monument-valley-high.sjsd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:cf:6e:ca:3a:f5:86:a5:1d:07:27:22:5d:da:b0:80:48:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=monument-valley-high.sjsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:6e:ca:3a:f5:86:a5:1d:07:27:22:5d:da:b0:80:48:37
Serial Number (int): 419034858799009340733563042769024009127991
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:34:ef:c0:b9:e6:21:f1:9f:69:d1:73:35:35:21:c6:44:53:ac:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:a1:b1:ae:dd:c8:ab:73:bb:4f:bb:e7:46:be:bb:c3:d7:84:e4:7d
Fingerprint (sha256): 82:f0:c0:e0:07:a5:37:fb:a1:02:41:74:5b:f9:39:52:aa:db:ad:94:ff:b8:fd:d2:11:02:23:44:f1:e8:4b:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate monument-valley-high.sjsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monument-valley-high.sjsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monument-valley-high.sjsd.org

Other certificates including the domain name sjsd.org

(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org

Certificate

The complete raw certificate details for monument-valley-high.sjsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419034858799009340733563042769024009127991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 01:35:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 01:35:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monument-valley-high.sjsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878093851007837205377223423299044323490755192391293700221265203268281174612804755476417932308518363916268658280618469039960330035709227546971475130325843549649710038742795758296718188183661603585411498488955841180200898583658314699172834332347953660785802324504817370158979264358561340716324415922203367917356864094403612548948603737844757724758224288580650823381388464256755409590449203109754553887749857494462864933132969412124339030722934744539258936272347429537491674149993833159702268240487566935596331567800750353815834697354878795945231736546579168797077728800951569520337374287930948666004609114084996904995964523982800563142518467709219079046562269920418592447187454040238270319639322712301823404680439540795521877330701522954611275702522251213968457845790734438921869594186890362244333913157700108643421491781706784641095764347400267158065869075353098437619832376859741610513313244822982255332781351211978421074143883125972113921494434239346378071623026519660004027534280175778217884412860366543733654267506506227568566494997387758121067425997529404345312019722187224240914400519230067137982563775466192447514707930022176616724768493522001008092600158760754994968362155495958320848891602693268702310677019123969032816695057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef34efc0b9e621f19f69d173353521c64453ac63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monument-valley-high.sjsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5d5ee3d900000403004730450220674473d258f71d7292b6f20b714a9a0821812dec506a24f349c95decde26949002210089b934e39a5e657f2189b5517bbc74d40b0f7d68aaac45b0485eada85aad3a1a007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d5d5ee3e70000040300473045022021d5c228ddef3f780c97dfada9887aff5ab4876522173b23ff60d1bffe8d2d08022100f3849df65cedd4faf9aea5d32c59cf26f86a3b79c99fcf6a93f7ba5c1174c8c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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