newmillenniumacademy.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:98:88:4f:50:ea:f9:35:97:df:74:ff:d8:7c:60:40:65 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newmillenniumacademy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:98:88:4f:50:ea:f9:35:97:df:74:ff:d8:7c:60:40:65
Serial Number (int): 309859704314507402158447124594729286647909
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:5b:91:d8:87:65:8c:8d:7d:be:23:1c:e9:ec:2c:c9:b9:73:67:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:16:82:08:99:5c:f1:9a:3d:a5:f4:ef:6e:81:ca:24:cf:12:6d:eb
Fingerprint (sha256): 3d:16:30:aa:87:66:b5:bd:7b:07:2c:31:19:70:67:cd:c3:b0:3f:e1:8c:e8:dd:e6:57:40:22:73:af:1f:ad:4e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate newmillenniumacademy.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newmillenniumacademy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newmillenniumacademy.org
www.newmillenniumacademy.org

Other certificates including the domain name newmillenniumacademy.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for newmillenniumacademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISA46YiE9Q6vk1l990/9h8YEBlMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MjcwNzU0NTFaFw0yMzExMjUwNzU0NTBaMCMxITAfBgNVBAMT
GG5ld21pbGxlbm5pdW1hY2FkZW15Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMF75izOEGy2+viaJwtQqKS6GK7TDWnbd/abAbtCusF50xEKvq21
JOngvoE7AopFR4piCXaDGlN2SLLvrUSVPN6LSGbXlb+NI2haDsnUkPMf1YjspTsS
Hl1BOD+JwEypvcE5m/dWHdoMsrn26vEcbdsVoFV0x6+5jA4kgWrxrnsIZItLk6BL
2HBTlqZ9LA2PEoEax55DsHSkdb0tD1LHmxCIkhQAItIGv3QjnzwxDoDBpeSycm4A
UmnRZ1a8KbbjJ0Y/tULHyxQJFA7d/Dtse7i5V9QpvJNsfmzlBbHoSWnx/Rm3LvBa
vUYK9zFOtj8KyB5Qy5uFbPTX7a6E1QAGn7ECAwEAAaOCAjkwggI1MA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUg1uR2IdljI19viMc6ewsyblzZ0gwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wQQYDVR0RBDowOIIYbmV3bWlsbGVubml1bWFjYWRlbXkub3Jn
ghx3d3cubmV3bWlsbGVubml1bWFjYWRlbXkub3JnMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAGKNjP9ewAABAMASDBGAiEA/H6iWQ5VjdGPV5BQTnvX
YYUKvnaVuJmgqqIgEOPkuewCIQDJbcmLCd2z4ksJG5IkAAc2t7YwDZsxHbgl79ok
k/M78QB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABijYz/a4A
AAQDAEcwRQIhAP9YYb8sjhfasVhzIczbKjkBucwPeW8dYcN5j1DnWsSxAiA3eCts
6ODn/rdmuFVVv+C6gtzbf6zOs5EMIAcaD48rwTANBgkqhkiG9w0BAQsFAAOCAQEA
lmbk5zI+KRKAKHO+i4snxk0ZqbSHQTxHS9ByDM5lTmmCgFvja6AXzMTbnrOTQApC
fj942xBPWzDePJgjmpnAy7+c8cSbC5pyAIG0BkP9Vhd7V0lpBoLh6iLJLQPRjFzS
PsVpH8/4iWXvJFs5AR7tBw5PjUdUJd1TN2VheJV/RMhEy1Vk+Np75GRR5FXutYhh
4g6Klw7W1qb6FejLvBR66IvOIMtLAs43DeyI64RiDhLMzHU4rJ6wz4TJYRJaxnLV
5i90+xnedbtEzo/34klyvc4cXzX+welRUOm8EUMgR4W5v3Z2s+ACakOwwAEDGgnN
Glyp5MUeot1q0PftVEcDuQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXvmLM4QbLb6+JonC1Co
pLoYrtMNadt39psBu0K6wXnTEQq+rbUk6eC+gTsCikVHimIJdoMaU3ZIsu+tRJU8
3otIZteVv40jaFoOydSQ8x/ViOylOxIeXUE4P4nATKm9wTmb91Yd2gyyufbq8Rxt
2xWgVXTHr7mMDiSBavGuewhki0uToEvYcFOWpn0sDY8SgRrHnkOwdKR1vS0PUseb
EIiSFAAi0ga/dCOfPDEOgMGl5LJybgBSadFnVrwptuMnRj+1QsfLFAkUDt38O2x7
uLlX1Cm8k2x+bOUFsehJafH9Gbcu8Fq9Rgr3MU62PwrIHlDLm4Vs9NftroTVAAaf
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309859704314507402158447124594729286647909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-27 07:54:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 07:54:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newmillenniumacademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24425089792211702623673494816471181219858521263835552498068054606776958406053779140483656093505792136980533695992869946761037924967735114057143893103808644418820951761436071459618299708964845242564764701088894481600754406285152910385137472841285128433842182117795891435536551408231656218500073026384377236787021272410367718292193079598817886074000884419814060874909978740184001636125536832569148212601796136555015870617550638269483409132906917009330871020941373035667868069329103151108016863930564994094375451420610662024351492862405449869578474477136665341131226065314369934032354875815250612727593867745725654671281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							835b91d887658c8d7dbe231ce9ec2cc9b9736748
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmillenniumacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmillenniumacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a3633fd7b0000040300483046022100fc7ea2590e558dd18f5790504e7bd761850abe7695b899a0aaa22010e3e4b9ec022100c96dc98b09ddb3e24b091b9224000736b7b6300d9b311db825efda2493f33bf1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a3633fdae0000040300473045022100ff5861bf2c8e17dab1587321ccdb2a3901b9cc0f796f1d61c3798f50e75ac4b1022037782b6ce8e0e7feb766b85555bfe0ba82dcdb7facceb3910c20071a0f8f2bc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009666e4e7323e2912802873be8b8b27c64d19a9b487413c474bd0720cce654e6982805be36ba017ccc4db9eb393400a427e3f78db104f5b30de3c98239a99c0cbbf9cf1c49b0b9a720081b40643fd56177b5749690682e1ea22c92d03d18c5cd23ec5691fcff88965ef245b39011eed070e4f8d475425dd5337656178957f44c844cb5564f8da7be46451e455eeb58861e20e8a970ed6d6a6fa15e8cbbc147ae88bce20cb4b02ce370dec88eb84620e12cccc7538ac9eb0cf84c961125ac672d5e62f74fb19de75bb44ce8ff7e24972bdce1c5f35fec1e95150e9bc1143204785b9bf7676b3e0026a43b0c001031a09cd1a5ca9e4c51ea2dd6ad0f7ed544703b9