long.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:37:53:6a:16:cb:ae:43:9b:84:56:ff:46:10:b5:95:e1:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=long.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:53:6a:16:cb:ae:43:9b:84:56:ff:46:10:b5:95:e1:b5
Serial Number (int): 280163264745399768534416224084169743262133
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:9e:e2:5c:3b:d1:9a:f2:70:5c:53:80:7b:72:6c:1f:0f:42:18:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:86:ff:f3:9a:fb:c7:a0:15:22:08:99:e2:41:0b:55:62:d4:42:90
Fingerprint (sha256): 96:6f:73:46:01:df:43:45:dc:db:be:ec:8d:e0:86:06:96:91:12:4b:c3:e6:5c:c4:c2:e7:85:83:24:33:94:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate long.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for long.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

long.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for long.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280163264745399768534416224084169743262133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 01:04:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 01:04:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'long.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766027647992528425566690813629077390051619945692423362775628377731631149925904422220168978742699658752035275119158346434627145787103004273205882467792738063906248390039992419230580125946322779573158254626910578658828387220393640074114131366394888368981571929998977259080366091916352305966411336735026998830710775807029417244507926602555840426637604608514604302280941417633158358373012176874316816763734263264640593431987898070343753838935456868307197866127468113057479877727989925526228089550586601846110577254814168176116526760842652478324258718186380525691170357844279098859235389974273367337020957900918244084571880793743802095985265873825766119993595925870061484705622981934749794480402318623943918329726765972115446657881975588204457817251739852813966188514287894876033953301263921688387675550661885069420409396951934442629011764680854787011396196532973983485878734981805876428754938446661602922924592404570673448843099175220757073228257478592646601971827245925108542408451942395905560777943875935216251936419242461332325352626384268253061315859183823806914341935693600318307236504143290064354614198538310885908217955588619307583961308637125347080092021255304111899686859078189738442644326403133592141118530350182440051603264209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec9ee25c3bd19af2705c53807b726c1f0f421848
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'long.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189333ea5ad000004030046304402206022168e8f9fd12777fcf99d122d4c7149cd8d72bb0593629d4d01dea715671b02200bd22c5477a33f27704a3d07c322756a93bc7632332dedf67bcd3694aee6b6580077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189333ea5c00000040300483046022100e722b4404503e74ac400d59de3ba5afc0dfbbd38f718e95adb6ff4859f96eff30221008be546c64f0ddf7d97a98bfe288cda15e594133fca3df65e048eb03a4fbca482
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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