alumnae.academy.ndasla.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ca:38:6b:93:30:a9:a8:f3:2c:a1:75:cc:d9:aa:f6:0b:a8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alumnae.academy.ndasla.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:38:6b:93:30:a9:a8:f3:2c:a1:75:cc:d9:aa:f6:0b:a8
Serial Number (int): 330148891242207798826948324773364615220136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:90:52:a7:42:80:15:dc:49:da:53:26:87:86:35:c7:39:e4:dc:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:0c:54:06:22:d2:a3:42:c8:01:80:2a:80:34:79:f3:03:13:0f:a6
Fingerprint (sha256): 97:fd:c5:1c:c3:00:f3:45:39:b5:e8:fe:22:84:b8:a7:44:9c:d1:79:14:be:dc:ee:85:b6:6a:04:4f:96:02:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alumnae.academy.ndasla.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alumnae.academy.ndasla.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumnae.academy.ndasla.org

Other certificates including the domain name ndasla.org

(limited to 100 certificates)
ndasla.org
academy.ndasla.org
abe.zcisd.org
academy.ndasla.org
7gc.owassops.org
res.rsu14.org
academy.ndasla.org
academy.ndasla.org
oc.pgsd.ms
abe.zcisd.org
ndasla.org
eastprimary.kiskiarea.org
cvcs.org
pjh.petroliaisd.org
academy.ndasla.org
kernhighnetwork.com
admin.e3civichigh.com
academy.ndasla.org
academy.ndasla.org
frayluisdeleon.edu.mx
admin.wes.bibbed.org
abe.zcisd.org
abe.zcisd.org
admin.e3civichigh.com
www.ndasla.org
mms.madisonmohawks.org
admin.e3civichigh.com
academy.ndasla.org
admin.e3civichigh.com
www.windhamraymondschools.org
hanak12school.org
www.lasallesancristobal.edu.mx
academy.ndasla.org
7gc.owassops.org
wes.leusd.k12.ca.us
admin.e3civichigh.com
academy.ndasla.org
admin.dmc.lockhartisd.org
elementary.ndasla.org
academy.ndasla.org
7gc.owassops.org
kohalahs.org
sgmission.org
es.vanalstyneisd.org
admin.mms.madisonmohawks.org
academy.ndasla.org
ndasla.org
admin.dmc.lockhartisd.org
alumnae.academy.ndasla.org
academy.ndasla.org
admin.e3civichigh.com
abe.zcisd.org
jms.jarrellisd.org
ais.academyisd.net
es.unitedsd.net
admin.church.spxtulsa.org
abe.zcisd.org
admin.mas.mpusd.net
monte-rosa.mx
komarek94.org
www.ps28q.org
admin.e3civichigh.com
7gc.owassops.org
academy.ndasla.org
admin.elementary.ndasla.org
abe.zcisd.org
admin.zionschool.net
admin.e3civichigh.com
admin.hs.unitedsd.net
academy.ndasla.org
7gc.owassops.org
7gc.owassops.org
highschool.kiskiarea.org
abe.zcisd.org

Certificate

The complete raw certificate details for alumnae.academy.ndasla.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330148891242207798826948324773364615220136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 11:01:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 11:01:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alumnae.academy.ndasla.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668364310688119863796874521752802131873865073010462793987966341243653779324276286588168523694948126820647727020288437197024966149262950984260581013513064692033518944964655542852629827310912877181830833390758177142043693943364071901282554567524605086289871743131060244064957096864235750547741598389710309228293626295954569421992438783929715634197127615032476449573423813266552798091515823237733384620874123445722343285429355435024273270077894524942351278773202365672456516200985618490788937029483759241452533498479780074635166013607475224303449697508030909701173389240413272836515525898304616685060734442899235899571611291852653597859232702133349059078410197672758696475819522848267362318722619722408200520845760758418869340477330062530793203069391582654074394862493843592249957689435005460998594136805056458562575157032151145442893323343862277249030182170786731840532183559764937451609964808275248178145414887641858572220813768096643822194777479283334873146140526634274336693134042175072929200340991994487672232567669305310011587017533463997390885192840858180191965087981512763598144851584236765167945137070229916386447300957012197895948011637651530628168631057954398552870577226286872369766925553133261591675064767430396429984418551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a9052a7428015dc49da5326878635c739e4dcb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnae.academy.ndasla.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e51705fe50000040300473045022024195c41b548a9dad54ca6ab9606d8348390efd577075dd1f3a05a2d761acf0c022100b6485192f0bd56ca4bb1489493b4fe85a38374e2025fffc054862dccee8601dd00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e51706017000004030047304502203a32528a125e8142b7fc41a2a7aa5ba9eb79545da63dd2a403bd7c0a2de411b9022100f211088d03ee00c8087843bc637b4cd22bd8ae4281d4e64beda366f521b7363c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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