cityshefalumni.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:f1:17:fc:eb:c9:9c:5e:6d:9f:c2:8d:a4:b9:fa:7c:65 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cityshefalumni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:f1:17:fc:eb:c9:9c:5e:6d:9f:c2:8d:a4:b9:fa:7c:65
Serial Number (int): 267101844165675900218090638752721638423653
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:c4:40:0c:7b:09:c0:35:93:5d:03:ea:47:8e:11:fe:27:69:10:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:8e:f0:be:d7:86:00:ad:4c:ad:79:96:54:d0:b3:e2:ea:1d:1d:e4
Fingerprint (sha256): 60:f9:87:ea:ea:af:71:70:39:5c:4f:91:78:b8:bf:bc:81:70:8f:19:27:3f:00:49:23:6c:57:d5:d2:3e:66:cc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cityshefalumni.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cityshefalumni.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cityshefalumni.org
www.cityshefalumni.org

Other certificates including the domain name cityshefalumni.org

(limited to 100 certificates)
ucoconnect.com
ucoconnect.com
cumbrianetwork.global
campionalumni.org
cityshefalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
campionalumni.org
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
cityshefalumni.org
ucoconnect.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
ucoconnect.com
caterhamschoolsociety.co.uk
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
cityshefalumni.org
ucoconnect.com
campionalumni.org
campionalumni.org
cityshefalumni.org
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
choba.org
ucoconnect.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
ucoconnect.com
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
cityshefalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
connected.cardiff.ac.uk
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
ucoconnect.com
campionalumni.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
charterhouseconnecttest.manual.graduway.com
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
campionalumni.org
community.mancosa.co.za
corpusalumni.com
ucoconnect.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
ucoconnect.com

Certificate

The complete raw certificate details for cityshefalumni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqht4N2VdqktrZdIwB0cu
4t0KfNQ+tqOPcSJeKl6GBl8Rov1e+RGn1+bT5pmBQiciChIIQ37sQJcp2ip+5TfC
A32sHh+xoIA+GXUM2iiDmraEJYH7pb9uOij5UWS2by17Ocs+VS7aBjl5zLW2UXfU
+0OFfpwKvbVB3PfenoJUFBJLZ9eQjMnFZxhGcPWAwKTKxGJNUC6CZatoNU+7Nt8t
SpDmBBQmUP1dkgJD9p+4RSk3wdhfmINI/TtYoWVhl40aXCw1m8qRfniKw/8Whkuy
/+4YnnvIBaGLYcV7MLd3aSgzCaSh9NSK0C0X5vAOUInnPqMakDlu2pGuPu1gBayk
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267101844165675900218090638752721638423653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 12:50:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 12:50:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cityshefalumni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21474057606517678503680785770811656777132649013889529768094525900957271650189829588677094080943834328736263255830833943198320835055472114356824741612789720297689439184598325050204132502291534730381040402736668282084486818695277227572322052314885328494837957197002230676134976976460472370890164333262190904283430993671184180187585673598887938510007950259425281053967115546601977517627803260269699681579899657365821379034410152167296172839729064791712639750849160557621071569892435013032765834751616248665673120701592389429007596513514384507816559924202962887108530460237290994532988429229678063589443605829145271772389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdc4400c7b09c035935d03ea478e11fe27691046
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityshefalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityshefalumni.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169c490f4c80000040300473045022100a62f11d1d06f6006065f828562b5a48e7a52ed44809bdb95d46be999e519f65b0220491a74b23896055f567067fa2f9ab60630697c6d653e3500c97a78d4c53b4220007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c490f5430000040300483046022100fb3b5bd8cafad0362fd0c9b81978f6d8d9e8ad1d956ae35f73e86785ee44b8b1022100b4844c4c5f7f6ee1248d00e149dfd8e252fc0b3c183ac7fdb0685f89a04d4ee5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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