lce.fz.k12.mo.us

Issued by R3

About this certificate

This digital certificate with serial number 04:5a:f9:8a:29:2d:98:fb:f6:f0:3c:39:af:be:52:2d:c7:9a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lce.fz.k12.mo.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:f9:8a:29:2d:98:fb:f6:f0:3c:39:af:be:52:2d:c7:9a
Serial Number (int): 379406251893033777547632761197979744716698
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:ee:40:42:6b:01:61:90:c0:07:82:10:82:2d:ca:7d:a9:d1:7c:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:29:19:1b:5a:b1:6a:0d:f6:26:ba:75:d6:dd:7b:ce:40:8b:53:df
Fingerprint (sha256): 5c:dc:37:6c:8a:00:f2:99:2a:b3:cd:c7:e8:e9:16:70:0e:20:9b:c2:ef:fa:e8:44:66:ab:a4:5f:bc:0e:1a:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lce.fz.k12.mo.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lce.fz.k12.mo.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lce.fz.k12.mo.us

Other certificates including the domain name fz.k12.mo.us

(limited to 100 certificates)
ssl375224.cloudflaressl.com
ssl6808.cloudflare.com
ssl375224.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375224.cloudflaressl.com
ssl278615.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375226.cloudflaressl.com
*.fz.k12.mo.us
ssl278613.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
*.fz.k12.mo.us
ssl278615.cloudflaressl.com
ssl6808.cloudflare.com
ssl375224.cloudflaressl.com
*.fz.k12.mo.us
ssl278615.cloudflaressl.com
ssl278615.cloudflaressl.com
ssl6808.cloudflare.com
ssl375225.cloudflaressl.com
ssl278613.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375224.cloudflaressl.com
ssl6808.cloudflare.com
ssl375226.cloudflaressl.com
ssl278615.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375224.cloudflaressl.com
ssl375224.cloudflaressl.com
ssl2421.cloudflare.com
ssl278615.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375224.cloudflaressl.com
fz.k12.mo.us
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
launch.fz.k12.mo.us
sni.cloudflaressl.com
launch.fz.k12.mo.us
ssl278615.cloudflaressl.com
ssl375224.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl278615.cloudflaressl.com
ssl6808.cloudflare.com
ssl375225.cloudflaressl.com
ssl6808.cloudflare.com
ssl375225.cloudflaressl.com
one.fz.k12.mo.us
ssl375224.cloudflaressl.com
ssl375225.cloudflaressl.com
*.fz.k12.mo.us
ssl375224.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375225.cloudflaressl.com
launch.fz.k12.mo.us
ssl278615.cloudflaressl.com
ssl6808.cloudflare.com
ssl375226.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl6808.cloudflare.com
ssl375226.cloudflaressl.com
ssl6808.cloudflare.com
ssl375226.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375225.cloudflaressl.com
fz.k12.mo.us
ssl375225.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl278615.cloudflaressl.com
ssl278615.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl278613.cloudflaressl.com
one.fz.k12.mo.us
ssl278615.cloudflaressl.com
ssl375224.cloudflaressl.com
launch.fz.k12.mo.us
ssl375226.cloudflaressl.com
ssl6808.cloudflare.com
lce.fz.k12.mo.us
ssl375226.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375224.cloudflaressl.com
*.fz.k12.mo.us
ssl375224.cloudflaressl.com
ssl375225.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375226.cloudflaressl.com
ssl375225.cloudflaressl.com
sni40430.cloudflaressl.com
*.fz.k12.mo.us
ssl375226.cloudflaressl.com

Certificate

The complete raw certificate details for lce.fz.k12.mo.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379406251893033777547632761197979744716698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 01:23:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 01:23:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lce.fz.k12.mo.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675321913051942487978450127537468158609253210488554120096668817874372159505213786773285119505619332332395805904936021828002513638472594722508105536944605412965470832840208657926059466912608655262743225511175275253138768145148271051205452018150155312243205198691803460814684223960056008446599078960395145061817122941231774183012237221589559842497489415857403739152817835168145068668005153173388634517631298868612569569508761117091705352042153953430512164311077223098930911519460655103076362032296321509956838643301555175272490001958136798950326335084566631589069647166073452472558551859996675358198564322338454515199518635480270092652572093833695041685683775694533711777951876370115771040467386134506198964916553961285456276126789219442998430481814996420434684824279982221762616423399681204793571887391244091284301625638856303661676158787154565008673228245718648234748560627818527789988634690183568063041669120192190805567900298869600545146073963874599305557386387264897257267303892032941911661531690958593825569645379633226781871695799430481010985413766998289042940383916647378381857210949572480319060865193691663586093359574570705124215008543484412235430235680018147419773492944148897639699008723636607796084460905855219939868128407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32ee40426b016190c0078210822dca7da9d17c02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lce.fz.k12.mo.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001872606d14c00000403004730450220289ae41d84d46e1dcff1dc9544accf352782ff01a47af46726482a3de8813b4f022100a963c228035fb5edbf559d3e270d652ededaa58feb1f8d4cd421dfb1b0646b030076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001872606d15f0000040300473045022100db7cb37f554839caba8d0cb4cc3eef9a0cc4f5ed008d322cada8b50c7cde3b0a022011f7059dbbc6f18aac7a95ff46b8983a40d8b34f1326f6d7eec065d3830a0e40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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