apluscharterschools.org

Issued by R3

About this certificate

This digital certificate with serial number 04:53:a8:d1:32:f2:52:1c:7a:96:4c:92:e3:04:04:ba:04:eb was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apluscharterschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:53:a8:d1:32:f2:52:1c:7a:96:4c:92:e3:04:04:ba:04:eb
Serial Number (int): 376916976708133286410242923530332868838635
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 74:a1:4c:71:52:78:67:7b:16:b9:17:47:a8:ec:44:91:a1:3c:77:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:10:36:d6:c1:a4:a5:e0:65:4a:a6:6d:53:b6:86:88:cb:3a:d7:a7
Fingerprint (sha256): 9a:d4:96:e7:89:65:6f:9d:93:44:f7:83:79:57:1d:16:24:ca:20:d4:71:aa:06:4c:75:17:b3:f0:02:4f:7d:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apluscharterschools.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apluscharterschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apluscharterschools.org
apluselem.apluscharterschools.org
aplussec.apluscharterschools.org
ivelem.apluscharterschools.org
ivsec.apluscharterschools.org
www.apluscharterschools.org

Other certificates including the domain name apluscharterschools.org

(limited to 100 certificates)
www.cerratosd.org
admin.aes.fentressboe.com
admin.beethoven-elementary.vanguardacademy.education
www.holynamesf.com
admin.ajhs.dcs.edu
admin.mtsd-vt.org
hs.somervilleisd.org
admin.aes.uinta1.com
admin.es.somervilleisd.org
admin.ajshs.asd.k12.pa.us
abs.lockhartisd.org
admin.aes.uinta1.com
delevandriveelementary.org
admin.aes.uinta1.com
admin.aes.fentressboe.com
admin.ambassadorhigh.org
admin.arvin.kernhigh.org
admin.aes.fentressboe.com
cerratosd.org
admin.ambassadorhigh.org
admin.aes.uinta1.com
admin.ajshs.asd.k12.pa.us
admin.ivelem.apluscharterschools.org
admin.uinta1.com
admin.ajshs.asd.k12.pa.us
admin.apluscharterschools.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.apluscharterschools.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
south.legacyprep.org
admin.aes.uinta1.com
athletics.ambassadorhigh.org
apluscharterschools.org
apluscharterschools.org
admin.apluscharterschools.org
admin.aes.uinta1.com
admin.ajshs.asd.k12.pa.us
apluscharterschools.org
admin.rembrandt-secondary.vanguardacademy.education
admin.gfusd.net
admin.aes.fentressboe.com
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
givetokids.csisd.org
admin.ajshs.asd.k12.pa.us
admin.fentressboe.com
admin.mozart-secondary.vanguardacademy.education
admin.ajhs.dcs.edu
beethoven-elementary.vanguardacademy.education
admin.mozart-secondary.vanguardacademy.education
ivinter.apluscharterschools.org
apluscharterschools.org
admin.ajshs.asd.k12.pa.us
admin.apluscharterschools.org
admin.aes.uinta1.com
gledhillelementary.org
admin.aes.uinta1.com
bfcsd.org
admin.ajshs.asd.k12.pa.us
morelandpreschool.moreland.org
admin.olaclaremont.org
admin.ajshs.asd.k12.pa.us
admin.ajshs.asd.k12.pa.us
www.ranchitoelementary.org
admin.ajshs.asd.k12.pa.us
admin.moreland.org
admin.aes.fentressboe.com
admin.canoncityschools.org
admin.ajshs.asd.k12.pa.us
apluscharterschools.org
es.otisr3.com
phs.parlierunified.org
admin.ajshs.asd.k12.pa.us
admin.arvin.kernhigh.org
admin.ajshs.asd.k12.pa.us
apluscharterschools.org
admin.ajshs.asd.k12.pa.us
admin.dimensions.org
admin.aes.uinta1.com
admin.ivinter.apluscharterschools.org
admin.aes.fentressboe.com
admin.ajshs.asd.k12.pa.us
calaps.org
admin.legacyprep.org
apluscharterschools.org
admin.bhs.burkburnettisd.org
edwards.tisd.org
admin.ajshs.asd.k12.pa.us
admin.aes.fentressboe.com
apluscharterschools.org
admin.bas.kernhigh.org
mentalhealth.lexnyc.org
admin.elementaryschool.bfcsd.org
admin.sboe.org
www.anderson.moreland.org
phs.parlierunified.org
admin.ivinter.apluscharterschools.org
admin.ambassadorhigh.org

Certificate

The complete raw certificate details for apluscharterschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEVjesUPa9PSUze8gv3Y
sFp6YxFTR0sULLnX7XX6Dg0kVSqHGn9AQvMP4jJ7mE3/QzfRrlJsqxQ1LxhdSwPN
MwgFmIRNu2IZ1YFAm8IvRB2mDgboX0AxxkVQXylz0VJHvspMMV9shc599NzbNiWo
WUDBMY69JUSYdFPZQP9L5MDYi182Nn5/62P6petkBTXpisDBkvkwDtRBTMhJ9vDV
VZJXWM+RxNnDirUlkycJd8qjYNVagX7+C7CUcVV6Hs7ljkUdD/fCTRn3cMPskPmP
cRzx6FMcbgpdPP49E/3EnLAvYxS5SMezcyQbs2FrbDgIMUOcTmAEKRnitRMe0JUN
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376916976708133286410242923530332868838635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 01:34:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 01:34:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apluscharterschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22252158464052262758952383332599913257295108836994664466649512760562433068613202956827717915066404147329561088827942808042492641394089422573492219897717795486517473702639285572320378887314972476157271994459662797222155864443086775665926596582710890851710931216068634191603703169469155236067204754783151307244814504466961520329705063045023321686650178480930096682747376482033744351487063647456522756924069773842842538575759301424469909329630698665391767035281057435497678769319903815211404773194830311852086516653605560134354212263076145686240615717436182026802645761277260869625349317032608029737583946879392653053373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74a14c715278677b16b91747a8ec4491a13c7705
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apluselem.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplussec.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivelem.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivsec.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apluscharterschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ba27b0483000004030046304402202a5593257c8f7465b7da2e09268483c573de9c7bd1155c4406f5b6b50533a22102200b270c46eb36cbd2a042bba52d7991dee6a2150302cef3abbf2e6ef198d5233000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba27b0499000004030048304602210082cf6149fcb75ee6a83c676249e2b8d5ebda5cc2694b49e60cf475820327238802210083f8eaf25fc66c0dd72ef255d8ac11d54dbb1038d64b9850f3e0d7f258b4e9e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079f3b23e2406d17868436a00282aa2bc3d2251d3083895da236a57ef66824681f4c277405f57a9a0a2c35fdc8b50de4995007b41cb644884bd32b03b77fd422501eff73fcab7387b6ce7b3a8af9b6344a1194bc25f7da28f2ae971e06548c46f8128f98eab1da0743d523a18c203890950436e88409f97cba4eb9df3cec2c2478ee6c99a82f9572df6162d7f4ad8a2797ac4d73fa5e0aa666e42cab9b7f9ed94b8e8158af0f3f7d93b2717d7ea3a53e1943e85f6f8e856930037a5d08f93a819b094c09cdc137cde131251f0023cb228db776c9f1af6532373a7f82c14206cbd20bdd07560ae81a4f7c5504f0ba1685c29b3af009c2e809ba9c301079765c4bc