jersey.llcsd.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 06:0e:3f:38:17:c2:68:b2:b6:cb:73:c2:de:73:5b:5a was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jersey.llcsd.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:0e:3f:38:17:c2:68:b2:b6:cb:73:c2:de:73:5b:5a
Serial Number (int): 8049342366664294935964470245516860250
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 34:33:20:b2:d4:65:cb:b4:16:ed:46:88:f5:7e:9c:c0:e7:fd:90:6f
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 25:da:64:40:89:61:60:da:78:05:4b:c9:ac:3e:5b:e3:d8:00:bd:00
Fingerprint (sha256): 71:1c:29:53:6f:2b:2e:89:79:e6:80:ef:68:c1:2d:0f:42:1a:71:82:69:95:e5:ff:ca:41:d0:38:d4:5e:01:a6

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate jersey.llcsd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jersey.llcsd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jersey.llcsd.net

Other certificates including the domain name llcsd.net

(limited to 100 certificates)
www.stfrancishigh.net
williamorr.llcsd.net
jersey.llcsd.net
186streetschool.com
68thstreetes.com
admin.aasdcat.com
williamorr.llcsd.net
lakecenter.llcsd.net
*.llcsd.net
admin.lisbahamas.com
cte.mvusd.net
lakeview.llcsd.net
lisbahamas.com
llcsd.net
admin.be.ysd.k12.sd.us
llcsd.net
hs.humphreyscountysd.org
186streetschool.com
www.llcsd.net
llcsd.net
cresson.llcsd.net
cresson.llcsd.net
paddison.llcsd.net
www.regentsas.org
186streetschool.com
admin.chestnut.painesville-city.k12.oh.us
lvmhs.lucernevalleyusd.org
studebaker.llcsd.net
186streetschool.com
admin.lakeview.llcsd.net
68thstreetes.com
llcsd.net
186streetschool.com
68thstreetes.com
186streetschool.com
186streetschool.com
lakecenter.llcsd.net
www.humphreyscountysd.org
admin.llcsd.net
cresson.llcsd.net
lakecenter.llcsd.net
www.186streetschool.com
186streetschool.com
admin.es.hillcity.k12.sd.us
186streetschool.com
jersey.llcsd.net
williamorr.llcsd.net
lakeland.llcsd.net
www.llcsd.net
lakeland.llcsd.net
lakeview.llcsd.net
admin.adulted.mvusd.net
lakeside.llcsd.net
admin.be.ysd.k12.sd.us
paddison.llcsd.net
68thstreetes.com
llcsd.net
*.llcsd.net
williamorr.llcsd.net
186streetschool.com
cresson.llcsd.net
llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.llcsd.net
admin.wilkescountyschools.org
www.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com
studebaker.llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.uci.edu.mx
cresson.llcsd.net
186streetschool.com
*.llcsd.net
lakecenter.llcsd.net
admin.regentsas.org
llcsd.net
www.llcsd.net
studebaker.llcsd.net
icabh.org
ige.humphreyscountysd.org
admin.be.ysd.k12.sd.us
studebaker.llcsd.net
llcsd.net
www.llcsd.net
llcsd.net
llcsd.net
lakeside.llcsd.net
studebaker.llcsd.net
llcsd.net
lakecenter.llcsd.net
lakeside.llcsd.net
lakecenter.llcsd.net
paddison.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com

Certificate

The complete raw certificate details for jersey.llcsd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJ7zswdAX6GZKkZs3AA
f5GKRO0yHjV/ITueun+em6Ra1GkbPbYCt3Abukpo4FbvwVOIyd1gFfx+iJEC3uyx
1RZmT0roFuUYmb3Jf/arD/zbtdsFsrBrXaoGHeZdmovSp6lelvws40HJbWPjXIoa
YLzYRRJmVGQUeK9dBvv98GdNJMFq6hx4QtJwqVXAkJhZjuah+5zdQT9L+6DsyUMz
vrvJJiAY/dRLtovWsNq9spD8iE0d0nPc8IAL9HHqe/Rfxng3xNfN3ZAu0Q1NeGu7
lFrm/Bhk0CV0hBelyQ3uIadaBhqXfEcC60BZSd0j1A7wTf7xx48LfMc0MlmWuIAX
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8049342366664294935964470245516860250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jersey.llcsd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24057511710846673798416998104806700135739759601444723715776601823787496358380143436860957397353340404687551038667041690424539915100347304063989549090551769713849501411246245632491668190586612082397504648736509942623103787711851356558109370783888214432866341018825830013944722471018799820195361128438322423166346107590155370109447198984458469984230884141840571276120572172723999201513527082054008159931068648972821224623050114515840471400973193466736855151935553979016690395396354992915658250374372795186822801733184898516442273931100160018941924565324438443211321308467391142114187746759785124481819623079881121732537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							343320b2d465cbb416ed4688f57e9cc0e7fd906f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jersey.llcsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008ef21ed57972a3bf072d21a3bf7a9ecdf005a85241f897731e49eb26961fa702ae75727eafaa83a0b90bbb7b5d0b14080b6094c49c7f7e6d87eed17964e9e811c7b1ef37a9bc8fd3ee6c5dea8191b66d5f25be79eb1366b57079bec13e46341d6579300a32748aa158a3d1511b2737fe5319909fd73b8f6721a43d6c83d32822dd88b7206926d210fa85afc07f091dff27e358143b5c770807b78d94e189e1542d4c5d983803c169f186546e22530caa420e677e30fd57c00ec8b9e6a380741a28533dd6794e2d49839e96eeaa755fbb1945baa1aea7d58354a631bc1ba69c0049b37a80bd915ecb19b44233fae8a448738ffb022529f26bfb507fd82b780e4ade815a4d23f422fde6c4ad2452c01faa7e792dfd834cc5299767e9041bc0b9d4832834a0aa2a5725c5d4da7b742d15335100a8e7ec4b0445c82e9ca40aa45b92dfa06685d6b54ec7bb22f67c398601992909e5753105945ed0970d9a5a04e02a3dc52915c3e6c365e2e77f54fbd5154bf6e4446b06d315f8b0008d9ab2d75dd9468bdf989f9b03d8e700dbf67502866c1862281f17bae55e8051bd966031155798c47f948a106a8ff3603a0283f6f135a8127ac77bd022c0cd889de89d479cad935ff98154792c8bf01e486b9bb0a6c8e1a049273070057f50e5a147f759c80a5cb3531731b716992a2f2e29cda21aa05246eaf250390ba37b05526cc9d058e4