fortdodgeiowa.org

Issued by R3

About this certificate

This digital certificate with serial number 03:cb:2a:c5:54:25:0a:08:e3:a6:6d:b0:cb:16:03:2a:c7:22 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fortdodgeiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:2a:c5:54:25:0a:08:e3:a6:6d:b0:cb:16:03:2a:c7:22
Serial Number (int): 330471030445192300166961645859093130954530
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:01:4c:d6:b1:73:76:03:cd:73:c1:75:e7:1f:2a:0b:f9:95:82:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:56:9d:8d:29:81:76:7c:7d:66:cc:79:77:91:51:e5:ca:aa:db:dd
Fingerprint (sha256): 53:7a:d8:59:24:4b:0e:79:ba:fa:04:d5:11:df:0e:3a:e9:83:8f:88:d1:bb:8d:01:f8:85:5d:bb:ee:48:51:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fortdodgeiowa.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fortdodgeiowa.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fortdodgeiowa.org
lakesidemgc.org
rogerssportscomplex.org
rosedalerapids.org
www.fortdodgeiowa.org
www.lakesidemgc.org
www.rogerssportscomplex.org
www.rosedalerapids.org

Other certificates including the domain name fortdodgeiowa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for fortdodgeiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAnIbiKDWj35QR2rLn3vrF
l4g8R/65soCv3eAEXyEOTmmIKFbxyfS3LXB4S58BFW3g5NGlKvlW7vX6/iiF5GhN
GGqJPb1sd7DATY5+Ggc7ILEDzi2fHkVyp/woj4LOnGJnsXhM2lRCkoYIJpKnd1Ys
JZ04EkP53FUnWKrgWnrWud6y17iGg0fhCWRCaQxxp65XjaX8MfPr8KtxF6/gN2xR
Ox0P6r2yNmglswI4EaFGh9sXK0duYaBjNj3OQ6TLU/Rfa95k7VwLr2yz7m2TFZsM
RIwgw2PIqm1nUMohrYgIRTlHvePNzulIEA9HD9OFk6nuhlCjdky4RuF3xAE6MrOs
dTMP+QoHuQoObte1J2cgoAnr422h/6Ct4LQtxRJZZrOj/qz1JwzmhnZlX8ezA1xV
htyUI8CCSAUlfnCUqneK+A++bI28H/BqLGOQZBAOLUm9aKk/kjBoT5Pk4dKBxD3b
QHsluXlSAfUj2oA2jzY+bVI6qo4JU0vHYLjY8J7R+izXAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330471030445192300166961645859093130954530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-09 12:00:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 12:00:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fortdodgeiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3552185739009759238990098454889533766019287887414865423668689243413837161433097879096710607939127084656932622332899059537570941967396107193417701345021916874787359049517182030259906229931882232977068597690247245856070749151984272997551004689001240464117251047472724899717941171095311427487204439297493231408504323066356314813881547296499897621658167947903621038887717268246801210901641862024896386759022109204263565625016034054163491009394927975774175635844254623643418321567157635628227186633592518984578517476681263787966229443914161861027129002901144031593164315077363654473646202402573552967619455515739773691429398689153362700121024467047644963597569690740017216838738291588600732190091837900590090884464839071214850807223459608242786609760445251246927709031499415993620592359442739735374330189137766909199197252110130989471468637239978449573578393098352093555114180706465145945165418746945598763452888445790487196609751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45014cd6b1737603cd73c175e71f2a0bf9958274
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortdodgeiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakesidemgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerssportscomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosedalerapids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortdodgeiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakesidemgc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogerssportscomplex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosedalerapids.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001893abdb6e40000040300483046022100d5be7d83dbca9e2581f878f29ef8492a229392d0530d66b6d17c330c4311c63a022100b8b35cf2322e00b4128cbd1595928206b1aa3044a7336a0253fb53102733f610007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001893abdb7170000040300483046022100f34359ce0839db721c6c9a3fc54b0bc8389d578952eca38ade8099d5a1e13a7d022100969f6a0ca8307befa508d20d1a1df4ca086f41ab882e7c2689ee5293c5025732
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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