charlesspencer.tiftschools.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:16:b1:12:5d:18:b2:c7:34:e6:71:37:5a:45:c5:89:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=charlesspencer.tiftschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:16:b1:12:5d:18:b2:c7:34:e6:71:37:5a:45:c5:89:81
Serial Number (int): 316492763661383235583947539174667722262913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:ad:bc:7c:13:b5:13:1b:30:51:93:dc:fe:ec:76:ff:4b:ff:bc:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:b0:f5:73:27:d7:3f:0b:b9:e3:91:7d:65:de:3b:eb:13:95:3d:09
Fingerprint (sha256): 7a:04:01:3f:f6:8c:1d:0c:cb:61:b0:44:a3:02:dc:d4:93:6b:13:85:eb:b1:a8:34:0a:93:ac:18:40:2f:34:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate charlesspencer.tiftschools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for charlesspencer.tiftschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

charlesspencer.tiftschools.com

Other certificates including the domain name tiftschools.com

(limited to 100 certificates)
admin.almadinah-school.com
abramfriedmanoc.org
abramfriedmanoc.org
admin.newbernmiddle.gocats.org
jes.pullmanschools.org
ahs.oc-sd.com
campus.tiftschools.com
abramfriedmanoc.org
tiftschools.com
bell.robla.k12.ca.us
reddick.tiftschools.com
admin.athlosbrownsville.org
admin.almadinah-school.com
tiftschools.com
admin.athlosbrownsville.org
athlosaustin.org
hms.frenship.us
tiftschools.com
admin.almadinah-school.com
anniebelle.tiftschools.com
lorenaisd.net
lms.pullmanschools.org
admin.rembrandt-elementary.vanguardacademy.education
www.pcsd4.org
www.saltlake.k12.hi.us
anniebelle.tiftschools.com
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.almadinah-school.com
lorena.exteraschools.org
abramfriedmanoc.org
bailey.tiftschools.com
abramfriedmanoc.org
campus.tiftschools.com
tiftschools.com
admin.hlc.gocats.org
tiftschools.com
sixthstreet.tiftschools.com
campus.tiftschools.com
www.mountalverniaacademy.org
tiftschools.com
www.tiftschools.com
*.tiftschools.com
tchs.tiftschools.com
reddick.tiftschools.com
admin.almadinah-school.com
admin.hickam.k12.hi.us
northeast.tiftschools.com
delbosquemexico.com
abramfriedmanoc.org
jtwilliamssecondarymontessori.wearecms.com
charlesspencer.tiftschools.com
pluto.tiftschools.com
holyfamilyhs.com
admin.almadinah-school.com
www.gordonbernell.org
mattwilson.tiftschools.com
leusd.k12.ca.us
bailey.tiftschools.com
admin.almadinah-school.com
admin.highlandrenaissanceacademy.wearecms.com
tiftschools.com
anniebelle.tiftschools.com
anniebelle.tiftschools.com
admin.almadinah-school.com
lastinger.tiftschools.com
id-rapidportal.tiftschools.com
admin.almadinah-school.com
northside.tiftschools.com
kes.pullmanschools.org
www.lemondenorman.org
admin.almadinah-school.com
admin.almadinah-school.com
admin.butlerhighschool.wearecms.com
admin.newbernmiddle.gocats.org
sixthstreet.tiftschools.com
lennox.k12.ca.us
kalihi.k12.hi.us
admin.almadinah-school.com
admin.pes.davidson.k12.nc.us
abramfriedmanoc.org
campus.tiftschools.com
eighthstreet.tiftschools.com
admin.gordonbernell.org
www.beethoven-secondary.vanguardacademy.education
admin.almadinah-school.com
omega.tiftschools.com
charlesspencer.tiftschools.com
abramfriedmanoc.org
admin.sssq.org
admin.almadinah-school.com
garfieldelementary.org
tiftschools.com
id-rapidportal.tiftschools.com
admin.cecdc914.org
www.materdeiperformingarts.org
admin.almadinah-school.com
admin.almadinah-school.com
castellanos.caminonuevo.org
abramfriedmanoc.org

