ops.aacs.net

Issued by R3

About this certificate

This digital certificate with serial number 04:6a:2a:4e:5f:c7:e0:0e:a7:14:67:91:b7:41:25:1f:66:23 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ops.aacs.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6a:2a:4e:5f:c7:e0:0e:a7:14:67:91:b7:41:25:1f:66:23
Serial Number (int): 384575309138303054940250641497703342630435
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:3f:2b:5f:26:7d:94:9f:3d:a0:37:b6:66:86:e7:77:60:6c:80:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:e9:a8:18:5e:ea:14:7f:c8:d8:bd:58:84:3c:6c:95:dc:22:43:99
Fingerprint (sha256): 57:03:0c:00:ac:f8:f4:31:85:01:7e:6b:ba:95:07:c9:e5:2f:aa:7b:54:b7:54:fc:5e:84:df:1f:7c:e5:40:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ops.aacs.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ops.aacs.net

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ops.aacs.net

Other certificates including the domain name aacs.net

(limited to 100 certificates)
school.stveronica.org
aacs.net
acrma5.org
academy.pycsd.org
admin.alexandergrahammiddleschool.wearecms.com
admin.athlosindiana.org
marvin.wisd.org
hps.aacs.net
www.aacs.net
www.waldronschools.org
admin.athlosindiana.org
hps.aacs.net
academy.pycsd.org
admin.croftcommunityschool.wearecms.com
ige.humphreyscountysd.org
mps.aacs.net
aacs.net
academy.pycsd.org
admin.aieahs.org
lhs.gvusd.k12.ca.us
admin.bcca.bibbed.org
olson.mpusd.net
admin.shackelford.wisd.org
www.icabh.org
aacs.net
www.pilibospreschool.org
wes.bibbed.org
admin.keillerleaders.org
admin.crumpton.mpusd.net
rsu14.org
aacs.net
ops.aacs.net
es.glendaleacademy.org
acrma5.org
3rcs.org
www.ms358q.org
academy.pycsd.org
www.sfdslv.org
admin.lsprep.org
admin.elc.aacs.net
admin.mas.mpusd.net
charlotteteacherearlycollege.wearecms.com
academy.pycsd.org
corneliuselementaryschool.wearecms.com
admin.delreywoods.mpusd.net
edlio.com
aacs.net
aacs.net
admin.ntxca.org
academy.pycsd.org
barbaravick.org
ms358q.org
hps.aacs.net
www.corecharter.org
adams.k12k.com
ljhs.aacs.net
admin.stjohnspds.org
admin.aieahs.org
admin.aieahs.org
aacs.net
admin.aieahs.org
gvusd.k12.ca.us
charlottemecklenburgvirtualhighschool.wearecms.com
aacs.net
admin.vapa.mvusd.net
admin.hps.aacs.net
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
admin.lshs.wuhsd.org
admin.cchs.mpusd.net
admin.sfdslv.org
dbexcel.k12k.com
aacs.net
lhs.aacs.net
aacs.net
ops.aacs.net
aacs.net
admin.elc.aacs.net
admin.aieahs.org
admin.wuhsd.org
aacs.net
sis.aacs.net
admin.apexhomeschool.org
edlio.com
arletahigh.net
www.ntxca.org
lhs.aacs.net
elc.aacs.net
admin.wuhsd.org
sketches.edlio.com
aacs.net
admin.casee.chebschools.org
irlandesmonterrey.com
academy.pycsd.org
aacs.net
aacs.net
help.edlio.com
eis.aacs.net
wcms.mpusd.net

Certificate

The complete raw certificate details for ops.aacs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384575309138303054940250641497703342630435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 10:02:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 10:02:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ops.aacs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3625244112336583950600038854491611885907512185369379676334167987914571819137878002728566417275250437267778328787228380008013494414948532852126032914173631211267875951769153903148160133920728677280801294028708705645373016670994227419446902887426870318195031272418155858435935672071342419942308142411320066031383075007075007285972438627522539334924078125194303203652734920902359854771658563080924671705685257273927369840200123864573623183191113296920934277549293428618252941098354802691821657739672807968781360322997834077305017616782934722135423365587075561341486772161710381479439785348844149786574578566237819141756980269084799884434637014643538136552679893806799961290830685350464016483226328858190476023889289795521057000736697572293525664741408464548343375100880791476970435000330375281701341218380801402064266736900279070394132681339668781923071065203953830050886121779368686307678312129765311579874865966931885896894903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							063f2b5f267d949f3da037b66686e777606c80c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.aacs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9952e5090000040300483046022100d020846d547a0d310256a8a8fa6de3351ed50d0c0e11684333cc761d98693a4a022100cc56e6d5215809a82157964b560f1b91a5ce15466ec414eb7761265df6e0448f007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e9952e522000004030046304402202dd4f990c7a7aea736007117f5b84b3f7c4588cfa8604b205b7d0b1fb7812a5a02203a3d4529a3ebb2da12a9cac5247821e32356c5bc7b2191216c4903f345f831c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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