app.onepreschool.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:94:35:1a:bb:90:69:68:7f:49:78:14:87:6c:96:5f:8a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.onepreschool.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:94:35:1a:bb:90:69:68:7f:49:78:14:87:6c:96:5f:8a
Serial Number (int): 336395979995199881154078527802132961582986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:1d:a9:df:de:82:b5:ad:32:31:b1:f6:7d:44:57:18:2b:7f:70:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:8d:83:59:f6:3a:f1:ed:98:49:d1:21:c7:35:58:48:9a:78:b0:61
Fingerprint (sha256): 93:62:61:50:ec:47:0a:db:96:41:8b:ea:f6:62:2c:78:23:5b:cf:43:53:fc:5f:de:a6:d2:c6:6f:33:4e:2d:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.onepreschool.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.onepreschool.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.onepreschool.com
wonderschool.com
www.onepreschool.com
www.wonderschool.com

Other certificates including the domain name onepreschool.com

(limited to 100 certificates)
onepreschool.com
onepreschool.com
app.onepreschool.com
onepreschool.com
app.onepreschool.com
onepreschool.com
onepreschool.com
app.onepreschool.com
onepreschool.com
app.onepreschool.com
app.onepreschool.com
demo.wonderschool.com
app.onepreschool.com
tls.automattic.com
onepreschool.com
app.onepreschool.com
demo.wonderschool.com
onepreschool.com
onepreschool.com
www.wonderschool.com
app.onepreschool.com
app.onepreschool.com
app.onepreschool.com
staging.onepreschool.com
app.onepreschool.com
staging.onepreschool.com
app.onepreschool.com
app.onepreschool.com
onepreschool.com
app.onepreschool.com
onepreschool.com
onepreschool.com
app.onepreschool.com
app.onepreschool.com
tls.automattic.com
app.onepreschool.com
onepreschool.com
demo.wonderschool.com
staging.onepreschool.com
staging.onepreschool.com
staging.onepreschool.com
app.onepreschool.com
onepreschool.com
app.onepreschool.com
onepreschool.com
onepreschool.com
onepreschool.com
app.onepreschool.com
onepreschool.com
staging.onepreschool.com
app.onepreschool.com
staging.onepreschool.com
onepreschool.com
app.onepreschool.com
app.onepreschool.com
app.onepreschool.com
staging.onepreschool.com
onepreschool.com

Certificate

The complete raw certificate details for app.onepreschool.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0SLwBcjOGp+kt1i2ooF
so2yoXXBBFIuKNeRAnbpNJ04r6gNGE8+ArfzFGpGxuXv76qeuW2wU0L2shduG3fm
6plXwNRgey6Dhl5xiPXSNL+Cp4ShXwwyLtDWIRqLSZqBhnFd19qj58k43R3llVCF
aKQRHttS0v3F9Vpitc+nvdEf1pZxmHUY9iV8pBu0pvloBz1WVhw/7fOPAGRE422g
KiXEQd5EekVPdTfTufe0Btn2rBn8lEWBPA2KOl/2lthONtmbxuK4lSSyLfWc1+tT
6zafMN8kHCjmWj+K7hR5BwCj59eri2YcB7GlPW3kQ211mn4sL8veHPbp2+DTyRno
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336395979995199881154078527802132961582986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 23:20:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 23:20:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.onepreschool.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22125504612049406408956297171248285526823374689066856487088426876101597148270650160416316874129539990751623489777557087800093491912161004301950521013330800458540229293368087716035215094779491595766617012336738179407334265648942633664262852039047194935503959626903303107694099991992808928218867447369664372448571101724838804416674126364871843211538634119264020807460124655881551158666949127420347749115686463289482671802621560817660935024211517369106145219505075328610055645540421388580165952020065655571274574640581591072022861926496356581039217139311963959937124094372953544816333214439939178802158410395525555284043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f1da9dfde82b5ad3231b1f67d4457182b7f7012
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.onepreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onepreschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonderschool.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166fafe2e6f000004030048304602210080b56513be024389ffb4b05d969382f7775428bb476e83f4c0dc3aad3ad9a695022100f234557f2203562c398e3a7ab3fe5fee4f52043b96c2606caf757808ce72410100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000166fafe2e6f0000040300473045022017df6475fa48ee2ab16067d935223e0beafcf973b278483681aadca4d67e9803022100b9e2f2881b9b15a40e8a04652714ada051b038bbe396bb8719a7e4a518010fe2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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