www.bedfordps.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:f1:92:eb:ef:92:ff:f1:5f:53:74:b6:f1:d3:30:2e:14 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bedfordps.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:f1:92:eb:ef:92:ff:f1:5f:53:74:b6:f1:d3:30:2e:14
Serial Number (int): 264720505905241978847664074042549050813972
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:ce:d9:2d:c9:ae:09:91:04:56:1b:15:f5:18:9f:11:5a:98:7a:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:67:c9:69:49:cc:16:ac:4b:07:6a:16:ab:66:64:00:62:b6:07:bf
Fingerprint (sha256): 97:9f:3f:b4:ac:18:6c:2c:ee:1c:7f:e7:10:fb:a3:30:02:cc:25:32:cc:74:e9:1c:51:61:4b:62:b2:da:90:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bedfordps.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bedfordps.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bedford.k12.ma.us
bedfordps.org
www.bedford.k12.ma.us
www.bedfordps.org

Other certificates including the domain name bedfordps.org

(limited to 100 certificates)
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
sni.cloudflaressl.com
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
bedfordps.org
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org
*.bedford.k12.ma.us
*.bedford.k12.ma.us
www.bedfordps.org
www.bedfordps.org
www.bedfordps.org

Certificate

The complete raw certificate details for www.bedfordps.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264720505905241978847664074042549050813972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 07:43:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 07:43:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bedfordps.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825855800682766886810445787249275821152003507433216327517645883027503123811286602055461097969014511990405000245267648824428032488470916851106931530868987227321206884065613826988993939959288920432612760406171502362442526797910093561906386484697574852629715140799277749165414811587888325466194021133074706477449951532554749893515500512855321715312010717525579770061774069729219063436720206120614900372710254091689149417212846077405899332231463682065256697250406653186949994271175955443210728920820853434098753933590839227114070480313125711777203752125611671013757877843851826543804748480513660934924067703244962049859752907857474813458560707225324558315052796166920956991326110027890544994683011573732719519263395568683207215960629413706858825660524286497114197268734738404030639041029636037843858444055061638331340196135630191310423709270028075056015750381141041749551243450164094292733099839747327294729388449955986935496395613952969581693324905769233792574035916244566656448066650197552716065546464384586514357810549032475303604568273228495177499067386086366298945150416360239941733806314918963314232661932676370982999549874117495678320049489147446413548387945816073340245551302834733408112831174599075886779127588112787409495160989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0eced92dc9ae099104561b15f5189f115a987a48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedford.k12.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedfordps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedford.k12.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedfordps.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c18da050e0000040300473045022100c3e76884410a61089dd222206fdb92199ce7f4965d9d8d5497ca79c9f4164ecc02202187906c233984b66abaee3b5932e510330ae4ff1b1388575ca419edf2eeb47900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c18da0722000004030046304402202f80f4127757ae02e163385d6055bec2240ff877cc37416e68412c3c4748df4b022037fd6f140bab906edddbe981d4784ba15471e71df76a6c9914939098351444be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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