johnson.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:79:6b:64:21:c7:42:3c:68:42:cc:bb:7b:75:80:f3:c4:a4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=johnson.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:6b:64:21:c7:42:3c:68:42:cc:bb:7b:75:80:f3:c4:a4
Serial Number (int): 302653771503055553799503051083642635011236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:28:9a:d0:62:fa:1b:a3:93:d6:db:b1:6f:a1:10:1f:96:9b:d3:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:a1:66:ab:47:21:44:5c:4c:91:d5:23:5c:23:08:02:d2:54:c8:74
Fingerprint (sha256): 41:a0:c2:c7:d8:27:7c:64:84:f6:af:f9:81:01:5d:7a:eb:cf:e6:cc:5a:93:cb:30:e3:e9:ec:0c:db:03:8a:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate johnson.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnson.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnson.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for johnson.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302653771503055553799503051083642635011236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 01:36:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 01:36:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnson.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637750916853626803205895321153892711784635676798349382492788041369336145896034795346026951708381234706004258610047181099848437956669876395302877924096113784367038640254097804023930400172475409570860556146947598747600813164243924181481917382320839157435482645695627055308433899274899519171778610161634346858772984244287372215324970656822351220703154144351896198752854312751668640420574769333587494447359296940955155278813180234101632072435200572937313447175705444532337612779408512852383182109700113014118572066454545501931559484787527525273118177594113380301595534454005635038326675683487497733322671180397769027066918561818066129326848113726384249634461399278076219395983803163382383968788301504128753693426675515462628177060971347981034489106375154121717902143452693518481654930736762655803520244526162931708703051280396487612455495349562599616382262865690879699994908418850561684476583789997923163212748267328848557057555177847769440382274554110955708554411993467306270740731694627963644224272641648470212542559375747507228986722716295139416401699664296225781967231055560216123410243344450723763764427990607251093212862153911762605885813964547653903819660413500073496758076653414824537157739530912482948831912188281628957234883327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2289ad062fa1ba393d6dbb16fa1101f969bd3af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnson.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189335bb72500000403004630440220797bafebb4ac803b28bf22e97ce0cf0bfdbcb89b9541db8c5a910d228b4cbc9802200aab8585bc925c7c84c0152c970fa5dd9897923a66e95c8b2942386303ecb5a60077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189335bb734000004030048304602210080571124ea2eceda12e33fb3c06c983640f6703496d8011e2a19f96052d7774f022100c6e116c0a08e934a3b4137b3f5052f42ef6019fd9e551b224d81997ffc1e5109
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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