monticello-high.sjsd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:4d:79:f0:85:e7:6e:3b:eb:aa:24:c6:f1:f5:65:39:c5:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=monticello-high.sjsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4d:79:f0:85:e7:6e:3b:eb:aa:24:c6:f1:f5:65:39:c5:7c
Serial Number (int): 374812971434585570069493304383928113153404
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:96:88:f2:c7:96:e0:ab:a3:30:8c:6e:85:34:30:51:af:bc:52:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:7d:b3:db:e5:9f:c8:e1:a2:9e:01:e4:fe:67:8b:f2:c1:7d:97:46
Fingerprint (sha256): 42:9b:ae:95:82:2e:d5:41:de:a2:13:1f:f2:c0:78:61:41:99:f6:95:2b:b9:fb:5a:e4:57:19:8b:b3:f7:e5:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate monticello-high.sjsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monticello-high.sjsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monticello-high.sjsd.org

Other certificates including the domain name sjsd.org

(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org

Certificate

The complete raw certificate details for monticello-high.sjsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374812971434585570069493304383928113153404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 05:16:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 05:16:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monticello-high.sjsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741710458484619992275604445208793860606329311469338246402383686654370796016503887517429327026550527608115162735283315235297591732682861888891365559755643045561110250876735206791409748521417175765099301425609850157096759128221779368137346716815063061058908957231254250843240791376800457912529450463283590791226651186290457128715834054529333345134539878813406212294553928163692342673669906287391355305307898606776186485973760812384320352714426684091139108812302152958782484114485055482309583658627551817047391075586394796929791292729068390303459603400360253232130899833214193716620022104629514964292458151295646851117287912450488357001848749941761706026806636429095562502787164332942144911498892102342464607389800297994140790523003467967518720106743028283655343322748778246063463813855833103680009112778973768692607183593552425980029857460922798578424290329521826568817111722533272663173409232729002768122107060778837281738081660182838949691600401292398868125562766602476060776611888182497518431953623612220516026878441927219352779031753314380323268606313364659211458657644630078603569620369663010007166964185041829140041712451040423849961171330236040763342451494552612565476192077351071510407087770636603504471783005532200698136347029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							859688f2c796e0aba3308c6e85343051afbc5296
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monticello-high.sjsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcc78fd220000040300463044022034688385d7b7f6285dbe1f6c54c48f24a6e3a40033ed2a141ed360d5dc713e4502200289ef0c18cfaf527b3b7b16944fccbccf1d56bf9369ad914bad51884f4230e6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcc78fd1e0000040300473045022100def28208ecd7221e733c129da3124f30bf6a69391d7967ab91809193389d519702207024fcf84489a929a5f95e392560838249080621483cfbd452f9737005028244
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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