masd209.org

Issued by R3

About this certificate

This digital certificate with serial number 04:b4:b0:81:de:27:74:aa:bb:5d:52:6c:f9:be:f8:38:cd:ea was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=masd209.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b4:b0:81:de:27:74:aa:bb:5d:52:6c:f9:be:f8:38:cd:ea
Serial Number (int): 409934588212183743208357950513940352519658
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:69:6a:c3:94:53:26:37:4d:69:e7:f6:01:9f:c0:9a:ef:89:ff:7c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:91:aa:0f:8c:b8:25:34:84:a5:69:c6:86:a7:60:90:7b:c2:77:cf
Fingerprint (sha256): a1:fe:d6:6e:e7:72:56:74:2a:3e:e2:58:81:38:d7:c1:f8:25:89:d6:4d:b3:ad:98:ab:ca:77:e3:77:92:69:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate masd209.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for masd209.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

masd209.org

Other certificates including the domain name masd209.org

(limited to 100 certificates)
admin.raak6.richardallenschools.com
admin.agl.sbcisd.net
nolacollegeprep.org
admin.agl.sbcisd.net
ms.mtpcsd.org
www.msd120.org
www.panoramacityelementary.org
admin.nichols.bcsd.com
vpms.icefps.org
www.bayheadschool.org
bcas.burke.k12.ga.us
castaichighschool.org
columbian.tiffincityschools.org
admin.decaturclassical.org
lisawesthigh.lisaacademy.org
admin.vannoy.cv.k12.ca.us
admin.masd209.org
admin.evergreen.bcsd.com
www.cumbresbogota.edu.co
admin.idlewildelementaryschool.wearecms.com
admin.mes150.org
admin.tms.tiffincityschools.org
admin.longfellow.bcsd.com
abccs.org
www.masd209.org
admin.bclc.burke.k12.ga.us
mountalverniaacademy.com
admin.aquinashigh.org
admin.tierralinda.scsdk8.org
admin.redwood.cv.k12.ca.us
central.scsdk8.org
admin.bes.ballingerisd.net
abccs.org
admin.bayheadschool.org
hes.masd209.org
admin.alma.cv.k12.ca.us
dvms.comalisd.org
www.villagetechschools.org
masd209.org
lisanorth.lisaacademy.org
admin.icefps.org
www.glenviewbulldogs.org
admin.dieck.swartzcreek.org
harding.bcsd.com
admin.abccs.org
www.nawahi.org
admin.washington.tiffincityschools.org
atljewishacademy.org
admin.jctes.org
admin.bethune.hattiesburgpsd.com
hoganprep.net
admin.thorner.bcsd.com
www.jctes.org
admin.cumbresbogota.edu.co
admin.agl.sbcisd.net
admin.agl.sbcisd.net
downtown.bcsd.com
athletics.goshenlocalschools.org
www.stegbert.org
cte.mpsdnow.org
admin.jctes.org
admin.pg.goldenruledallas.org
aquinashigh.org
wshs.masd209.org
pantojacharter.org
mams.masd209.org
www.jchigh.org
admin.noble.tiffincityschools.org
www.swartzcreek.org
www.collegeachievecentralcharterschool.org
admin.annex.chinaspringisd.net
stanton.cv.k12.ca.us
admin.lindenusd.com
krout.tiffincityschools.org
tiffincityschools.org
wps.burke.k12.ga.us
masd209.org
masd209.org
www.athenscityschools.net
admin.mes.mayfield.kyschools.us
admin.athenscityschools.net
wshs.masd209.org
www.phcsd.org
admin.lisachenal.lisaacademy.org
www.ahs.alcoaschools.net
admin.rangerville.sbcisd.net
admin.bclc.burke.k12.ga.us
admin.arroyo.scsdk8.org
school.sp-apostle.org
admin.scvlc.swartzcreek.org
admin.collegeachievecentralcharterschool.org
lisaspringdale.lisaacademy.org
annex.chinaspringisd.net
abccs.org
www.abccs.org
admin.washington.bcsd.com
glenwood.lindenusd.com
www.biglagoon.org
admin.mphs.mpsdnow.org
admin.cumbresbogota.edu.co

