bailey.tiftschools.com

Issued by R3

About this certificate

This digital certificate with serial number 03:35:c0:06:e8:27:5a:9d:01:94:34:e9:b4:34:b0:9c:cd:d1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bailey.tiftschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:c0:06:e8:27:5a:9d:01:94:34:e9:b4:34:b0:9c:cd:d1
Serial Number (int): 279627070879699303404931600297386273721809
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:fe:39:47:a3:44:aa:00:08:a4:22:88:b6:53:b4:1e:9c:2e:95:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:ab:93:02:78:a4:82:ea:f3:97:42:a9:af:e0:8e:19:c0:4a:8b:c4
Fingerprint (sha256): 49:df:33:40:75:aa:db:4d:d7:2d:8e:96:3b:e7:e6:11:3d:ea:6a:1e:00:da:90:b6:4e:07:8a:11:75:1d:fc:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bailey.tiftschools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bailey.tiftschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bailey.tiftschools.com

Other certificates including the domain name tiftschools.com

(limited to 100 certificates)
admin.almadinah-school.com
abramfriedmanoc.org
abramfriedmanoc.org
admin.newbernmiddle.gocats.org
jes.pullmanschools.org
ahs.oc-sd.com
campus.tiftschools.com
abramfriedmanoc.org
tiftschools.com
bell.robla.k12.ca.us
reddick.tiftschools.com
admin.athlosbrownsville.org
admin.almadinah-school.com
tiftschools.com
admin.athlosbrownsville.org
athlosaustin.org
hms.frenship.us
tiftschools.com
admin.almadinah-school.com
anniebelle.tiftschools.com
lorenaisd.net
lms.pullmanschools.org
admin.rembrandt-elementary.vanguardacademy.education
www.pcsd4.org
www.saltlake.k12.hi.us
anniebelle.tiftschools.com
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.almadinah-school.com
lorena.exteraschools.org
abramfriedmanoc.org
bailey.tiftschools.com
abramfriedmanoc.org
campus.tiftschools.com
tiftschools.com
admin.hlc.gocats.org
tiftschools.com
sixthstreet.tiftschools.com
campus.tiftschools.com
www.mountalverniaacademy.org
tiftschools.com
www.tiftschools.com
*.tiftschools.com
tchs.tiftschools.com
reddick.tiftschools.com
admin.almadinah-school.com
admin.hickam.k12.hi.us
northeast.tiftschools.com
delbosquemexico.com
abramfriedmanoc.org
jtwilliamssecondarymontessori.wearecms.com
charlesspencer.tiftschools.com
pluto.tiftschools.com
holyfamilyhs.com
admin.almadinah-school.com
www.gordonbernell.org
mattwilson.tiftschools.com
leusd.k12.ca.us
bailey.tiftschools.com
admin.almadinah-school.com
admin.highlandrenaissanceacademy.wearecms.com
tiftschools.com
anniebelle.tiftschools.com
anniebelle.tiftschools.com
admin.almadinah-school.com
lastinger.tiftschools.com
id-rapidportal.tiftschools.com
admin.almadinah-school.com
northside.tiftschools.com
kes.pullmanschools.org
www.lemondenorman.org
admin.almadinah-school.com
admin.almadinah-school.com
admin.butlerhighschool.wearecms.com
admin.newbernmiddle.gocats.org
sixthstreet.tiftschools.com
lennox.k12.ca.us
kalihi.k12.hi.us
admin.almadinah-school.com
admin.pes.davidson.k12.nc.us
abramfriedmanoc.org
campus.tiftschools.com
eighthstreet.tiftschools.com
admin.gordonbernell.org
www.beethoven-secondary.vanguardacademy.education
admin.almadinah-school.com
omega.tiftschools.com
charlesspencer.tiftschools.com
abramfriedmanoc.org
admin.sssq.org
admin.almadinah-school.com
garfieldelementary.org
tiftschools.com
id-rapidportal.tiftschools.com
admin.cecdc914.org
www.materdeiperformingarts.org
admin.almadinah-school.com
admin.almadinah-school.com
castellanos.caminonuevo.org
abramfriedmanoc.org

Certificate

The complete raw certificate details for bailey.tiftschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApodVO2fhHH0zE5HPU55S
A5n9xECcrPt/NB5sWnzWj4CpncVsoETynuQwGRcfoTCc3q2mbXf1ezOUD4rr/WJP
OLCFnllTswAkYI2EAbwBkMULtdQg0JAr2iYLXOCVK5Clf+u7TjOhoJHsGCsE104A
HxX/M+lysrQGprAsnMf4AxdZbVNhtYTsNw14itv+PAH2OrZoVu1sbXW2vsQ4Shqd
tx3KAAOkR+oxey9QhVNxe+NAyfAdp8u0Sxn3TUK6cSTlYwFrwYipJY5xYVUih6Um
a+J8q6mIEICSDlSf27IYortkTnBkPPZoQ8EiWLT+fGCiOhx0Ors/Tvv0FNSDRzNp
S7aKkv3ne/CanLSI5eoF4ZK4b+GUp8llKbtZmbfSzFuGRyv19meoN6lcDumfTyzM
wi7uSZ1Vepkg3dwyvjb8Y97xIOnQsqKku938mCfsCGPmnZeEfWIC2t2cQEEPNDo/
WbipHTqH41p79/bDXquewcX21Y9ZUG7GxVIAkhPuFDUfpMW0dIVpreCDeF23+jku
m3ljeIFFTF5fQ9QqET2ixZlSilh6YcNOeLqTGRtVeluaL3Xxg9lAafsY2/RAKwNR
tv1MIlrZEZwl3TB/ReAmqO4qpaQGY3ZTb7cY9knktxg5RPA9AxQtx5S/THYZ7gFC
LdTioC2ebocOJsDRr969pXsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279627070879699303404931600297386273721809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 05:48:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 05:48:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bailey.tiftschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679377595824690070947467979527759508724848845064231279950321917540625925920210449034476910984834563080041964274301329496590429518723378524715306321708393316966322837395189565086476521311631032271222437376551943941985529696157226561969785385922705890365261756115235400013012110414718984059131054036896290856739684286112097298187309654202304051247270918216533687684421963824609979907380528124991419673786002355345116019520969058572318883359400838296132725388106004074680308125335123555132233063619585312543339166657429478240493844699777470634551474582474491297724980714384511365449559739007915860365999950842745318236997344327609133770289315724619189861951686773987373558484648600518257235627679101266967579276854504295617513119515318087100877024805405969188175041247667417083947647001847028117150496752540391244189327568538591807984865304014494804005936033716081165463150670729785677300351795977243524407993244496090744792952148903314629966062576149048888980939991522198527612397074581025156536349797266003005940315521143047731409047471189473660247760319941309355890798606823057375837600509059784694701524349328785091820808325006864434552231550499765057252069097098828934132973950029165670419880464504268340136621114379392696111179131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cffe3947a344aa0008a42288b653b41e9c2e95d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bailey.tiftschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed0074007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aef24f0f400000403004530430220545d3d95f4ba055af06174aaeecff93366b56391743c780e865972d2539eaecd021f0ad47b4979d109b56eeba2daa8847b6aed0b31e5b46a1a3aeb3572218c0f92007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aef24f0ee000004030046304402202172cfd21e85d6418dae01e216c643ca505fbcba01a77dfa4b64a2f7996156cf0220188d0e5d3237632d930fd53815321093d87d7c1b054a723019998939e86ff21b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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