monticello-elementary.sjsd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:da:96:82:82:ae:23:95:cf:ec:ad:ef:88:3f:2f:84:fe:a4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=monticello-elementary.sjsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:da:96:82:82:ae:23:95:cf:ec:ad:ef:88:3f:2f:84:fe:a4
Serial Number (int): 422830761564274880369424388906897652383396
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:07:6f:dd:52:ae:00:73:54:16:b3:52:47:80:87:73:c5:6e:67:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:8d:e7:9e:a9:9d:47:e4:93:cb:6b:ee:8c:a4:04:49:46:3c:34:53
Fingerprint (sha256): 5a:c2:14:59:0b:0c:6d:cd:e2:b2:0e:84:51:fa:b8:18:25:0a:06:26:24:b3:79:09:e3:81:a2:b0:11:64:1b:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate monticello-elementary.sjsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monticello-elementary.sjsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monticello-elementary.sjsd.org

Other certificates including the domain name sjsd.org

(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org

Certificate

The complete raw certificate details for monticello-elementary.sjsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgISBNqWgoKuI5XP7K3viD8vhP6kMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDIwMjM2NThaFw0yNDA1MDIwMjM2NTdaMCkxJzAlBgNVBAMT
Hm1vbnRpY2VsbG8tZWxlbWVudGFyeS5zanNkLm9yZzCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBANhd3PkY73edo3O/Adl2otr8O94dan3WIP2BihmZ7jI4
531gq0Cp/G7Q1oPeHP3EBcA2c/p0w5lUxEridKU/YKOAXjnPLevUK7jDkOqPDPes
6yOH318l8T7ZexdbJAu/g4oX4ca12ENP23NAtD+ellcJ5ggfFmIDOX6tDFwjx35y
CX33qkCb83SqbNzXc8rH0V041tQUrOZilV+iJpmwLkpBdW/YlUa4uTWusan4Qjki
S2uQIuskGBv+ZYmAnhpulj5GjDWdpN1OMMlmuXYB/X4SSMATvbQDXvSR5dxdb7c/
ODkI34beInNVf0F3o5W+6WhWHJ3464OQ9AyUl0dBNM1yZYU2C0fVCHXe00TpLEqJ
ZeQX0L1nxcQc9EJRjvqFA9rctH415dtNlKCQKkFYORzZ2s+S04o1kfhjTv7tIk6c
4bcsVlKoD4RHYjqIGsWSzASruDbPkLY3nCzCkiWzAuuBqi3jppWmmYUfq+/hwUpB
u1yPROuzqQ+kc6nzHRGwdqNXjGdwwNZVpx8ZvmhepHufgrE4wGVo7e2ITUvv4pfl
uHYlxU6vaUJjGPxm44BfBhCGIQhAZ58T2Tj1eUd7ZDKdfoSRUntr5x9wPR3DcGoI
zKOZRa5MFkgBTE8k62a1S2oMqOdtHqycAm+TwgmVh+y+P6JRI7FeSMQMaKhmh3BT
AgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNoHb91SrgBzVBaz
UkeAh3PFbmfEMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsG
AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIG
CCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCHm1v
bnRpY2VsbG8tZWxlbWVudGFyeS5zanNkLm9yZzATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABjWfkGGwAAAQDAEYwRAIgXjnZ+k0PW5VFEn6UEkeib8Sr
bLQ+GasiES+4RKF9LWYCIEmbsO1AQhFifUWAD6Ra1SJEvPpCnYqOY4LA7FssaRmm
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGNZ+QaaQAABAMA
RzBFAiBEUSmxoUF3d5asEaQ4jmRkncHK7dGBiDHH+f3CLoTEggIhAN5WIvcyc55D
vpOFCB9PojkGVDq6TQ4aghpe+dGbnq0lMA0GCSqGSIb3DQEBCwUAA4IBAQCrcZLc
aWhhBcwfb7FS0EsxcfsK2iAwWR1QF8s0ESWSCU+dEGXvJ5lqGFg0/UOIBOnUUQRW
/HgvXM+fVepCCen2WE49Yt14bPxMQAUFUwdtdq7sMKwnivgTS9YftV2gCyqtb28U
YF9U1f3s4ncjpv4B9G8Z+tQfiW1ha+K0VsiCPKr4n9inI1gnqMCKJYuqNoNosCi/
L7NB0I+k2QdO21Si9yuMCECHk5uYbo1+gyxGSK3Mte0e5+EoG9L2rdiyhismiFo5
1kPbjtmRlR0/TodDQjBfxNZ5ioU8TR70XsSJG7T7c8vuVS5Jxnfgm5zF56SoqJcg
hIYckReci8ZUovy5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422830761564274880369424388906897652383396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 02:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 02:36:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monticello-elementary.sjsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882698932555108790052181857177900567273745847015329204552031586495406216100364757579471866008492243832121026839173733466558955460538151447590189905249810723608972401200867116245247043868251029053325486722489442564286174210186491080112711245188439581894202331469432762293814901599903307409781096680784812898129014819602896065272765944826468711918154854467357877359967044875968382165653761207297578213227229510997597930077037582133562919970453515661589189513559149897032775694188597684888397910619681045336107919078884574302392658084212884685250988119497228689037531237031929470394126544620466783897648460951199310558233873441585076164699009696571361581585191393917415734699683507106302295235819490173740677318333550502018653358445030913888220753104389073567142679315625655756112073749155188258093476006311072450148043016211911143402461880043095043130014301785624199156290072490935489692788988927523355583382872303230775136561833753781027373463714149983784331887572379033670964949253442780560863869600670821406916989057951205061561186912972806550135445935167604909535428194552240272450680008469338717414948085918926064954407586080756450459360578480756538116369840806703021309154293399186986742156046069119073958880474474233395835007059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da076fdd52ae00735416b35247808773c56e67c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monticello-elementary.sjsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d67e4186c000004030046304402205e39d9fa4d0f5b9545127e941247a26fc4ab6cb43e19ab22112fb844a17d2d660220499bb0ed404211627d45800fa45ad52244bcfa429d8a8e6382c0ec5b2c6919a6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d67e41a6900000403004730450220445129b1a141777796ac11a4388e64649dc1caedd1818831c7f9fdc22e84c482022100de5622f732739e43be9385081f4fa23906543aba4d0e1a821a5ef9d19b9ead25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab7192dc69686105cc1f6fb152d04b3171fb0ada2030591d5017cb34112592094f9d1065ef27996a185834fd438804e9d4510456fc782f5ccf9f55ea4209e9f6584e3d62dd786cfc4c40050553076d76aeec30ac278af8134bd61fb55da00b2aad6f6f14605f54d5fdece27723a6fe01f46f19fad41f896d616be2b456c8823caaf89fd8a7235827a8c08a258baa368368b028bf2fb341d08fa4d9074edb54a2f72b8c084087939b986e8d7e832c4648adccb5ed1ee7e1281bd2f6add8b2862b26885a39d643db8ed991951d3f4e874342305fc4d6798a853c4d1ef45ec4891bb4fb73cbee552e49c677e09b9cc5e7a4a8a8972084861c91179c8bc654a2fcb9