henderson.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:50:56:05:ff:35:58:e0:10:77:a1:d8:cb:dc:09:60:f3:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=henderson.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:56:05:ff:35:58:e0:10:77:a1:d8:cb:dc:09:60:f3:2d
Serial Number (int): 375786077826078906205217965272394429952813
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: de:ce:32:f2:f6:30:5d:3b:21:8a:91:b8:6f:a8:82:3c:b8:4d:5c:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:65:52:52:84:a3:6a:81:65:0b:be:05:34:41:80:12:3b:fe:09:e0
Fingerprint (sha256): 3f:71:19:ed:f0:62:99:b7:96:d0:f5:55:f7:5e:07:f8:96:34:37:65:c5:cc:a0:f6:44:54:9a:db:72:46:3a:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate henderson.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for henderson.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

henderson.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for henderson.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375786077826078906205217965272394429952813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 01:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 01:16:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'henderson.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686156329765019448002795056002931387187572398678712585791382387065473792160686740656110637324386286755602415050925010208090978589191624719888027143754859214260434573272548797764475571329376689534191696244395406841733235625750847587791500476963797175229680818813111175826933614158406706204986838075211978799006190793929203973692405103175190456156553054316272548698779648796269170822203582482613686970128538947918541810820028252933384651830599845203229529122594900534133457433852891884072895282767421781862879619521282046363599979538618404973403249443120174235513200775174750422084116578996533643859703129515340943317982373863644025726176158023137572857985149306080835840166742462311134425709298056526525596311746946049733271143699585377715938387977015254927474185863923659028811170387146392925543091148794884201759020773382608852259952717374495991205365268312244502887927468133637390663747843215658827362698490520851890708613956356999918154358330926276959397439402565158238763639643785143214042324712970416990700990491957382296504039344100521241980553618082243809691506853818205779627008072835211446618494835170006308415636072151075878091334993892257648041415903825535730893670363409624130993803634338532094579805676166144993525584509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dece32f2f6305d3b218a91b86fa8823cb84d5cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henderson.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c37c348e9000004030047304502201dfc1331d8c2f5db2c96bcc8c2b1aee3afd4ea73165dfbda9c5785cfb1ca5a86022100c1ddf62c58631a38c47c08a2bf032c957cea5abb201bcc0020bf85682ba141b2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c37c348f30000040300473045022100dac551165db0738a75a3ec32c3bb16f813c647b5bd39b7c1cc55cd10f129e53b02201b50066f453cedfe903a2e95bde343701ee6ea581b63a0d575ca8891dbaaa8e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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