*.lesd.k12.or.us

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number a6:f0:6c:55:13:e5:47:e8:40:c3:78:40:8b:69:ef:21 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lesd.k12.or.us

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): a6:f0:6c:55:13:e5:47:e8:40:c3:78:40:8b:69:ef:21
Serial Number (int): 221900195787132800397382693969627574049
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0e:8f:aa:39:cf:49:0b:91:38:44:6e:6b:96:d4:f6:aa:8e:46:90:34
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 2d:d2:59:cc:0e:f8:b3:93:40:0b:d3:4b:db:e5:73:7b:73:0d:ba:dc
Fingerprint (sha256): 71:07:13:a9:03:48:5d:70:7a:83:4a:c6:ca:8c:c6:44:42:91:d4:af:63:d8:ad:21:04:14:54:de:5b:fb:60:1c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.lesd.k12.or.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lesd.k12.or.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lesd.k12.or.us
lesd.k12.or.us

Other certificates including the domain name lesd.k12.or.us

(limited to 100 certificates)
webmail.lesd.k12.or.us
westmovpn.lesd.k12.or.us
webmail.lesd.k12.or.us
*.lesd.k12.or.us
vpn.lesd.k12.or.us
learn.lesd.k12.or.us
vpn.lesd.k12.or.us
laneeducationfoundation.org
webmail.lesd.k12.or.us
*.lesd.k12.or.us
mm.lesd.k12.or.us
webmail2.lesd.k12.or.us
vpn.lesd.k12.or.us
webmail.lesd.k12.or.us
dt-mgmt.lesd.k12.or.us
libraryservices.lesd.k12.or.us
laneeducationfoundation.org
*.lesd.k12.or.us
vpn.lesd.k12.or.us
vpn.lesd.k12.or.us
*.lesd.k12.or.us
vpn.lesd.k12.or.us
webmail.lesd.k12.or.us
mm.lesd.k12.or.us
mail.lesd.k12.or.us
lanestem.org
www.lesd.k12.or.us
laneeducationfoundation.org
www.lesd.k12.or.us
webmail.lesd.k12.or.us
*.lesd.k12.or.us
dt-mgmt.lesd.k12.or.us
*.lesd.k12.or.us
webmail.lesd.k12.or.us
webmail.lesd.k12.or.us
westmovpn.lesd.k12.or.us
vpn.lesd.k12.or.us
mm.lesd.k12.or.us
vpn.lesd.k12.or.us
libraryservices.lesd.k12.or.us
westmovpn.lesd.k12.or.us
libraryservices.lesd.k12.or.us
westmovpn.lesd.k12.or.us

Certificate

The complete raw certificate details for *.lesd.k12.or.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl996SD2ChZD56H0SdZP
plSS/TMtpEg1iHkjLj7jvWX6we7IH+Vw5GxeoOovYG78IYB3p7ls7d9Aine4r6+x
9wWAVM9tHNoEDm4+NWMyvOnRVSSloeSyprEpg/+iDExRMpzJNF5bQT6nUcNXYkEk
z0x25DL2V8CFz2SckQhm5ofe1JBIQLIFH2cVvk20AjlALwi2vdkc57FLADHyWHBT
ftE+svc3k03HCuRqHVcV51/yHQ1orRRYP13qF6KjZFBJ54rSvJ4Fnu6FD250t4Xr
PUdN4TWMVTmFJ32BJb26QNxwO7aZm3T5JcW0zeQh5IB1yZxtc/8Khcua/CZdS22H
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 221900195787132800397382693969627574049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lesd.k12.or.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21002647404959125017321339326226059026060292491075170286471169818708852599412398109197063010869466219625150006781519274449733192984253500093214158795936648856284869811275086149787622928120729718009577147168874429481084937393276119908501008566958164137830255003270229393300149850312951033026332360517592406794231339983691718390988992720101531635739318802109995791247567419171630882731117295001176965601427600466993723099539981800468729735949693509300295863464037765137942288785417322427361975587870477247072181489233687667098903911150580644468903893185822909449477164861812527249431013339592481343961727167924429227843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e8faa39cf490b9138446e6b96d4f6aa8e469034
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesd.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesd.k12.or.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004d95b7a699fade743c6386b50d886c06f2a22e71089f4df9df3d4af47b88d5fc81e5602ab2fb6611b5a588edba254779621dd7a07c9d436a111560f2aac3ecb43cff305f61163b277690313d633e03428ce4176180860ac22f3ab0a631f4f2f100fc0b3a252d6bc008a5719af4a8c80413a97f94ca71af4d3be95aedfd6f8cddaf7a8c9442edc9f66fbb8c9d18b0571f7a23066d8efb9d4ca7768a1a2a2bb33acaa05f859529fccd1d87f2d3d461f4a1e3d6f8c02ecaab7edcd03cd27960297c9a5d22d33a55d82cfbcd6244fe3915e2ecb8cbeb0987b3d787547d68fb46d68ab7c481dc3ad3e151bd333435885138fb43a93506d99753addb37183aa83636c