help.lcusd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c2:8b:21:09:da:e6:4a:26:fb:ec:01:13:f7:57:5c:bc:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=help.lcusd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:8b:21:09:da:e6:4a:26:fb:ec:01:13:f7:57:5c:bc:75
Serial Number (int): 414648857146798180511876927806103571184757
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:45:17:17:ae:7d:62:e9:54:96:cd:38:25:58:c3:bf:90:50:8e:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:a7:f4:56:fa:73:69:e4:7d:54:2d:42:99:81:52:da:7e:53:be:b1
Fingerprint (sha256): af:70:b8:61:04:d7:78:5f:7c:db:9a:81:e1:a9:e8:92:27:c3:81:03:37:e4:1b:31:3d:c6:e7:69:21:05:91:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate help.lcusd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.lcusd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help.lcusd.net

Other certificates including the domain name lcusd.net

(limited to 100 certificates)
news.lcusd.net
ssl.smugmug.com
tech.lcusd.net
admin.adulted.kcusd.com
news.lcusd.net
ssl.smugmug.com
news.lcusd.net
lcusd.net
help.lcusd.net
help.lcusd.net
admin.adulted.kcusd.com
tech.lcusd.net
news.lcusd.net
*.lcusd.net
help.lcusd.net
tech.lcusd.net
admin.ashdownschools.org
ssl.smugmug.com
tech.lcusd.net
lcusd.net
tech.lcusd.net
tech.lcusd.net
admin.adulted.kcusd.com
admin.adulted.kcusd.com
tech.lcusd.net
*.lcusd.net
lcusd.net
admin.ashdownschools.org
tech.lcusd.net
rvs.monroe.k12.tn.us
lcusd.net
ssl.smugmug.com
lcusd.net
admin.wayside.bcsd.com
*.lcusd.net
tech.lcusd.net
tech.lcusd.net
admin.lasgs.net
tech.lcusd.net
admin.adulted.kcusd.com
tech.lcusd.net
help.lcusd.net
lcusd.net
ssl.smugmug.com
admin.adulted.kcusd.com
news.lcusd.net
news.lcusd.net
admin.stanthonyeagles.org
*.lcusd.net
ssl.smugmug.com
admin.ashdownschools.org
ssl.smugmug.com
news.lcusd.net
admin.rockyriverhighschool.wearecms.com
*.lcusd.net
wp.lcusd.net
news.lcusd.net
tech.lcusd.net
news.lcusd.net
wp.lcusd.net
ssl.smugmug.com
www.whitehallschools.org
tech.lcusd.net
help.lcusd.net
*.lcusd.net
ssl.smugmug.com
admin.charlottelearningacademy.org
millwoodps.org
news.lcusd.net
ssl.smugmug.com
admin.adulted.kcusd.com
admin.ashdownschools.org
help.lcusd.net
help.lcusd.net
lasgs.net
help.lcusd.net
lcusd.net
nutrition.lcusd.net
tech.lcusd.net
exchange.lcusd.net
tech.lcusd.net
admin.adulted.kcusd.com
help.lcusd.net
news.lcusd.net
tech.lcusd.net
admin.charlottelearningacademy.org
mdm.lcusd.net
admin.adulted.kcusd.com
lcusd.net
*.lcusd.net
news.lcusd.net
tech.lcusd.net
tech.lcusd.net
lcusd.net
wp.lcusd.net
help.lcusd.net
news.lcusd.net
admin.ashdownschools.org
admin.adulted.kcusd.com
tech.lcusd.net

