www.cleburne.k12.tx.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d0:ad:e1:3b:77:c6:75:a8:98:5f:b9:9c:c5:56:bb:20:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cleburne.k12.tx.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:ad:e1:3b:77:c6:75:a8:98:5f:b9:9c:c5:56:bb:20:aa
Serial Number (int): 419459001962811885996186198698761433850026
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:ed:39:02:b5:49:7b:c9:1d:54:99:e4:4d:f0:06:b2:a6:85:b9:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:50:88:52:d3:0a:d9:89:45:7d:14:bd:fa:87:a7:d3:c2:7b:e9:ed
Fingerprint (sha256): 91:62:a9:96:df:2a:80:95:49:eb:af:c8:62:8d:f6:de:af:85:9d:45:0d:7b:86:fe:50:d9:e4:d7:ab:11:76:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cleburne.k12.tx.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cleburne.k12.tx.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cleburne.k12.tx.us

Other certificates including the domain name cleburne.k12.tx.us

(limited to 100 certificates)
aacs.net
admin.adultlearning.sunrisesd.ca
adams.cleburne.k12.tx.us
admin.aristoiclassical.org
ige.humphreyscountysd.org
skyward.cleburne.k12.tx.us
admin.aristoiclassical.org
castle.sebastopolschools.org
www.sebastopolschools.org
mustangsla.org
admin.nms.davidson.k12.nc.us
her.frsd12.org
adams.cleburne.k12.tx.us
bhs.bcsdk12.org
admin.bhs.bcsdk12.org
www.icabh.org
aacs.net
mas.mpusd.net
www.pilibospreschool.org
brookhaven.sebastopolschools.org
adams.cleburne.k12.tx.us
www.ms358q.org
admin.aristoiclassical.org
adams.cleburne.k12.tx.us
middleschool.frsd12.org
drs.ccsd1.org
adams.cleburne.k12.tx.us
admin.pburgsd.net
admin.lsprep.org
admin.aristoiclassical.org
www.cleburne.k12.tx.us
edlio.com
adams.cleburne.k12.tx.us
admin.second.exteraschools.org
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
*.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
barbaravick.org
ms358q.org
www.corecharter.org
admin.arletahigh.net
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
rlc.ausd.net
adams.cleburne.k12.tx.us
rosebudacademy.com
skyward.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
www.cleburne.k12.tx.us
aacs.net
lgusd.org
admin.ccsd1.org
hartorah.org
www.erpsk12.org
aacs.net
vmhs.mcisd.net
northside.wisd.org
admin.ccsd1.org
admin.aristoiclassical.org
admin.highschool.mbgsd.org
castle.sebastopolschools.org
admin.kohalahs.org
nhms.lowndes.k12.ms.us
ca.arrowacademy.org
frsd12.org
aacs.net
adams.cleburne.k12.tx.us
adams.cleburne.k12.tx.us
aacs.net
aacs.net
school.lexnyc.com
admin.apexhomeschool.org
admin.ves.monroe.k12.tn.us
edlio.com
arletahigh.net
adams.cleburne.k12.tx.us
admin.aristoiclassical.org
hs.cumberlandacademy.com
sketches.edlio.com
irlandesmonterrey.com
adams.cleburne.k12.tx.us
admin.waikoloaschool.org
www.cleburne.k12.tx.us
santafe.cleburne.k12.tx.us
admin.aristoiclassical.org
www.cleburne.k12.tx.us
www.cleburne.k12.tx.us
admin.cherokeeisd.net
ops.aacs.net
ca.arrowacademy.org
admin.colonies.sunrisesd.ca

Certificate

The complete raw certificate details for www.cleburne.k12.tx.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419459001962811885996186198698761433850026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 23:46:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 23:46:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cleburne.k12.tx.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938339077808551353243145302185878453431140026178029041168666484298811670640500609067012524439834122598035678048921464419052097690364635090774788672005134027059484694421993802571695889801394398300766596062450316567275815461300895833847249451742397356433737175589641814169110397121220837224685974859392385183796807789570597935691929603503268629007987058447132292108459533389069883478592505343857894470178032499260894081173856697892501044189478527585036226810338032807341207005181078177068504995907397480584009922056193661713756635244839063037831745643851540319338889647577841169549203224737935707833886548735910788506334210975422186972677812627577202513593934202646163451293812023283402181790101849205270826509695984431173586159224723122639964514834059607138064666525452301773306377459188593900599147420890758843438723263403077043766955225832386512557497149744407680979491247486215495219840183169205293575169771844625847911174966171134743817655902862106904947713605740019730866345216198541454792177030981222786476546970844430237226892112254939769391398565979727363477510645149803669469618484066571648634173084030913019324255325140042993238263892037173509437606424696894350969996898802163579327889533683077190299267731776241013579759717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13ed3902b5497bc91d5499e44df006b2a685b9d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleburne.k12.tx.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c1c4b48550000040300483046022100a97d96b4d56a2ff2134a0424627e490af8d2d5a929a9a4640ebabf4359be19fc022100b8510ea4a759765f673d85823c5a473d364be1cb0234b9b0b5ffc66e9cd1c33d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c1c4b48580000040300463044022021c7cca28524e8bc8413c5ee03139de36fd728662f6fc974fa92bb228be4cb5d02206f8f2344935e1a980250d9cceb3d03738d147d20eab9d6ccfecfd4466f32d2c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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