mnspecialeducation.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:87:84:f7:50:8c:9c:2c:d9:f4:52:8e:fb:e5:42:46:0a:76 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mnspecialeducation.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:87:84:f7:50:8c:9c:2c:d9:f4:52:8e:fb:e5:42:46:0a:76Serial Number (int): 394564005487868391079358034937068711709302
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 89:09:44:7d:d5:81:74:1d:a2:8a:ea:79:27:6d:3f:85:d7:0f:32:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 62:35:36:dd:89:83:bf:c2:fb:8c:99:0a:74:e9:e5:7b:90:07:a9:15
Fingerprint (sha256): 40:a1:b0:cb:a3:8f:ad:6b:a3:54:31:39:54:65:54:68:ad:4f:27:14:65:b9:65:1e:01:ca:c6:f3:cf:62:77:cc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate mnspecialeducation.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mnspecialeducation.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.mnspecialeducation.com
mnspecialeducation.com
www.mnspecialeducation.com
mnspecialeducation.com
www.mnspecialeducation.com
Other certificates including the domain name mnspecialeducation.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for mnspecialeducation.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISBIeE91CMnCzZ9FKO++VCRgp2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTgwNjI2MzZaFw0y MDA0MTcwNjI2MzZaMCExHzAdBgNVBAMTFm1uc3BlY2lhbGVkdWNhdGlvbi5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcbPonTqKm4TV3oYTXJQI7 auejDlU/Fe2sAQSrhavx3YPDhdOqE4ryGrX3E8BQ1Dyf0R4FsOmX67xdSmcL/g5E zYRBvBv3ALzG5zCqlm2hWcWdNnjlWpJAe1ACfUlYSr4sigLk16MWsUJ2s6l4BaFW uQhvVvwUDzgOZ/JGqRWwvw0EF1cCWnfSictFXTXaSGjG0faAHOrhnxDopW06IDje W9b6wl2W4e5i0mv5TuH/Q+tTzsxtRO3dqql64VWsqV9B0lSxKi3RtXIaMNOEUnpQ 9bbdDO3TXE/XGXr5FVBRnrf3PLP5Vf7r5ZqRHW13j6t8mAHIR/2KZSlwd2FUyUfl AgMBAAGjggKkMIICoDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIkJRH3VgXQdoorq eSdtP4XXDzLoMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wWgYDVR0RBFMwUYIbbWFpbC5tbnNwZWNpYWxlZHVjYXRpb24u Y29tghZtbnNwZWNpYWxlZHVjYXRpb24uY29tghp3d3cubW5zcGVjaWFsZWR1Y2F0 aW9uLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB2APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJz AAABb7eL5gQAAAQDAEcwRQIhAIT9SdVzKZjS9jpIjt6eAPMqH4a5BaqhPH2YX0oU ZrEOAiA0kbD1/GXJ334DJGcgaQ3YZ6pyKHfYb+uSUTN1ret5lwB2AAe3XBvlfWj/ 8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABb7eL5i8AAAQDAEcwRQIgRKKZqXu6 4XwKl1d/7nsl3FHZ/DEArk9Sr1Pznkc6+V4CIQDMdv1Kf2dCuJHJto/oNPyQxR8h 63mRej95fhycUMMEnDANBgkqhkiG9w0BAQsFAAOCAQEAZUtnqQ6fve3jEd867UP9 kQz33v0gg7MnIIidizEXKzK3vtJtGr9T428e/jCmEXGUsSHiZ9rM60J/RCo6onX8 TN24UYun0dpYntx9Iq8zp/q8PKPT7BIid8pG0e8DeXxzqzCF7i7ezCYE9rBg3jMO UaOKlu/UrHfqOLY85CS3PrjXY9RNfdtB5Vz3VeWOurPzX1CxWrMuTMpso5MEpzKU iJU0MyjHODZ7guKhT3kM3j7l0CacWMNxfknkOSdz2ovgfvOtPi/MH5lvgH+ioKen iwLTixfcXe/TbokyyxqG71GmLzFxrCLZJNfEwcBwwEDtx8i7NNsOeiPl+YLhz5sk kg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGz6J06ipuE1d6GE1yUC O2rnow5VPxXtrAEEq4Wr8d2Dw4XTqhOK8hq19xPAUNQ8n9EeBbDpl+u8XUpnC/4O RM2EQbwb9wC8xucwqpZtoVnFnTZ45VqSQHtQAn1JWEq+LIoC5NejFrFCdrOpeAWh VrkIb1b8FA84DmfyRqkVsL8NBBdXAlp30onLRV012khoxtH2gBzq4Z8Q6KVtOiA4 3lvW+sJdluHuYtJr+U7h/0PrU87MbUTt3aqpeuFVrKlfQdJUsSot0bVyGjDThFJ6 UPW23Qzt01xP1xl6+RVQUZ639zyz+VX+6+WakR1td4+rfJgByEf9imUpcHdhVMlH 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 394564005487868391079358034937068711709302 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 06:26:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-17 06:26:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mnspecialeducation.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19746914216291917804484376902117396359903935066518706986459723900229731633511911298151261047874816242531980293918395066638479082189294722011519922985911992471899009186011956016238609055833318587115179880532012247158792294219518792519440119206317154536638305142340184993998718647632637960537550351720842442153319372118603329317785426988900359375423952498768805656728258594825661270924770245381686438440445510153404563939734958482673842164655034508030187597017316237133945562010210981683172524618443405379376659634676854816994926636744772885983404476345901297844659040021108401076776558394065243302019405815199264491493 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8909447dd581741da28aea79276d3f85d70f32e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mnspecialeducation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnspecialeducation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnspecialeducation.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb78be604000004030047304502210084fd49d5732998d2f63a488ede9e00f32a1f86b905aaa13c7d985f4a1466b10e02203491b0f5fc65c9df7e03246720690dd867aa722877d86feb92513375adeb799700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb78be62f0000040300473045022044a299a97bbae17c0a97577fee7b25dc51d9fc3100ae4f52af53f39e473af95e022100cc76fd4a7f6742b891c9b68fe834fc90c51f21eb79917a3f797e1c9c50c3049c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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