Certificate

The complete raw certificate details for help.lcusd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISBMKLIQna5kom++wBE/dXXLx1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjIyMzM5MDlaFw0y
MDAzMjEyMzM5MDlaMBkxFzAVBgNVBAMTDmhlbHAubGN1c2QubmV0MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0pPPzE2ccbVldBhSEofoPsVRHZwSY3Xc
uQvSCR0OpSTp0PCka043ZbDgFHXxvk+JPFHZpJzJNj/xWiGfAZMpAkAiW7FfOP56
2C/WEL83HviYHhbK0iXJ1ndtBquZ7MVOHFPvULeY5nWfYoZAesKYPi5ewSwPctw5
CwOnLE93TnWs8XlbttundWeKOTwM+qivHb+/HXbB57SevCPSLQiWvJdofOfVpCec
XY9/fj5ECNGmJs/6epZX6VG8vdzSUVsTbaefCirMMyWVjLVdwZ7ol2CNLWtUhQjE
GrLd3H3qB+eyaW6dyF76lOX0fxhZT680Jshxv8ziBjrKx1XaWoDkGyTgdqAypNzW
sbDtFxEhPOVu1gTnsJEOHW1HYglPCJ2DfR160DB2e/sVWhhVUT7mWU5VUBB3XUtv
MRBwMHgMtWvYwpBY4UW4uWNYJQbPXGYRzpDJfC8uwv7+32cn65OxGazn5OO+jdJp
Hf6ppZmRTAkjQ47Wtx2wsma6IITelObcV2lpRPPFEqYFFqYIXeA80TBL6Q2/wWOq
jRqIf4ugeCRQFSx6HDdxp7LOb2MGK9Bu9itHu0CYGDHcuy0Z9v1LZCXzOw5kqgJZ
yk7TvSt8cL4SiurH0zeUW0wGzoR0lMLN1K8m3Iu2xaTOalPFP5dqY5H9MTzGPzF/
hjGzDrOzGtcCAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/0UX
F659YulUls04JVjDv5BQjkkwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5oZWxwLmxjdXNkLm5ldDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbzAxhb0A
AAQDAEcwRQIhAOrNKaa++E1Q92TpEYgNm5/FTxjxKEQ63y601uP8lXJXAiBsguxN
JIkzD5mVHP0ud3TZMO2gHznnmOlkfBGm6d1DxwB3ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABbzAxhxwAAAQDAEgwRgIhAPsyvuILsBhvkXUCyvmV
dDyxqWXtrUCRJQc7sdPNhWeLAiEA8Avd/ymVuQeKATab5ZAtB5xknYPSFD0HUK/D
dy8y3kgwDQYJKoZIhvcNAQELBQADggEBAH73HhNpIka5YlvZrFmtN7uXnRj2WnTP
0Gj8Lez2Po4kb2FOq9WJy4VFtESMmCezqJe5otr8z+QubPor9ZH9En1BXKKZoMgH
cdgfHHNDepzLOZsekl/otat/PxNYUSS/h5xaNchtYi8wjuwQbluy5aL0W5O2GM7D
rNiJE2BB9MtLJL1C/ZmA4zS0eh0riBbtZtOVPnD3m5Y9IkNuvk07i9LO8Cz8S9mG
U8L1/77IKOuqokyxDvaLy/r+136pLzFBLPP/Yf9sfMCL82fx+tgoc4KRxt5KQeWi
dxMPOp4BtJIGx65wqXpXw8PbpTrEKLa4W33tQF1kZe2wc9BWpDspZ/8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414648857146798180511876927806103571184757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 23:39:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 23:39:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.lcusd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859080797919595091073457119727510152617518923363300162899944262037007902531561901883016998465186935906633010337473414423145224773923628213238693572238441990358863631370450221665150332282089404660360298539861795996899085468420500354437602197515484424799502890601989660124514216473204225999584481566800724435154929732690893975726289686624964709840382229902522802513337473461753306939654601970788331525456360688188526914092947754167622931438530490766055987124067508144896958893404402956453692763194847325432824335126535944866347494507578768857350958399220696504022371750317223918384892420693764457994139590263121331959783341108441223420316996042368295207758415796248146487792386174572292413856047286747823818166845125481015768753721808461583436207420818833117116602493686570696726187275435008446088518614645636360112670351798526544172121686694132831458015921560384539539501147907175558763952223326518755066421428063503097890972724563118513228841017622281841785520959330757649270018917420812126811147564189856669742195092792571009634026803924837499997016767366034784095093329699087298001053353595312645808591802260664598661508283710402712050277068564609881715384313041545440334060808883317345942076564796209335132730635772506290338863831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff451717ae7d62e95496cd382558c3bf90508e49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.lcusd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f303185bd0000040300473045022100eacd29a6bef84d50f764e911880d9b9fc54f18f128443adf2eb4d6e3fc95725702206c82ec4d2489330f99951cfd2e7774d930eda01f39e798e9647c11a6e9dd43c7007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3031871c0000040300483046022100fb32bee20bb0186f917502caf995743cb1a965edad409125073bb1d3cd85678b022100f00bddff2995b9078a01369be5902d079c649d83d2143d0750afc3772f32de48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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