Certificate

The complete raw certificate details for charlesspencer.tiftschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgISA6IWsRJdGLLHNOZxN1pFxYmBMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTcwMjE4MDhaFw0yNDAzMTYwMjE4MDdaMCkxJzAlBgNVBAMT
HmNoYXJsZXNzcGVuY2VyLnRpZnRzY2hvb2xzLmNvbTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBAL+OITdieakBIi2Pk+UnpVHxqM1vfrtv79djr2EnliKt
HEPjag5sp7qRl7LxkMMf3cLq+n02ZBccJW6zdHGMSAN8mpP3sH5VY/IhbPdO6RLn
dfmNT+uWbUnk0+s+4Ix0hSX1FUs4W6pbURfmwyGa2Q1I2aeSO2IpK81M6/dTXaa7
BM9ggw63cpBm73va78ISnQhgcGG4jIXHzhN6kNcpNQd9iV0fpkpjcMW0odcNPTVr
h44GjdTlDoST2/yKlLLoiwYCW6iVOoW8JEQOhY7YFocF0lBm1lR6Yg1NSDGx4D4E
49R1iEn1eHyqSVtiMDlyCcktmuxLpFi1VC0nwomfO5bVOY1BYmYmh1oqDDqEsbKA
uZn1iQaDQwXDKFunVsCsJLkfZCeCWIel+jaScbRDSVeUU7ERQFqT/zo+w+jPwOu1
G4GA/6/DZbd+MQOOs7JAGvxu8yElIY659HxuXhz+v46w/1+ERgDh7hBeduGHU0b4
XxSC/t2RpeLmpTgN2G/b8Fod665qT9atrn6g/VAHtTQW7Zvi6aMX/WCJwbKzdH3m
o4DaqOh7uWp2t5nI7QZgXINLxG+Gipx/5dX3UnO9H3NKQ1dTT1q6FPlfQsrniZXm
b2jIJLOOftMQkjKRq6ERgRRJiIc8fVTfd1uYgE7J11p23lJmviweOMXHa/78XadB
AgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCWtvHwTtRMbMFGT
3P7sdv9L/7ygMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsG
AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIG
CCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCHmNo
YXJsZXNzcGVuY2VyLnRpZnRzY2hvb2xzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABjHXH9fEAAAQDAEYwRAIgO7sJmWAN/aOchB3kwbwdyvze
fnhGmnQuW8SjqA/B860CIF3qBG11Sx4rLTDxPIkrbJ+8xGOHw30LfrakBv2BerDk
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMdcf36AAABAMA
RzBFAiEAtxiyJM5CqYQ16rFk3VuUUhHo1WgnDtR5/+vlTA7jzmwCIFxAE8odQQrj
FRmVvzBeszNcfZjFNwhsNpH18Zdk5+LfMA0GCSqGSIb3DQEBCwUAA4IBAQBpJrZ9
Tm6qWDGribVV2FEL7MHHzxWxo30Sous8q8twDPFksq489OgPGUvUKQL+hp+bBlym
LgQ20RYw+FdfyxBF2QB2wURiH32cAwLrFD9+oewtegzdfh96SUMPqQVDkHDmOEB8
ACcV//TaVWrGydWkUfUMlTAGsilnm9RYJxhYNLY6BgJKx0NjsHsCysf8v+v8shk9
i9aAUh86gS4J5BriaUX/KhoPsloRf1cSm+hd5MhKL7Vsu2hCv1le0LVR1lhyk+Dz
Lq3N0y2IjAIWyRhP4IGFeXvx7KRL2m6W922ul67GHmv7q4lKe4he7BU7m6VyxbIJ
3347CzbAFoO/42EL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316492763661383235583947539174667722262913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 02:18:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 02:18:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'charlesspencer.tiftschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781477012292611283621993315371458522961802874340360313618275899806165848920055027030138120473913999374728781955861110162187538651065865092189576791298769910825864561052181396013961271871993234281443201091528426701575131307065132738189740969389101360248528930387376283363478466333908336648350347785235358528799754101075062407676736328092393719985362229797551380773826208572400518955919369182770498001384447001986194425202038066491709197694560863054812826442254957931626960732424480535460649296329445771710749889694998442924360564629250915065293690318317575589458071082121022667047420119517872026142655996152655786972554536038971439337172196848066519899197999369697540339116085817016246729429221272385894696722329345760968858749479374711918516740798567458750648197829253786272961559893667726383350876411728163006045594028373791898403795115127088525012311507581704358236902040090668894741603387208198969444139106799979631284756800250658375031176690451905385266596522202058077132845929507849160928183901068010921579370759513653035636684879705244940326705540431115236562347568973439060563139597802655416089333746315550215717409494724207471407843667798377145318535234450460250415076332610620497878608908240268830690411263894245393133578049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25adbc7c13b5131b305193dcfeec76ff4bffbca0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlesspencer.tiftschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c75c7f5f1000004030046304402203bbb0999600dfda39c841de4c1bc1dcafcde7e78469a742e5bc4a3a80fc1f3ad02205dea046d754b1e2b2d30f13c892b6c9fbcc46387c37d0b7eb6a406fd817ab0e4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c75c7f7e80000040300473045022100b718b224ce42a98435eab164dd5b945211e8d568270ed479ffebe54c0ee3ce6c02205c4013ca1d410ae3151995bf305eb3335c7d98c537086c3691f5f19764e7e2df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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