scorecard.ohea.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:5a:14:29:f6:c4:1a:8d:71:22:9d:4d:c9:f4:44:82:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scorecard.ohea.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:5a:14:29:f6:c4:1a:8d:71:22:9d:4d:c9:f4:44:82:05
Serial Number (int): 314200359884713627791973134348799158026757
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:a8:a2:4b:83:63:ff:e9:b7:c6:ba:c8:2c:f4:93:28:17:26:45:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:f4:4c:3f:1f:e0:c0:d8:ed:46:07:0c:39:37:d6:8a:f0:5f:fb:51
Fingerprint (sha256): 47:d0:2c:8b:cb:96:7b:13:fd:ff:dc:5a:72:96:a9:69:fc:11:8b:61:93:a9:4a:6e:95:c1:94:b4:6a:07:d1:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate scorecard.ohea.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scorecard.ohea.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scorecard.ohea.org

Other certificates including the domain name ohea.org

(limited to 100 certificates)
mex.ohea.org
Transfer.ohea.org
checkin.ohea.org
www.ohea.org
freecollege.ohea.org
freecollege.ohea.org
freecollege.ohea.org
www.ohea.org
conversations.ohea.org
delegates.ohea.org
checkin.ohea.org
oh-hq-xcaht.ohea.org
intranet.ohea.org
mail.ohea.org
oh-hq-cahtx.ohea.org
gateway.ohea.org
csdblog.ohea.org
freecollege.ohea.org
checkin.ohea.org
www.ohea.org
transfer.ohea.org
scorecard.ohea.org
freecollege.ohea.org
transfer.ohea.org
www.ohea.org
www.ohea.org
SecretServer.ohea.org
mex.ohea.org
freecollege.ohea.org
www.ohea.org
email.ohea.org
transfer.ohea.org
teachertoolkit.ohea.org
freecollege.ohea.org
gateway.ohea.org
www.ohea.org
freecollege.ohea.org
freecollege.ohea.org
www.ohea.org
www.ohea.org
transfer.ohea.org
intranet.ohea.org
delegates.ohea.org
checkin.ohea.org
freecollege.ohea.org
freecollege.ohea.org
checkin.ohea.org
mex.ohea.org
transfer.ohea.org
www.ohea.org
oh-hq-xcaht.ohea.org
Transfer.ohea.org
gateway.ohea.org
vpn.ohea.org
OH-HQ-ACP.ohea.org
freecollege.ohea.org
freecollege.ohea.org
conversations.ohea.org
freecollege.ohea.org
freecollege.ohea.org
freecollege.ohea.org
oh-hq-awlc.ohea.org
checkintest.ohea.org
forms.ohea.org
checkin.ohea.org
csdblog.ohea.org

