
www.torreselapamagnet.org
*.ausdk12.org
acc.ausdk12.org
acc.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
acc.ausdk12.org
mercury.ausdk12.org
aeries.ausdk12.org
admin.adulted.ausdk12.org
acc.ausdk12.org
helpdesk.ausdk12.org
helpdesk.ausdk12.org
cornell.ausdk12.org
ahs.ausdk12.org
helpdesk.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
*.ausdk12.org
admin.dm.aceroschools.org
*.ausdk12.org
ahs.ausdk12.org
cornell.ausdk12.org
rowlandschools.org
ahs.ausdk12.org
ahs.ausdk12.org
ahs.ausdk12.org
admin.aceroschools.org

Certificate

The complete raw certificate details for helpdesk.ausdk12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268478679722138887124779513864910715720965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 23:41:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 23:41:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.ausdk12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683215845897583129303129732107785749654420259114242839930382507360591191241479952992786250407994563831945769178029470134106109088635295113490878088475439931848492756924175106905771927365003222715355859483175282863081341134391838558974369905743383835836582025073006836071426347993585183382729621893302774179678947903119652471424081032265615270043420962755774132380096556186478782280220492744285228192592904511940318473425746755719459977079055395425123290424377305474451244401810477081494483217664235400742331200794952804305028091660293667490228222062979822545422841936331082550532872654824293513211723940421049587006156318409764974490496838500240231173542275169017530578521441845978720919460991722652157668176856257568720082859100154340355242724335921872870731248280385397411457303772678975844923491545481904053559651100804325915206333264308427059659924631973656489444348780281711250066935614732101608033136922616403497258513749964118504920361067140686673091221992838297607080133767408923578503377853952957742801686124656961810961656301065106353390422806884175421664456584556633753175741535678227161113150509020898554753673451503089782241604377299875446907852277355488973642921842917506034111435301553268952630968637671343199406871571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:29|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ausdk12.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c95ff2dd00000040300483046022100e74cfe5e89af5cd1051ef75317107e07b675075bc2512f36eff90d40a5005e92022100dfd35c64f1e1208debb069c008e1b7bc909815fc5e51274fe1a323307edbe2190077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c95ff2dc70000040300483046022100c8e8b0502ad4b4dd6b88035337617ea967931835979c3a098a7e4bd20044d266022100ee17bdb55f2b0cd858315f7cae31c43508f5db0b297b4eaef14ca7ab800ccef9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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