branch.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:36:75:bf:5b:76:91:20:64:3c:fd:44:59:db:ea:12:b0:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=branch.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:75:bf:5b:76:91:20:64:3c:fd:44:59:db:ea:12:b0:e1
Serial Number (int): 279868618868311343870497947919880054550753
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:f6:68:1f:d1:01:03:32:c5:08:66:78:02:99:3e:b2:cf:d1:22:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:d0:7f:bd:60:d2:6e:66:c8:3e:58:a3:11:46:33:94:96:46:c0:5a
Fingerprint (sha256): 93:c0:71:35:c3:75:b0:1a:a7:f5:38:44:c6:c4:4a:75:60:8e:c6:d3:e7:f8:0e:ae:08:47:53:93:7d:6c:05:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate branch.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for branch.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

branch.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for branch.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279868618868311343870497947919880054550753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 01:16:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 01:16:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'branch.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832228283971500846034579953813980272327527392633616855975026091155082690712118335432902132759008160909714523028440948534502230994784398320524080341414185452503384242609378809303114634522698267329614765756464246104590682588625160079895832543915787787138137252346401698922087835854285613531165861592992083878007992783371753947496446458673783464056609726643586682149161504633191298524396240835733430131998819769056236722892209437115565119909080981328998904498473445224467582689330580119691430896672686943952747187256625589356612219013790790708353601904496807644075651164381154480321347727055494763998130550865156712696382509955002762195988819986939845271854109186276068200481918271933723225324595271401360750379941049799960524257757423863842169148137726101920232612581300666238390674855475638309311015104409576852832777479557576097273745477079423325005589959275585091933425412464355749546461859681695344536684201456681600329183475629492534562620298353260182324648440488212789492671751929807434227771029774751210320940789808529877385835013591339486392735994262907502902760188260163702700779784317897734285511456846296348842941647008526668970416686817873336370804142975725248050439922674764924559826034044905253608892184476326872443957053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96f6681fd1010332c508667802993eb2cfd122df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branch.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001893349b4de0000040300473045022100962de485d96d85f4615da85891241b7e8443a1de0189070d62858a3531550aac022065d0a7b92a4bd0ed9d844552a4569c73de676f8de81641a89ab91c620d8d81ea007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001893349b4e40000040300483046022100dbde8d5bfaf1d8ff5eb2aec04eff76391dac21054acdf2f462c1a75cf416404d022100c36b5ea38d05d1781ee996823095c743e7efe84644092921c52297314372143a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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