www.frederic.k12.wi.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:0f:ff:d9:19:c5:50:5c:7e:04:d3:e5:9f:8f:34:ea:fd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.frederic.k12.wi.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:0f:ff:d9:19:c5:50:5c:7e:04:d3:e5:9f:8f:34:ea:fd
Serial Number (int): 330095162772270663431664020227912673585917
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:d8:c7:09:1a:85:97:71:d1:3a:ef:aa:43:76:6f:3b:8e:58:51:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:a5:27:77:18:75:74:88:fe:7d:42:b2:0b:4a:34:57:74:6d:6a:cf
Fingerprint (sha256): 9f:70:80:7f:10:54:36:3e:92:01:a9:b9:20:8d:45:06:0a:27:2d:a1:d0:1d:e8:83:6b:82:42:85:a0:1c:26:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.frederic.k12.wi.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.frederic.k12.wi.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

frederic.k12.wi.us
www.frederic.k12.wi.us

Other certificates including the domain name frederic.k12.wi.us

(limited to 100 certificates)
frederic.k12.wi.us
www.frederic.k12.wi.us
frederic.k12.wi.us
www.frederic.k12.wi.us
www.shulamithhighschool.org
admin.aes.uinta1.com
www.harborcityschool.org
es.kilimanjaroism.com
www.brackett.k12.tx.us
admin.aes.uinta1.com
www.ghschools.org
thecomputerschool.org
www.ps287bkinnovators.org
www.frederic.k12.wi.us
frederic.k12.wi.us
www.bromleyeastcs.org
www.frederic.k12.wi.us
admin.mlfa581.com
admin.aes.uinta1.com
www.lvsd.k12.pa.us
www.rsdeaf.org
www.frederic.k12.wi.us
www.frederic.k12.wi.us
admin.aes.uinta1.com
www.frederic.k12.wi.us
www.frederic.k12.wi.us
www.frederic.k12.wi.us
frederic.k12.wi.us
www.mlfa581.com
www.benedictineacad.org
admin.thecomputerschool.org
admin.aes.uinta1.com
www.thecomputerschool.org
powerschool.frederic.k12.wi.us
www.frederic.k12.wi.us
hhs.uinta1.com
admin.aes.uinta1.com
dhs.comalisd.org
gmcs.org

Certificate

The complete raw certificate details for www.frederic.k12.wi.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330095162772270663431664020227912673585917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 00:33:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 00:33:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.frederic.k12.wi.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782576630232471473006963166416188568939344438011175209264560333252811777651503093897576732736399671181223698119657214471475669439331882653558146428890033683386658781470053275454138911681158038169093978687668718086289270132201689952478372624128126177520614510200130745031319306053879657201433111620318784964933541490040504009591375860303092781956937436449319681229751530598733218304030451570895069010853820170066685407315662105166634969351346627215289368311772068527767702407689237550638563595306990423572583700931590102674569008793711589532455807067681997598280158435705700113048909419398973442318182183600118667555426264221959780572461827782182319614714109766574415616872672519027880637900205811338968588689286630301348614009725323799126020400936942825449083369831946473471782099815490030228239045217102511328786207902529205584742914907513500242187086916726411125845044862599551628520986084144940377690788721792880069726159605889004533271088190755294926528404438112261630340949008414935386004171784766243558181280393072151892702006259642703611580094819451655438272439247928870541417565108115549861056978917867978924113192779775031504386695923073438312940954396854827202963872539202507970838422768382591274344039793224100066761445861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7dd8c7091a859771d13aefaa43766f3b8e58515b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frederic.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frederic.k12.wi.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ab91ff34c00000403004730450221009a28fb372dc9203f50c3ad33a509dba9eae49faba115e2e8d11ed6b3e093d4d70220249de77c7cb7f63de9163768968e956ee0c8a074ff1143fe3eeca4044d11a4f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ab91ff3400000040300483046022100dc93c6ab216f7e432fd1b0568aa7b303b8e37bed295340f9f24a5207aba2a464022100f8f30d0a7f9ff3925ff400d9d79c0d80715535aa7a0e38a3b550e74d8d5605ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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