richardallenschools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:b3:13:79:e2:31:a5:c7:df:01:2f:60:81:63:6d:ea:cf was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=richardallenschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:b3:13:79:e2:31:a5:c7:df:01:2f:60:81:63:6d:ea:cf
Serial Number (int): 325547975713395475126142831576453932247759
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:e0:4b:2f:9c:22:41:8b:30:09:45:1d:c3:81:ac:1e:ba:e8:8d:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:ca:05:52:af:0c:04:3b:5f:0c:ab:37:ba:69:1b:6c:5f:df:41:2d
Fingerprint (sha256): 3f:94:92:06:20:0d:4b:90:28:0a:03:64:5b:bb:b6:b0:53:27:36:1e:d6:9c:45:78:8f:aa:8f:4e:1a:e5:d0:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate richardallenschools.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for richardallenschools.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

richardallenschools.com
www.richardallenschools.com

Other certificates including the domain name richardallenschools.com

(limited to 100 certificates)
admin.raak6.richardallenschools.com
admin.dover.k12.nh.us
gutierrez.hcisd.org
admin.rap48.richardallenschools.com
ges.dover.k12.nh.us
webadmin.br.elanco.org
gfes.comalisd.org
admin.rowlettacademies.org
jacksoncoschools.com
admin.lincoln.mtpcsd.org
cres.coltsneckschools.org
admin.bowie.hcisd.org
www.msd120.org
fremont.bcsd.com
admin.nichols.bcsd.com
dms.dover.k12.nh.us
admin.cv.k12.ca.us
cses.comalisd.org
bhs.ballingerisd.net
www.alarqamislamicschool.org
admin.harlanfalcons.org
richardallenschools.com
tpes.comalisd.org
svms.comalisd.org
admin.cano.hcisd.org
admin.crma5.org
admin.jchs.jacksoncoschools.com
iies.icefps.org
admin.milam.hcisd.org
admin.cve.cv.k12.ca.us
richardallenschools.com
admin.creekside.cv.k12.ca.us
admin.todd.kyschools.us
canyon.cv.k12.ca.us
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
www.armenianpreschool.org
raak6.richardallenschools.com
admin.holyfam.org
admin.hills.bcsd.com
tbjelc.henderson.kyschools.us
crockett.hcisd.org
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
sle.slvusd.org
phcsd.org
www.anacondaschools.org
www.msdathletics.com
ballingerisd.net
www.crsd.k12.pa.us
chs.comalisd.org
collegeachievecentralcharterschool.org
admin.wps.dover.k12.nh.us
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
admin.redwood.cv.k12.ca.us
www.bce.slvusd.org
richardallenschools.com
admin.gutierrez.hcisd.org
admin.fairfield1.org
admin.olneycharter.org
admin.saintpiusx.com
cecvac.com
admin.vanallen.mtpcsd.org
admin.lunadabay.pvpusd.net
cses.comalisd.org
admin.cve.cv.k12.ca.us
admin.proctor.cv.k12.ca.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
glendora.k12.ca.us
academy.comalisd.org
cdc.comalisd.org
svhs.comalisd.org
advantageacademyenroll.com
webadmin.elanco.org
admin.austin.hcisd.org
newgulf.bolingisd.net
richardallenschools.com
admin.newpathways.hcisd.org
ghctk12.com
admin.thorner.bcsd.com
rapk3.richardallenschools.com
nc.athenscityschools.net
www.swprep.org
lincoln.anacondaschools.org
admin.bhs.ballingerisd.net
richardallenschools.com
harding.bcsd.com
admin.jhs.ballingerisd.net
ajshs.anacondaschools.org
admin.olacapuchins.org
admin.chabot.cv.k12.ca.us
admin.echs.hcisd.org
webadmin.gsms.elanco.org
www.magnoliaheights.com
admin.anacondaschools.org
mvms.comalisd.org
proctor.cv.k12.ca.us

Certificate

The complete raw certificate details for richardallenschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p1IeCOMGON2Uk8w/qMN
leqPwuG05v8wOMKdHfnOQy37VFzb+S3I9MH8TjDUPn8Cj9LxS2iOAO3lQ5VLP3oP
aNBVpRAWN6MpHpkNzMuIkCwl7XJ6K4S2Fo/kvMlptMGJz42CYe2iFeg9TZyaZeJJ
4g/0d3KLfvoikWQ0O/lgOl1yDzdBj+PrwYjRFnfVFmzvaD54NlHwTahJ0gpGdzZY
jL7/nrtL8+md6xFl59YnFennq6Rt0pCt0qHHx2/kcL0OtwMRvjbcV8ls6Hdg3wr5
75YWzMQD/6dYPlM79eeQCzCex/nkqnEI60tb70QyuoXZIHS3Zhf6Btr0d8xeOtlv
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325547975713395475126142831576453932247759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 18:23:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 18:23:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'richardallenschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26587603221855335450347251177796081657370607523101472747643380022096016362487979182271303894001341656191728700572708209098177094107947037486317419962175119612248872074451456267811392178175472067129418206858918122815697740677479404214534502690808368213283392107979963200659155466513079949649438469848570613755830198723405415706600750864819922460023048622190327556068017453633060313000820612358460440378683105182795590403898768227026516932656715210887449248458238065657648792050195668042340061534515405888830616116750392511907772457660678623263037533353109296967796214784781266529249114689968696224849455547562015158101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ee04b2f9c22418b3009451dc381ac1ebae88dd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richardallenschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richardallenschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b7b7e9daf0000040300473045022029f567d30d97a94a869788b5a5f66f42f984f7753921ace8f14791f11e92839b022100828ef79369b58b0d6819030a29dc08542d1d0108520c6e671fa268060c7d1af9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b7b7e9dd8000004030047304502201df924539379738af48485d0da62460d9e15db83835e258535af7bfd6f67dc05022100f978aa9d36392c5c73454d3d6cb0b8bf1522c9f18202959581fffb2234305370
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c65ae6224d2a552f1656fe95200b680d7d9bb6fe5ec8192da14edf85a93746cd76021f0a37b010502f37ca101f1015f30bfaa2b89e375a8c6585ee4561c9319860f91e5ec57c762ab6b8c202a7172d5cfade037c5b123a548ec16daf6859fb77bbbe9ddaaa6163a104ce3e1217936bcdeb35bbe8d81137a4d78c3c454cf5a385359e2a72a18b1c24651049e01d7ce304e20970a448fb3639b0b0ee32d23e9f8f3636b284aca7f78cec9f63237afcebfbae3efb8846a4c4d8fc857780f2ded1e78f0b2d47b74bc6eaaff3b4c1f3548756e267a3592232a93401f6bf58414019307dd275fb0f2b5db72487e5bb8e9210abaf9ae5a9de5784d57eb8dce143852d8