Certificate

The complete raw certificate details for scorecard.ohea.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISA5taFCn2xBqNcSKdTcn0RIIFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjAxNDMwMjNaFw0y
MDA1MjAxNDMwMjNaMB0xGzAZBgNVBAMTEnNjb3JlY2FyZC5vaGVhLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANdIiuziU/hbA7i6Nm3E45l+8d+E
DFsGrPsuCofT1pUoMUcEu6wxz5bJIQpadV3cOPlJMWNOtjxFkvQnCwWPbg8ZyVd+
BMOOmd7qsIHhox2CYp4WaBIJ1CdcKHnGplz5m+ufEt7JSHnndXRyYoYVsg7ol3Im
2PutsOEyXtq0gSytaj3vdVrAJIMMkJ8NaXuH0JoOqvQ+D8kIpCfJmqmDyELfi4Gm
GJTh+z08ri0exoFUEaPvd0iAFxcuDaKR8xCGNyXY8+iAYJ7rKyF0xpjSVMBJarfP
+MOUYdJjKrgr9j7S/Cdso1xZ6N1rIyz8i36wPcaJe6rm9cwqpTvUP9mXbvkCAwEA
AaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIaiiS4Nj/+m3xrrILPST
KBcmRc8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzAdBgNVHREEFjAUghJzY29yZWNhcmQub2hlYS5vcmcwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBe
p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXBjOKtdAAAEAwBHMEUC
IGhzo4Xx+orumbFIVXdT3ImEQKKKs8n/t857DATo/xNAAiEApwSnNii/6loEYFRt
IGxz1jzN7DPVMAAQ/9iEosK5EpMAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOey
SVMt74uQXgAAAXBjOKtKAAAEAwBIMEYCIQD8qkALZCWEnaBTHz8hpOwkmV7mWCh6
3h0SHWQSGGwHrgIhAJBZtD3Rb7he6vc/V5b0f49HVaPlxX394QEDmhA3aVcCMA0G
CSqGSIb3DQEBCwUAA4IBAQAfbm4Zx3ahA75dB3RSUUv69ARLqQSoKPiNTFkV3G1L
3E4PMSGI6CfMulWKt/5R8HtwWoiOtHvMDyaenRsMrB1H8THnImkdwTPSGgdc1KX0
ezhwjQky2hgn0GDKsZ0UNj5Cwwjlet5Xc2a2bZxXHIzmhM8tJKOA7q4CasIxFr5p
uK7m5BfCcuGBNK8OkfgopgFe0pgRAjfi1YX1tuh2M4Sg9sW5LZUdc6qm5Fp5bRZT
WOOXHzWwQ8VApGuqoB+h0nHNGpHBOJpjveYUQrzGYLOyOaQAI41JWrDN6JBW0mkC
CFNZDSoR9Fma5mYBhAtaTfiF+p4oY1Xp/+sizTeG4Hr2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10iK7OJT+FsDuLo2bcTj
mX7x34QMWwas+y4Kh9PWlSgxRwS7rDHPlskhClp1Xdw4+UkxY062PEWS9CcLBY9u
DxnJV34Ew46Z3uqwgeGjHYJinhZoEgnUJ1woecamXPmb658S3slIeed1dHJihhWy
DuiXcibY+62w4TJe2rSBLK1qPe91WsAkgwyQnw1pe4fQmg6q9D4PyQikJ8maqYPI
Qt+LgaYYlOH7PTyuLR7GgVQRo+93SIAXFy4NopHzEIY3Jdjz6IBgnusrIXTGmNJU
wElqt8/4w5Rh0mMquCv2PtL8J2yjXFno3WsjLPyLfrA9xol7qub1zCqlO9Q/2Zdu
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314200359884713627791973134348799158026757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 14:30:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 14:30:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scorecard.ohea.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27177007695008511868424153933265530116109405517830677202813397077435757868917145825203847419456876365730292586123565531432674208051760115958410270361678972272870187465116527570553681937289096538973995356086742607278184648843156186563046544125689425808536500750965003216831617243912024450805117117382685124142116144413543876052317654004110063246184754347224062562943077380890456483518058296115230118594400664059330820644447265151014924182584536093200146230201211891406421460843709673150576408161082210517838491786425462851290819801169355531757720532813031964203237534325778428891589847968495312020312621658710237212409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21a8a24b8363ffe9b7c6bac82cf49328172645cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecard.ohea.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706338ab5d000004030047304502206873a385f1fa8aee99b148557753dc898440a28ab3c9ffb7ce7b0c04e8ff1340022100a704a73628bfea5a0460546d206c73d63ccdec33d5300010ffd884a2c2b91293007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706338ab4a0000040300483046022100fcaa400b6425849da0531f3f21a4ec24995ee658287ade1d121d6412186c07ae0221009059b43dd16fb85eeaf73f5796f47f8f4755a3e5c57dfde101039a1037695702
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f6e6e19c776a103be5d077452514bfaf4044ba904a828f88d4c5915dc6d4bdc4e0f312188e827ccba558ab7fe51f07b705a888eb47bcc0f269e9d1b0cac1d47f131e722691dc133d21a075cd4a5f47b38708d0932da1827d060cab19d14363e42c308e57ade577366b66d9c571c8ce684cf2d24a380eeae026ac23116be69b8aee6e417c272e18134af0e91f828a6015ed298110237e2d585f5b6e8763384a0f6c5b92d951d73aaa6e45a796d165358e3971f35b043c540a46baaa01fa1d271cd1a91c1389a63bde61442bcc660b3b239a400238d495ab0cde89056d269020853590d2a11f4599ae66601840b5a4df885fa9e286355e9ffeb22cd3786e07af6