llcsd.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:d1:e3:ff:ea:5f:96:5a:e2:0f:da:ac:d1:71:a3:ae was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=llcsd.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d1:e3:ff:ea:5f:96:5a:e2:0f:da:ac:d1:71:a3:ae
Serial Number (int): 21028234362904037417039313763604472750
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:5f:4a:d5:0e:1c:e0:d4:ed:b0:cf:3e:c4:da:fe:9d:3b:df:a5:d9
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 74:14:ca:bb:25:ab:82:66:68:68:9d:fc:3b:c2:b8:c4:5d:1a:8b:9e
Fingerprint (sha256): 50:40:9c:c8:fe:2a:66:25:16:41:21:8e:f4:90:5c:fd:3b:30:c3:d1:fb:13:53:c1:65:c2:1c:4e:68:db:7f:7f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate llcsd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for llcsd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

llcsd.net

Other certificates including the domain name llcsd.net

(limited to 100 certificates)
www.stfrancishigh.net
williamorr.llcsd.net
jersey.llcsd.net
186streetschool.com
68thstreetes.com
admin.aasdcat.com
williamorr.llcsd.net
lakecenter.llcsd.net
*.llcsd.net
admin.lisbahamas.com
cte.mvusd.net
lakeview.llcsd.net
lisbahamas.com
llcsd.net
admin.be.ysd.k12.sd.us
llcsd.net
hs.humphreyscountysd.org
186streetschool.com
www.llcsd.net
llcsd.net
cresson.llcsd.net
cresson.llcsd.net
paddison.llcsd.net
www.regentsas.org
186streetschool.com
admin.chestnut.painesville-city.k12.oh.us
lvmhs.lucernevalleyusd.org
studebaker.llcsd.net
186streetschool.com
admin.lakeview.llcsd.net
68thstreetes.com
llcsd.net
186streetschool.com
68thstreetes.com
186streetschool.com
186streetschool.com
lakecenter.llcsd.net
www.humphreyscountysd.org
admin.llcsd.net
cresson.llcsd.net
lakecenter.llcsd.net
www.186streetschool.com
186streetschool.com
admin.es.hillcity.k12.sd.us
186streetschool.com
jersey.llcsd.net
williamorr.llcsd.net
lakeland.llcsd.net
www.llcsd.net
lakeland.llcsd.net
lakeview.llcsd.net
admin.adulted.mvusd.net
lakeside.llcsd.net
admin.be.ysd.k12.sd.us
paddison.llcsd.net
68thstreetes.com
llcsd.net
*.llcsd.net
williamorr.llcsd.net
186streetschool.com
cresson.llcsd.net
llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.llcsd.net
admin.wilkescountyschools.org
www.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com
studebaker.llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.uci.edu.mx
cresson.llcsd.net
186streetschool.com
*.llcsd.net
lakecenter.llcsd.net
admin.regentsas.org
llcsd.net
www.llcsd.net
studebaker.llcsd.net
icabh.org
ige.humphreyscountysd.org
admin.be.ysd.k12.sd.us
studebaker.llcsd.net
llcsd.net
www.llcsd.net
llcsd.net
llcsd.net
lakeside.llcsd.net
studebaker.llcsd.net
llcsd.net
lakecenter.llcsd.net
lakeside.llcsd.net
lakecenter.llcsd.net
paddison.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com

Certificate

The complete raw certificate details for llcsd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zmtopJB+kAtKOi5aPrx
nByhugdjAS/R71yTrlIAjbGGkwx+Y1HhLCnz9kCnuhYhFRiByaIC4g3pTxAzDMFP
WbFPxhYMFtYuHQC7a3AbqKaVMK+NzBRNaRpNL7I1d9znZXBVwifF3NWmEdLYUnu5
gozxS0Cs6R7bUI1GTT1gjSrxZBqvlFflNWb99nj6f14BOd/aBNREvrJ7MzRfeC3t
LvGse3lwu+FZsWuvfA2s9BmyizI4V0EgwxCnJ0hXd5c1s/krmAgrbqHun7R7elfX
+g6Pqk7PyQH/QI0K/zfZEZIVcho2tI9cB9tbbBOIuqmht2KNjzYuiiLIVJ1iHzJw
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21028234362904037417039313763604472750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'llcsd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26664724558832772878301576331014645372385644754020543131747808397422302143121082731914067812185588055790762650466410734142902840673824680425566197464305712215484645423258339637534827588520279745402124377803731681435554991898982159328835424144415257995066121218832041806054335853151798206390443652186477319568727538636231603238462834988581291580182885408841231044881605641078923706700736062053352441608030487301011170001330992147525252889637782211929085180126203846727513550131463103738593308433490200800401403409694491799106389311844086760959920384937474989443192792242856627708984665671793448893187762796023436701849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc5f4ad50e1ce0d4edb0cf3ec4dafe9d3bdfa5d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llcsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0054156996b3841e281227328e109a64a7b75115cdda3cfec4d1f7a005cbd7507ba4a9c83ea849c4b7a3b33c8520575f353fd1fe6686af200f2c8e8f9cbf7cb2e6a31010515ac6a62e0c1f46a6c58ad7562d0deb333d6912ff4ef3165fd007805eef65ca769c1cd3ad9b4d7d057b818aa87386447e82c04204cdfc713122ac8180f1858516a09fc47c3573b3f4d07d2479e13d88c7c51c583ec4162133d85f212d334e599242b703480bfb66e9c1ae0e28562503263d98c9c2176adc6cdfedcae2682753e0185f66af80797bc13bdb533dd133e9e7888d90420e6a3a0f372683c94ad5e6de64b3fabd62c59a4c9bfa3033533b9723146c10a3bd6ae0c0888b69ccd6e2019e209bdf9c6ae34ee302a14024245a244e99de9cbfb74bdffbfff4e3490f652af028e71f772039488cffab174e98de8dc007cb3c2ea92e6bc62e82c8a91d7592570e6bc6bbb7ee9bf248f9a379a4a71931f1a59476ff824a0347e5cf3695e8195b2d0ea26d478f3835bf94f674573a0fbd5988017380e428b1d8817d84fe43f5a0d4936aba4f09f8eac1f7b7fd7283177a7b09c038537b46a2e264e7f48fa4fcf9bb71b3a781f323875932a6b7a6feaebdda7f806446948f69e9b6e9bc62c1873c07368852d7924f9c59cb50d1f8fe9f7be3df98daea050c9d0467b3624ff9df6c6527b44142ca8c86607d02a329f00daf5ac1432201c147cf7b1e047c