middletownsprings.vt.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:2d:ec:54:36:70:6f:5b:28:9f:bb:c1:ef:a8:a7:0e:53:cf was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=middletownsprings.vt.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:ec:54:36:70:6f:5b:28:9f:bb:c1:ef:a8:a7:0e:53:cf
Serial Number (int): 276963699370822463706218434788226073777103
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:9c:9c:4c:4e:93:25:f4:bd:0b:72:ba:a1:24:6a:15:b5:13:8b:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:2e:15:05:8f:d6:0b:55:52:97:ca:de:d1:78:7f:72:af:bc:98:27
Fingerprint (sha256): 38:78:4b:b7:05:55:7a:dd:47:20:a4:96:93:9f:27:dc:25:6c:ed:a1:4f:37:cf:dd:9d:5e:37:ba:5c:af:82:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate middletownsprings.vt.gov

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for middletownsprings.vt.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.middletownsprings.vermont.gov
*.middletownsprings.vt.gov
middletownsprings.vermont.gov
middletownsprings.vt.gov
www.middletownsprings.middletownsprings.vt.gov

Other certificates including the domain name vt.gov

(limited to 100 certificates)
www.myvtax.vermont.gov
www.poultney.vt.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
bridgewater.vt.gov
www.tradoc.army.mil
www.tradoc.army.mil
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.tradoc.army.mil
www.ahsuploader.vt.gov
rms.vermont.gov
bridgewater.vt.gov
ssl7.revizesites.com
anrmaps.vermont.gov
westfield.vt.gov
www.vermont.gov
anrmaps.vermont.gov
www.bridgewater.vt.gov
vtlottery.com
www.bridgewater.vt.gov
ljfo.vermont.gov
www.poultney.vt.gov
www.tradoc.army.mil
www.skysoldiers.army.mil
ssl7.revizesites.com
www.bridgewater.vt.gov
rupert.vt.gov
ssl7.revizesites.com
psp.education.vt.gov
www.skysoldiers.army.mil
www.skysoldiers.army.mil
www.usaplants.vermont.gov
www.rms.vermont.gov
ssl7.revizesites.com
publicportal.courts.vt.gov
mabdapplytest.vt.gov
www.vermont.gov
uipublic.labor.vermont.gov
www.ahsuploadertest.vt.gov
secure.education.state.vt.us
www.skysoldiers.army.mil
www.vermont.gov
www.vermont.gov
vtjfo.bluehousegroup.com
pawlet.vt.gov
www.ahsuploader.vt.gov
www.tradoc.army.mil
bridgewater.vt.gov
www.myvtax.vermont.gov
www.skysoldiers.army.mil
vtlottery.com
www.vermont.gov
townofcambridgevt.org
vtlottery.com
www.staging.myvtax.vermont.gov
vtlottery.com
vtjfo.bluehousegroup.com
www.tradoc.army.mil
rupert.vt.gov
www.myvtax.vermont.gov
www.poultney.vt.gov
ssl7.revizesites.com
ssl7.revizesites.com
vtjfo.bluehousegroup.com
www.poultney.vt.gov
www.poultney.vt.gov
www.poultney.vt.gov
middletownsprings.vt.gov
vtlottery.com
ljfo.vermont.gov
www.myvtax.vermont.gov
anrmaps.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
www.tradoc.army.mil
anrmaps.vermont.gov
ssl7.revizesites.com
verv.vermont.gov
www.skysoldiers.army.mil
secure.education.state.vt.us
pawlet.vt.gov
rupert.vt.gov
anrmaps.vermont.gov
www.skysoldiers.army.mil
*.pawlet.vt.gov
ljfo.vermont.gov
verv.vermont.gov
www.skysoldiers.army.mil
ssl7.revizesites.com
id-dev.vt.gov
secure.education.state.vt.us
cambridge.vermont.gov
www.poultney.vt.gov
vtlottery.com
www.poultney.vt.gov
ljfo.vermont.gov
www.skysoldiers.army.mil
vtjfo.bluehousegroup.com

Certificate

The complete raw certificate details for middletownsprings.vt.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WS4ZX0FlyyTwQB6FURb
zs5I0+K73O+5GuWIxf0S41gJEO+R3MAVfS5S2CTGbJTlr42cPbPNWYYJyKMk3ABI
3boqXgtH7hLIo3wa0pjnY8OGVfYIXbnjxW3AqIsU8xJkAZV8o+hMmtow2zj/shpq
Ui7WwxVFFiLMDHaEr6kRuLVZCcSlox5vaEupNCAwD2mXtMWMRcmFcv7xW8QXRKUL
Z1e9Q5yn2IGn2Fs0nKNeo0fQx7C76VwQCxX3sDcDZMFbwO09bYLrhBJEi9wVtYJd
KGMdhIE7Rhiv7I67upWeO4jYwPGQyFS5E7m2ZkhRv5aPsrJ6RlwQCQNmYaefGocR
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276963699370822463706218434788226073777103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 03:29:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 03:29:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'middletownsprings.vt.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29463192087441751080233526572277498155364759979613821268434138388371359536362941210696663776353621910730901122440074561682370264031711568125187538178671649751951365665616091897032391013125488765245164505110746397792855793865817522547234410811462892192804764660142694309263259568875033660619838933879642037091140315574959252328633473624020920725751490027480002674946395696606833684232122064264456263481649673486756714003123576782616622820092530198451653851398861085251126504096003404179954951142145189217253631599124315951602604166453117036188316109530808862544898833691046605216452167884352066302009548799462466851279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c79c9c4c4e9325f4bd0b72baa1246a15b5138ba2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middletownsprings.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.middletownsprings.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middletownsprings.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middletownsprings.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.middletownsprings.middletownsprings.vt.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001869648ca72000004030046304402207e5c9890af9a61f3eee8dbd9e60ebd199f06936874a921fd17ca57654335413b022079b766d1f48a3a6e8d3eff34966a110c2edaf701572ff479d733cf9739f72e4a007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001869648ca690000040300473045022100f6c79239a1b74fd403bba4474328bbe2f9999952858590469c60dfadc2a21ccf02200f23fc4af44aa49de49a49038f2577379c1a1557b84caa0b9b20c798cef75229
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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