mfilter.niesc.k12.in.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:b4:8d:d1:fe:db:7c:75:f6:04:6c:70:38:68:a1:8e:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mfilter.niesc.k12.in.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:b4:8d:d1:fe:db:7c:75:f6:04:6c:70:38:68:a1:8e:28
Serial Number (int): 309556668943446889678855689655056511110696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:2b:d8:89:8b:41:df:84:10:29:4b:55:de:0e:d5:80:01:21:77:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:48:df:59:d1:61:3c:68:53:50:66:6e:e5:0b:7a:6a:16:de:6f:bf
Fingerprint (sha256): 81:79:90:db:96:b0:84:a2:61:a6:76:d4:e0:55:c6:4f:19:30:4a:d2:79:43:fe:d0:b6:38:78:b4:25:ba:3f:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mfilter.niesc.k12.in.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mfilter.niesc.k12.in.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mfilter.niesc.k12.in.us

Other certificates including the domain name niesc.k12.in.us

(limited to 100 certificates)
niesc.k12.in.us
ns2.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
www.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns2.niesc.k12.in.us
ns1.niesc.k12.in.us
www.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns3.niesc.org
events.niesc.k12.in.us
ns2.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns3.niesc.org
ns1.niesc.k12.in.us
ns2.niesc.k12.in.us
niesc.k12.in.us
procurement.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
www.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
www.niesc.k12.in.us
invoice.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns1.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns2.niesc.k12.in.us
www.niesc.k12.in.us
ns1.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns2.niesc.k12.in.us
ns1.niesc.k12.in.us
ns2.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
ns1.niesc.k12.in.us
mfilter.niesc.k12.in.us
www.niesc.k12.in.us
niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
mfilter.niesc.k12.in.us
ns1.niesc.k12.in.us
zimbra.niesc.k12.in.us
www.niesc.k12.in.us
ww2.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns2.niesc.k12.in.us
zimbra.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns2.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
www.niesc.k12.in.us
niesc.k12.in.us
mfilter.niesc.k12.in.us
ns2.niesc.k12.in.us
ns2.niesc.k12.in.us
mfilter.niesc.k12.in.us
mfilter.niesc.k12.in.us
zimbra.niesc.k12.in.us
ns1.niesc.k12.in.us

Certificate

The complete raw certificate details for mfilter.niesc.k12.in.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309556668943446889678855689655056511110696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 06:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 06:14:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mfilter.niesc.k12.in.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745902915094192742539857804534580986955365952340341982594855917832485604232336713546221525446757356114532287914624910581156188947229494865505501549166776282577992762557083531061917454316197240938368196565340024016225418103431105305378770337725696560681912826464526397103522068317906931133487507922421133553506020759372419512026271791022142677813916475847072093841325306247891097151763737800476878260728538398256877653722656288952916403695401843744805055137301193093432609478956517571349886846369901561525080226050016137741412884301819224131009652033174883678490593415257061439047058579400541676791611380526993412337674231971941400409909112082659601952688576676419090817026401101172087311932326331374703462650639762630033094916881325341095386590248974364560833224140000146123294624751697104754892417806192025101133665683724215841142514690729912252363301864553674253882857063697165921638841236884250180353618598392949944470003179538690604534839543549610894139761754438636745964324080832436414506039732486511239430782934890684158139115035708614081115911510819203812790754999346716636182440360115723871062142216080687331863824055055601470466747552262904743458038715930668833219640175256912308333691617354647633971377963254216510943576873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							902bd8898b41df8410294b55de0ed5800121779f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfilter.niesc.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a106590bd0000040300463044022052b3b32805bfc6c478f42a80b08e96257b9a825b162ab5fda2dc1abfa0bcd10202201c041751521dea8b5d4f05cb13551be205e614498a86261e8c5e5f3b65c3ac78007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a106590a600000403004730450220343ffa88387fee26ce2283489c040a57faadb18d5c3936b388c1ae2f0979dd52022100b75323e7ca79e15f116b4ebd7898b087b702917a9a98817be8328a4b959a2889
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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