bailey.tiftschools.com

Issued by R3

About this certificate

This digital certificate with serial number 03:64:2d:8a:c4:16:79:e0:d5:fa:f0:f9:70:42:af:9f:2f:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bailey.tiftschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:2d:8a:c4:16:79:e0:d5:fa:f0:f9:70:42:af:9f:2f:b9
Serial Number (int): 295425630261284406693808873630882745757625
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:bc:89:a1:b9:84:c1:a0:57:2c:5c:61:67:87:ea:ff:3b:86:a9:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:49:5e:86:6c:26:99:96:79:a5:75:c2:0d:73:1e:7a:18:67:6f:e5
Fingerprint (sha256): 91:22:a2:f9:d3:4f:fa:9f:a8:87:17:79:51:53:7f:b9:db:e9:e1:75:ad:d8:cc:c7:41:e7:e4:ca:b0:85:e8:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bailey.tiftschools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bailey.tiftschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bailey.tiftschools.com

Other certificates including the domain name tiftschools.com

(limited to 100 certificates)
admin.almadinah-school.com
abramfriedmanoc.org
abramfriedmanoc.org
admin.newbernmiddle.gocats.org
jes.pullmanschools.org
ahs.oc-sd.com
campus.tiftschools.com
abramfriedmanoc.org
tiftschools.com
bell.robla.k12.ca.us
reddick.tiftschools.com
admin.athlosbrownsville.org
admin.almadinah-school.com
tiftschools.com
admin.athlosbrownsville.org
athlosaustin.org
hms.frenship.us
tiftschools.com
admin.almadinah-school.com
anniebelle.tiftschools.com
lorenaisd.net
lms.pullmanschools.org
admin.rembrandt-elementary.vanguardacademy.education
www.pcsd4.org
www.saltlake.k12.hi.us
anniebelle.tiftschools.com
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.almadinah-school.com
lorena.exteraschools.org
abramfriedmanoc.org
bailey.tiftschools.com
abramfriedmanoc.org
campus.tiftschools.com
tiftschools.com
admin.hlc.gocats.org
tiftschools.com
sixthstreet.tiftschools.com
campus.tiftschools.com
www.mountalverniaacademy.org
tiftschools.com
www.tiftschools.com
*.tiftschools.com
tchs.tiftschools.com
reddick.tiftschools.com
admin.almadinah-school.com
admin.hickam.k12.hi.us
northeast.tiftschools.com
delbosquemexico.com
abramfriedmanoc.org
jtwilliamssecondarymontessori.wearecms.com
charlesspencer.tiftschools.com
pluto.tiftschools.com
holyfamilyhs.com
admin.almadinah-school.com
www.gordonbernell.org
mattwilson.tiftschools.com
leusd.k12.ca.us
bailey.tiftschools.com
admin.almadinah-school.com
admin.highlandrenaissanceacademy.wearecms.com
tiftschools.com
anniebelle.tiftschools.com
anniebelle.tiftschools.com
admin.almadinah-school.com
lastinger.tiftschools.com
id-rapidportal.tiftschools.com
admin.almadinah-school.com
northside.tiftschools.com
kes.pullmanschools.org
www.lemondenorman.org
admin.almadinah-school.com
admin.almadinah-school.com
admin.butlerhighschool.wearecms.com
admin.newbernmiddle.gocats.org
sixthstreet.tiftschools.com
lennox.k12.ca.us
kalihi.k12.hi.us
admin.almadinah-school.com
admin.pes.davidson.k12.nc.us
abramfriedmanoc.org
campus.tiftschools.com
eighthstreet.tiftschools.com
admin.gordonbernell.org
www.beethoven-secondary.vanguardacademy.education
admin.almadinah-school.com
omega.tiftschools.com
charlesspencer.tiftschools.com
abramfriedmanoc.org
admin.sssq.org
admin.almadinah-school.com
garfieldelementary.org
tiftschools.com
id-rapidportal.tiftschools.com
admin.cecdc914.org
www.materdeiperformingarts.org
admin.almadinah-school.com
admin.almadinah-school.com
castellanos.caminonuevo.org
abramfriedmanoc.org

Certificate

The complete raw certificate details for bailey.tiftschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295425630261284406693808873630882745757625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 03:00:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 03:00:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bailey.tiftschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900593689727037243149440025835274962740857353030642071737783446206687133251622803156772694004179066671575657132927678480500180409071240100256068791878093914757959673716594372091927274072730756013778248457088324834788645471014069039612081979632367455762034430431188328871757070948283586627684966718384168535366897744691424916366317182117040289776860432581296646413891059829760725771055662256825447877265988650950840052877066294190602926076001059866961161234834190272396628723567546852708197166235290563646005333980551333382819551219012075833944387963583705319134106030331893648083348490091718749811469450568350291354746148618696749488611365665328310953857831087297659235957547650867350985447047295939331825197836075208834698927679828290198087064441456741507505013344126827203413233584650504439659675230013693547713625126289378083479586665264021103590341821863987632780746725832620733335549029558171973807086272177051749265535331131172830160954322422567177187775895684289305151104770938135538776963674517960802672478380481516258551526093584273626021776989228487488973882092403688157731282694765594507955269291550829703828325025009018342506078109556503841936703791809879992511877346399661823280610515134022152883474392253841424653916961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97bc89a1b984c1a0572c5c616787eaff3b86a94d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bailey.tiftschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df304fdff0000040300473045022046be13a808dad106c7001c083592dc92edc5808534a6419be80caac0e39d86770221009a7964207c81d3b85d509ed895c86cfb99cb82e9f4a4b77937b5b19f37cd4aca0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df304fe240000040300483046022100dabc3de75ba2044057c62e59bc9c2f7b7b260a3a33abea9e4b1ce2091f9b8608022100f77819d080d7f77b8bc870e318f0d9cc07ee6386e6e96a36759dc239e362bb46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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