cresson.llcsd.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:5d:7b:80:ed:06:cd:88:39:28:84:66:d1:51:36:a1 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cresson.llcsd.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:7b:80:ed:06:cd:88:39:28:84:66:d1:51:36:a1
Serial Number (int): 5802300541925624922947260686225454753
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e0:f3:18:bf:8c:65:56:f0:0b:4b:55:a8:93:7c:f3:78:3d:86:fb:1d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 81:a6:e1:c3:a2:68:7d:37:c4:87:6c:79:b7:c1:51:8e:e3:1e:10:66
Fingerprint (sha256): 94:85:a3:f3:b1:92:3c:48:7d:6d:ad:68:e6:08:cc:6c:38:42:b9:06:8d:a2:0d:7d:35:d5:8f:3b:99:67:ae:4b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cresson.llcsd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cresson.llcsd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cresson.llcsd.net

Other certificates including the domain name llcsd.net

(limited to 100 certificates)
www.stfrancishigh.net
williamorr.llcsd.net
jersey.llcsd.net
186streetschool.com
68thstreetes.com
admin.aasdcat.com
williamorr.llcsd.net
lakecenter.llcsd.net
*.llcsd.net
admin.lisbahamas.com
cte.mvusd.net
lakeview.llcsd.net
lisbahamas.com
llcsd.net
admin.be.ysd.k12.sd.us
llcsd.net
hs.humphreyscountysd.org
186streetschool.com
www.llcsd.net
llcsd.net
cresson.llcsd.net
cresson.llcsd.net
paddison.llcsd.net
www.regentsas.org
186streetschool.com
admin.chestnut.painesville-city.k12.oh.us
lvmhs.lucernevalleyusd.org
studebaker.llcsd.net
186streetschool.com
admin.lakeview.llcsd.net
68thstreetes.com
llcsd.net
186streetschool.com
68thstreetes.com
186streetschool.com
186streetschool.com
lakecenter.llcsd.net
www.humphreyscountysd.org
admin.llcsd.net
cresson.llcsd.net
lakecenter.llcsd.net
www.186streetschool.com
186streetschool.com
admin.es.hillcity.k12.sd.us
186streetschool.com
jersey.llcsd.net
williamorr.llcsd.net
lakeland.llcsd.net
www.llcsd.net
lakeland.llcsd.net
lakeview.llcsd.net
admin.adulted.mvusd.net
lakeside.llcsd.net
admin.be.ysd.k12.sd.us
paddison.llcsd.net
68thstreetes.com
llcsd.net
*.llcsd.net
williamorr.llcsd.net
186streetschool.com
cresson.llcsd.net
llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.llcsd.net
admin.wilkescountyschools.org
www.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com
studebaker.llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.uci.edu.mx
cresson.llcsd.net
186streetschool.com
*.llcsd.net
lakecenter.llcsd.net
admin.regentsas.org
llcsd.net
www.llcsd.net
studebaker.llcsd.net
icabh.org
ige.humphreyscountysd.org
admin.be.ysd.k12.sd.us
studebaker.llcsd.net
llcsd.net
www.llcsd.net
llcsd.net
llcsd.net
lakeside.llcsd.net
studebaker.llcsd.net
llcsd.net
lakecenter.llcsd.net
lakeside.llcsd.net
lakecenter.llcsd.net
paddison.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com

Certificate

The complete raw certificate details for cresson.llcsd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtymSMtpWjby6T2E3dwK
FxtIEuDKW0vymLn0eWB+Fx12ZHYEGLFo0inJXHZNdvhaAU8SHrMZtTWjcDrBf0AK
f1dipu3ZVIZV+6cEM3Rukkykh7Ydo1lRPYVC5d88ELZpu7bt8OPi2kv9/6YDCwWg
t4wg0NsV+JhIF/LQiyMHNuVhs9WfoBFARL7EbchauernJHBIDTvgDkkgpo3/Pyr5
dAfxGv//eDchwJmHaJedy6Rzm2Dx1AKhEjNNJ2UrrZh7N3xRdwx2a6HwRbIKeahQ
r2UBtxD5tKhqxAacjg9yK+kpFcHKjlk8tBz0OSP/2R+AuLs++KEVagCd6YAvz7de
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5802300541925624922947260686225454753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cresson.llcsd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24599037510929048195241913225060345534953403252127768050313159365292634377848648964815789212831376031907257829003357650500061169877097751739933047416904008660570647716672629639751734334537803723184376930515563615607595324554823025881564778740332871214375428310581772445274208808288567297004147336746009780120427547834318490317769379362406726867582940568204208898191455256054479615177122317490434230505791980530715920512564564463698165496131066636308311224121750723604737498579306971013288213279102719411779718570499965469661949391009229157202034692139600919013059728684036032624583454517662980138716887691408969260673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0f318bf8c6556f00b4b55a8937cf3783d86fb1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cresson.llcsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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