Certificate

The complete raw certificate details for masd209.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgISBLSwgd4ndKq7XVJs+b74OM3qMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjUyMzAzNDVaFw0yNDA3MjQyMzAzNDRaMBYxFDASBgNVBAMT
C21hc2QyMDkub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqul
mCepMaRIWIViRaqG3XmyaqZzJbidY+zbrQxiAvBgYfQ07ndnb9TdhbgCXrfTTgXF
q3Cgkc9/usBYrB1QEqZUwRtymX1vaLtYXypSQO7ryQzJK40aTJm7aDBr7YAJC280
dXbN4U5Q8KpzFJYenZDQA5mmLxe47qIxj6DawtA7l/DuZgNDxYDCdQ+DgyqG/g7T
jujcwZ6Q1h14MMpIg375Aqw04sCeFss4VBmnXshD0CthbsVNtCc/0gYQQD0wjv5R
tH1JvhoobL8EhoW0ACXY3PIM0295Rw123mYKtZRLWpp7f9joAuOp+S8pX+ddgmD6
UNr2Bm4ayO8NyNTnwQIDAQABo4ICDDCCAggwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTgaWrDlFMmN01p5/YBn8Ca74n/fDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAW
BgNVHREEDzANggttYXNkMjA5Lm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABjxe3E/gAAAQDAEYwRAIgfgBFdilHDUDNLbiD4CgDqXQfA4ocGdi+
PXyaei3QM8UCIGo60UGZWIXs+DUq3lhG/HbKErcXuosUr7ESEk/dlT8fAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGPF7cb0AAABAMARzBFAiEA
72T1i59tuECDGCK8/K/cAe0t8lPsmUh8DB6CYCu4TAMCIA0f2LArdjdiZ2dydONd
rtmhThfaR77L3IeGUOrXfazOMA0GCSqGSIb3DQEBCwUAA4IBAQAXjf8Q5Q6TK7ft
aGcQqZXsbhDob3YteUyyImK5rfLzQAyu6qOMx6YDKXpoc9ckc0wfkV2qMFeNNme0
0o/lDCdXjf8fel8FgbVN8hpldX7k+oEz+FLy2FTctIgrKuwMJSjBXSwcIAcZScHj
fVpWaimEsAC7lC9X5kJFsuHvpAiRoBPU9jvTr4Izciw9PRAgrCKiEXZBXc5ozlsX
4mFKo3yzEwqR5or6gWjATeSrpP2NKDORmEhdb6LOHg1sYobMqxrHThfOn/LDLo31
4LUNhziGaHcV4k+2qTdC+sLqIIMHwR4qZM39o6vo5W6/w7VjKIXJsg42PX1zFpGS
yJl0qk5m
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqulmCepMaRIWIViRaqG
3XmyaqZzJbidY+zbrQxiAvBgYfQ07ndnb9TdhbgCXrfTTgXFq3Cgkc9/usBYrB1Q
EqZUwRtymX1vaLtYXypSQO7ryQzJK40aTJm7aDBr7YAJC280dXbN4U5Q8KpzFJYe
nZDQA5mmLxe47qIxj6DawtA7l/DuZgNDxYDCdQ+DgyqG/g7TjujcwZ6Q1h14MMpI
g375Aqw04sCeFss4VBmnXshD0CthbsVNtCc/0gYQQD0wjv5RtH1JvhoobL8EhoW0
ACXY3PIM0295Rw123mYKtZRLWpp7f9joAuOp+S8pX+ddgmD6UNr2Bm4ayO8NyNTn
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409934588212183743208357950513940352519658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 23:03:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 23:03:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'masd209.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21545154062078228410867284316396425093302740661710847863073267799763266462475087377121957219869937278259315303352524195877014458256104388724448174595354544640844461730316433272918130318859540127574581577350304172392972927870520543050784838397150129919445702453599133008494229559785675146076897046666241957107006656543888996132983925009812721047136824953919427302410580868075437800849924265713997995748154819837113445754957033746665344943912951859275541247716026573598822614345031205874089896330243561159758758302511052345985013235176052957712201871812456020801864758530727295287166995886372300332567175342521010415553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0696ac3945326374d69e7f6019fc09aef89ff7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masd209.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f17b713f8000004030046304402207e00457629470d40cd2db883e02803a9741f038a1c19d8be3d7c9a7a2dd033c502206a3ad141995885ecf8352ade5846fc76ca12b717ba8b14afb112124fdd953f1f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f17b71bd00000040300473045022100ef64f58b9f6db840831822bcfcafdc01ed2df253ec99487c0c1e82602bb84c0302200d1fd8b02b76376267677274e35daed9a14e17da47becbdc878650ead77dacce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00178dff10e50e932bb7ed686710a995ec6e10e86f762d794cb22262b9adf2f3400caeeaa38cc7a603297a6873d724734c1f915daa30578d3667b4d28fe50c27578dff1f7a5f0581b54df21a65757ee4fa8133f852f2d854dcb4882b2aec0c2528c15d2c1c20071949c1e37d5a566a2984b000bb942f57e64245b2e1efa40891a013d4f63bd3af8233722c3d3d1020ac22a21176415dce68ce5b17e2614aa37cb3130a91e68afa8168c04de4aba4fd8d28339198485d6fa2ce1e0d6c6286ccab1ac74e17ce9ff2c32e8df5e0b50d873886687715e24fb6a93742fac2ea208307c11e2a64cdfda3abe8e56ebfc3b5632885c9b20e363d7d73169192c89974aa4e66