www.westerville.k12.oh.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:6f:70:50:56:74:28:9a:76:4a:e0:ed:1c:e7:8d:b6:ff was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.westerville.k12.oh.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:6f:70:50:56:74:28:9a:76:4a:e0:ed:1c:e7:8d:b6:ff
Serial Number (int): 294492374860834392074364730725408518813439
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:24:e7:ca:12:5d:a6:aa:af:61:69:ca:09:f6:a0:c2:20:65:57:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:94:f6:e3:58:f0:45:b7:53:34:29:44:1c:71:6a:8f:e5:32:01:64
Fingerprint (sha256): 4c:62:f1:74:23:71:ee:ce:7c:e1:c2:d9:d5:8c:42:4f:ac:bd:8a:8b:41:42:a5:47:3e:b9:7f:23:57:b3:10:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.westerville.k12.oh.us

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westerville.k12.oh.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wcsoh.org
www.westerville.k12.oh.us
www.westervillecitysd.oh.schools.bz

Other certificates including the domain name westerville.k12.oh.us

(limited to 100 certificates)
www.westerville.k12.oh.us
wcs-cppm01.westerville.k12.oh.us
www.westerville.k12.oh.us
westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us
wf1.westerville.k12.oh.us
westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us
wcs-cppm01.westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us
www.westerville.k12.oh.us

Certificate

The complete raw certificate details for www.westerville.k12.oh.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294492374860834392074364730725408518813439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 23:09:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 23:09:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westerville.k12.oh.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760237561544670416351071902682596669950853798379253391509959887843242077015489811495745905213878270194001128262126461872835990428887243977496204090691496238588628397946237680875641912890560092648323104969862839511706949838358220610919432995199137557495591876336980452003399557487176235866832991183427900654291977234750605385495153835130984538600069464604674696655226836457947185528958449219520071868383638673690087134521805992327121835456538206308756817822680955381983219125862199180164848632094024437339181801842901723274485449157100571648568054463532909725487550828366017274019218980061747504176763482652299006078090738627417926499204255389314991812533675726302389926768040075243883049942159089429673906608308808410570765602499182940557970700507947280570781268904064192911003693048220970416332073831494179920423613712069912707866188773087925528819593266059600427541506757232309666801294638771118986766182032164460456251565146548813970329215029956847149396051988265209703562230792021715095342675786687105277756997766242181957028041324507434135545370548582120510886707848354480405982056784325019463918133702592823862872971605096728669531977318073919714253039710580160862256758615485005532019107081583134218013218592216449967073574559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4424e7ca125da6aaaf6169ca09f6a0c2206557a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcsoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westerville.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westervillecitysd.oh.schools.bz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170507a0b68000004030047304502206bcba8e4bb08a73e56435a9222463f223418620b410018cad077c2c831cc181c0221008f2020b3c537019aff03131bfd7626ff07f650440466bd7d29974ac2ed8ad4f4007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170507a0b560000040300463044022057aaea55ff37c84f0a800bf91480dc77995969ccaa54291289382b033958ee9e0220192e6fb4676c4c5951560a7dc0f7c97105ac8cbf88b69462f9b90f464e93e682
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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