rhs.roaneschools.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e2:f8:d9:cd:9e:b7:fd:bd:2f:48:3b:67:ea:2d:28:82:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rhs.roaneschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e2:f8:d9:cd:9e:b7:fd:bd:2f:48:3b:67:ea:2d:28:82:c2
Serial Number (int): 425683738093015001457569132557964652610242
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:67:57:c4:a5:53:06:25:b7:78:1c:1c:ef:c1:30:fc:51:ef:d0:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:b4:2f:88:91:26:3b:57:72:5c:eb:17:29:2d:2e:8c:59:d1:a3:fe
Fingerprint (sha256): 79:f8:56:cc:92:cf:a4:6f:04:1a:84:47:70:7f:9a:ab:ad:e6:69:23:cb:6b:2f:ba:66:55:61:1e:2e:34:04:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rhs.roaneschools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rhs.roaneschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rhs.roaneschools.com

Other certificates including the domain name roaneschools.com

(limited to 100 certificates)
prep.warrentonschools.com
admin.fruitvale.k12.ca.us
reset.roaneschools.com
reset.roaneschools.com
admin.kes.rcschools.net
elementary.plsd.k12.pa.us
admin.athenour.unionsd.org
sre.dcs.edu
roaneschools.com
www.ptcbus.org
rcs-micollab.roaneschools.com
aak8.org
paralosninoscms.org
admin.grupocedva.com
roaneschools.com
roaneschools.com
aak8.org
admin.ccnth.org
roaneschools.com
admin.ramaroadelementaryschool.wearecms.com
cms.roaneschools.com
reset.roaneschools.com
rcs-micollab.roaneschools.com
reset.roaneschools.com
acacia.fullertonsd.org
acacia.fullertonsd.org
aak8.org
acacia.fullertonsd.org
aak8.org
memphiseast.com
admin.unionsd.org
rcs-micollab.roaneschools.com
admin.memphiseast.com
roaneschools.com
rcs-micollab.roaneschools.com
acacia.fullertonsd.org
aak8.org
aak8.org
www.grupocedva.com
*.roaneschools.com
admin.durangoschools.org
*.roaneschools.com
admin.dearbornelem.com
admin.oms.rcschools.net
roaneschools.com
www.paralosninoscms.org
grupocedva.com
rfe.rcschools.net
aak8.org
rcs-micollab.roaneschools.com
acacia.fullertonsd.org
acacia.fullertonsd.org
rhs.roaneschools.com
sbc01.roaneschools.com
admin.athenour.unionsd.org
rcs-micollab.roaneschools.com
*.roaneschools.com
wje.dcs.edu
rcs-micollab.roaneschools.com
admin.athenour.unionsd.org
paralosninoscms.org
admin.bes.roaneschools.com
reset.roaneschools.com
reset.roaneschools.com
*.roaneschools.com
aak8.org
roaneschools.com
admin.athenour.unionsd.org
rti.roaneschools.com
admin.oshs.roaneschools.com
admin.oshs.roaneschools.com
aak8.org
reset.roaneschools.com
acacia.fullertonsd.org
rcs-micollab.roaneschools.com
weec.dcs.edu
mail.roaneschools.com
cms.roaneschools.com
reset.roaneschools.com
aak8.org
admin.bes.roaneschools.com
*.roaneschools.com
admin.athenour.unionsd.org
admin.clearcreekelementaryschool.wearecms.com
mail.roaneschools.com
acacia.fullertonsd.org
cet.edu.mx
roaneschools.com
admin.athenour.unionsd.org
*.roaneschools.com
admin.carmelmiddleschool.wearecms.com
*.roaneschools.com
sphs.spusd.net
*.roaneschools.com
*.roaneschools.com
fhs.gvusd.org
hhs.roaneschools.com
acacia.fullertonsd.org
rcs-micollab.roaneschools.com
*.roaneschools.com

Certificate

The complete raw certificate details for rhs.roaneschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425683738093015001457569132557964652610242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 01:17:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 01:17:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rhs.roaneschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 676017783534070908513958250141643276037832211868508701557000594640852523656051436372488552945675075597191276027386659914430787352538571929010045770377545163625754081263282951620498893954285361731757294797884444968473474637912323453954873079199887520702318079191675438598936291743497779610110901634158147624412082581183580394366089194436348662493788253847317565750275336685279372920229255573216320576179816030431051133017680948135874071913108259914747012343795954897720182277814845032528245499233816808848400774622363118083941872653807229548825706627150786651417940160119154974932359338449872692601297211000786935853934039454826142936826943255821790344690780872665687077300212131750313324263744914081135731822382299424809877164845128469944889776177956505923539453099030407789564253777656111735394290900034012824492997917387691109088656626263165685675952625269002405927363018887332951304100087199719581533235160975642211262073669574527117591137597413265503818915517626028554515594397878377132523070605944883929457134429560613382557714840223249888173591677083959490977377708892251366638225241364740734859382728496989940672295087960758562038835946124727401250723884681262081559243572774656243420690092104860289053293604462633745652773889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							376757c4a5530625b7781c1cefc130fc51efd026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhs.roaneschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c8a29deec0000040300483046022100ef992bcb7d79d89e6949e7bf69849f827a35cd045186b932cfbad619d5b187ac022100bf8ac1c6a6017d325030c513ca011e995e2d2b5cbbeb63fc997031440386150e0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c8a29dee800000403004730450221009327eca8b23bc84a4ee5dd99ba40131ebc2ad33c844b5deaff0a722131e8fcc80220214d05bf01c6daedbdbe327523a8ee3c26ece0c7bf50725d78412b926c53e0f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005960006ae258d106caf16e115f8f99b67dc522086425ed385ffd6c8cac2274c4cd229fdb472ff048c4755eb5259fddd8246d492a5fc2474b16b55bd0f33d8244b349a4cdd72786ab3f78d4789b0efd3d2883cd152b7dd591223036545e0132b6ce2ca7a6ccc802d6e98b96a559080c5c3af059c1962851b159fcb9e2b0586a788240ad572481a8da30619887a8c530424463d36a04c0d7ff96014c7581eb7977343e70ee5be29cfdace798feb8dc3d623e08c852a484146f440571b1cfc37943845a4608b0834e9a2b4b5ddf4289243fb05c48992447c4bd58719e653053b751b89a1f15a86fe3c9b184539393cd271c7e9129b30b03b1b4bec4465eef29a686