www.kohalahs.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:6a:23:56:de:d4:0e:d8:de:aa:9c:d5:69:5f:a8:8d:ed was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kohalahs.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:6a:23:56:de:d4:0e:d8:de:aa:9c:d5:69:5f:a8:8d:ed
Serial Number (int): 298228435082626850558803528810536913898989
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:c6:5f:55:2a:1e:14:07:35:bd:2e:bb:ce:c9:66:af:91:49:8c:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:2b:71:a6:6d:9a:1f:80:cd:b4:a6:c3:b1:8b:3b:2a:0b:57:13:5a
Fingerprint (sha256): a5:c7:05:41:8d:11:b5:cc:5f:19:fa:26:a0:53:c3:74:df:3d:67:89:78:56:d3:09:94:bc:56:6f:d3:13:10:c4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kohalahs.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kohalahs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kohalahs.org
www.kohalahs.org

Other certificates including the domain name kohalahs.org

(limited to 100 certificates)
www.kohalahs.org
edwhite.org
www.sebastopolschools.org
eastprimary.kiskiarea.org
www.kohalahs.org
www.kohalahs.org
kohalahs.org
www.kohalahs.org
admin.nes.davidson.k12.nc.us
adams.cleburne.k12.tx.us
www.fremontelementary.us
www.kohalahs.org
kohalahs.org
adams.cleburne.k12.tx.us
admin.dmc.lockhartisd.org
www.kohalahs.org
kohalahs.org
adams.cleburne.k12.tx.us
www.kohalahs.org
admin.dmc.lockhartisd.org
www.kohalahs.org
admin.highschool.mbgsd.org
admin.athlosbrooklynpark.org
www.kohalahs.org
admin.kohalahs.org
komarek94.org
admin.athlosbrooklynpark.org
www.kohalahs.org
kohalahs.org
kohalahs.org
www.kohalahs.org
www.kohalahs.org

Certificate

The complete raw certificate details for www.kohalahs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/sciTbeoqCHrbpf1d0o
KPauoDoQC6mqYseMk4eZIQ5goSNCQpOTTpLdmmnokF3/2LtOmTiq2+bXP8E3Ebd2
cP/dLSG/Bc6EKuPUH1hc/nL/H73+PbZhICCnPSMkcHxZPfNXLbdDHqOc6pqcqRSg
dF0+Hz94fxj/NYodD6WUstBGj3uIVZzD+0+ueFvBNQSTFDpl5yJvce+P+HP8SoUG
2WOQJcsCCB6nf9Fv8rjOCNKilP5tEdRIUpDluUsVqu7pnebSAjPL52xQ0TCCfce5
s5WmZcH9m4KeIk0eLLZQqD3wdeJ+W69/UFBr/8dlcgjskNqfomfS6HebpsnpVQdG
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298228435082626850558803528810536913898989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 18:02:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-26 18:02:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kohalahs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23730390709001905797992190681669385859478472323809390248313059989545700163953538734006048060688228598536793363870689939704307950088389144259284810753678064456722346752960256605774667995065045393808350519647109571838954848776589713015494807678368388901252990338117798054691973091983848989300966096296752031478241373329221221197905573349268675977719106730039065178665447192258489404649070039177843235308351313061146902530876428391301835748702303391497962095724193581827382553131037572825185370897464248559697575489435771468409006842640451288945640677282195087073360718637541904849479569044739673432468037053682167531229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83c65f552a1e140735bd2ebbcec966af91498ce0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kohalahs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kohalahs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163a8214426000004030048304602210090c8894cf9304f4bdc965d83c79efd4898f5d8179bf3d3ec0162aaf182a4ae570221009b7e100c6064db2b25ca26194b4e95efa49631c9c7843b48a92ad9b53d2ab650007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163a82144490000040300483046022100aafa9fff8c6fd3e26e7aeeb1bc1a4d494a095959da1275ea7e3a3c4771003a8d022100c708ce27817db5ab8c0d68ad970462b7640a9f6a20ad04b7f1c498ffb21869fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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