www.lancasterisd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:76:74:32:00:45:be:a1:6e:85:53:03:b5:14:bd:0a:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lancasterisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:76:74:32:00:45:be:a1:6e:85:53:03:b5:14:bd:0a:16
Serial Number (int): 325127112633576507827036982271300993878550
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:47:5a:a2:55:6d:a5:2f:08:9c:3b:b4:fe:84:25:d6:7c:95:c8:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:47:f9:bf:b1:48:4b:8c:1c:79:97:c7:8d:41:0d:75:3a:08:9a:11
Fingerprint (sha256): 91:61:4e:30:88:85:f6:d0:a7:44:b7:af:e6:c5:84:1a:f7:14:82:0e:bb:fd:67:b2:a3:5b:88:74:3b:b0:8c:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lancasterisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lancasterisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lancasterisd.org

Other certificates including the domain name lancasterisd.org

(limited to 100 certificates)
aac.woccisd.net
admin.badenpowell.edu.mx
www.bradleyschools.org
cf.aceroschools.org
lancasterisd.org
lms.lancasterisd.org
admin.wjh.wintersisd.org
acc.ausdk12.org
mil.ldcsb.ca
admin.armstrong.pusd.org
exchange.lancasterisd.org
ble.lancasterisd.org
admin.wcms.mpusd.net
acc.ausdk12.org
acc.ausdk12.org
www.hwrsd.org
lancasterisd.org
admin.allison.pusd.org
admin.jsms.rsu14.org
www.brackettisd.net
www.stgregsschool.org
eduphoria.lancasterisd.org
occomets.org
eduphoria.lancasterisd.org
ngc.lancasterisd.org
morelandpreschool.moreland.org
aac.woccisd.net
exchange.lancasterisd.org
acc.ausdk12.org
www.hwrsd.org
eduphoria.lancasterisd.org
eduphoria.lancasterisd.org
admin.wjh.wintersisd.org
admin.cathedralchapelschool.org
exchange.lancasterisd.org
ngc.lancasterisd.org
admin.bmj.scott.k12.ms.us
acc.ausdk12.org
www.hwrsd.org
gwc.lancasterisd.org
hou.lancasterisd.org
exchange.lancasterisd.org
ckcs.lskysd.ca
admin.aes.cvsd.org
lancasterisd.org
admin.allison.pusd.org
rpm.lancasterisd.org
rowlandschools.org
admin.hs.gsd.wednet.edu
admin.aceroschools.org
admin.badenpowell.edu.mx
admin.rems.cherokee.k12.nc.us
rhe.lancasterisd.org
huntingtonisd.com
cf.aceroschools.org
www.lancasterisd.org
aac.woccisd.net
exchange.lancasterisd.org
lancasterisd.org
www.rsu14.org
eduphoria.lancasterisd.org
admin.bmj.scott.k12.ms.us
eduphoria.lancasterisd.org
castaichighschool.net
eduphoria.lancasterisd.org
acc.ausdk12.org
ohs.otsegops.org
admin.op.aceroschools.org
www.thrallisd.com
www.lancasterisd.org
ngc.lancasterisd.org
www.tcsk12.com
res.rlisd.org
eduphoria.lancasterisd.org
admin.athletics.rsu14.org
lancasterisd.org
eduphoria.lancasterisd.org
aac.woccisd.net
eduphoria.lancasterisd.org
www.cristoreysacramento.org
exchange.lancasterisd.org
acc.ausdk12.org
www.coahomak12.org
admin.ahs.cherokee.k12.nc.us
admin.huntingtonisd.com
admin.stjohn.k12.la.us
admin.badenpowell.edu.mx
www.lancasterisd.org
fallbrookhs.org
aac.woccisd.net
exchange.lancasterisd.org
*.lancasterisd.org
eduphoria.lancasterisd.org
admin.bes.cvsd.org
lancasterisd.org
ngc.lancasterisd.org
rhe.lancasterisd.org
admin.badenpowell.edu.mx
jsms.rsu14.org
www.badenpowell.edu.mx

Certificate

The complete raw certificate details for www.lancasterisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApNrGFrhTs2NLyRB683R2
bjItrdJ9uv0dZcKb5Cw8GWWHIsmy1fKNl+HDTh1T6KXL+hOU7BMJzxGyq+X9qUDo
dvb9Oc7F00vYEwjd6pXtZRBSQU/Bhsb2PH7XVV2QWv8ll6sIGZTi8p9CyFDGW33K
fWtK2DZW+qmNgnxEcZPtvM17zYaKngmF0AzWddSNdXG9jHYaT1yXpPfyTDl7P/EE
QvSRFXBT34X1lXs71qfak7rhlpDo3+U/qz4DsWBBOQI0GNBZa/0SFJMR6XmF25IM
PkjF7FM9cQMWl17zByRV6+uBOAkJ6/2xCvO8HaDHMslgrnWy8pGQOq4FF6Xi5q6b
YxSBPsvi98sVg+SvWpSs4Kb479HTJtplRTa/fiCMKSdCfuQCgPB8gAilC8svOaDg
O4jqah8Z9zt+Ss5c1OoXfAK2ndakguUv1oZg33eAqWdcpZdLqdyW0Xn5I4grAlI0
+VyZda2lpribUkbSSISstgsB98UK+Ofk7d5FV2ORlvR51/gDqDK6Yi4nJzHJfZZb
ceNfyt49qeDrDozccqXJB3rgikUaslTEYPxBoFllU/I+EYO4GzytT9QRMPdgCTjk
Bcg4wXHUvB686AI22tB4/ZKTanUbyticyte0yNQaVLFOyyqoUiDDyitEa4CJgGN3
skajSS2cf8fRbeb2SIOMPzkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325127112633576507827036982271300993878550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 01:15:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 01:15:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lancasterisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672548030166506563153059600338997894286027990999893516746666481254018504644758121953173239282637545826281432873371454497643553424136869979141276861441109565782893600510078928836735476648458446804412254508553972001705744406017508680678687782750313482170617352746233022649573558695509140106359858032204760598140373898322384736601003879418500539582024821470769682786551018538156671440067803274959759195842094543870526958482978124156272915615351284270572510468962277921450788423883309237192501038061730919702403197093776715714865127449956326085809463098232797300632613615596086257254125171864090654728860326381128073831448189468465468279047831379272092961146861198545518747538240603251431919236255179225285979166482480305186578162058039822209243217933228554362781293486191915563374461395560716044685892262358575603223003885883211907685355453330260477649907429177163300726235957945689180051809774159344248274093661556697690670505974583983655065129867048886957306936059794369913376121938781727962926878699225277183317006190615543229324749588845217693910541311476713788906079692230441372916602006313786180117782495557048348863740087627573592442866429747735170760794626127373216234720962620483056842583066639971640697906417154887141584289593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7475aa2556da52f089c3bb4fe8425d67c95c858
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancasterisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3e6639070000040300473045022100f1ec40aca8710d195d19aae0749bb98a07ff77c98cd10ddebc8eaf09a071e0c002205bbab2a8b54ce8b558b31302129fa823fa933ebb6fe04cd08008d4270896cc2d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d3e6639610000040300483046022100f2bd88e2feb318b0ad3ba3674eb6d2b9a74f5594900a13e071ba695bfd92924c022100ce78cd41edebc1dd21e1d052668f98770b332bcf9a783c347f6b9d6bf22a7d71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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