www.northkitsaplacrosse.org

Issued by R3

About this certificate

This digital certificate with serial number 03:69:88:6a:32:72:4d:25:e4:ed:f2:05:f4:7c:b9:fc:dc:fa was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.northkitsaplacrosse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:88:6a:32:72:4d:25:e4:ed:f2:05:f4:7c:b9:fc:dc:fa
Serial Number (int): 297247832736049398720279675329037387750650
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:cf:33:a1:14:5d:43:aa:2f:ef:2c:a5:86:5f:89:7d:ea:83:0d:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:d2:59:e9:fa:cb:4b:08:b1:95:84:47:68:7e:f7:14:b3:4d:92:96
Fingerprint (sha256): b2:73:8b:6d:42:cb:b6:f8:1a:73:bf:7e:98:a9:85:8a:d0:0d:a5:37:8f:a1:4b:a6:63:22:0c:75:33:e8:c5:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.northkitsaplacrosse.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northkitsaplacrosse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.northkitsaplacrosse.org
cpanel.northkitsaplacrosse.org
cpcalendars.northkitsaplacrosse.org
cpcontacts.northkitsaplacrosse.org
mail.northkitsaplacrosse.org
northkitsaplacrosse-org.ravingrants.org
northkitsaplacrosse.org
webdisk.northkitsaplacrosse.org
webmail.northkitsaplacrosse.org
www.northkitsaplacrosse-org.ravingrants.org
www.northkitsaplacrosse.org

Other certificates including the domain name northkitsaplacrosse.org

(limited to 100 certificates)
www.northkitsaplacrosse.org

Certificate

The complete raw certificate details for www.northkitsaplacrosse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8srT9FzZBPGxFKBRmY1F
g+oee/HRJZdzZV3254E+UNgdziViO5LK7Qorhw7BgBN64izSQhDf2egjiyEuCADo
BG4i/GG/qebUxLuA/UAx6dsHi7IZN+BcxRf9Q9p+PNQA/GWKcHAllKOlZLRX/8PM
3OFjB3JuCN0pwCxsXAeI0j93cWV+enGTcGYZHtiW+3io5IKOVAI2cJ+ABIMxcCcf
ZI0c/HBNWdTigM8pxcD+dXaew4ObgIKXs1vb7ctnHcKBYX8mYVQ+7FSYBPNU8YiI
JKe8aBkh9fsTyOoqNvwZMgZQVgSkos1AvhiCZpzaPVREOtXSBKi3r9MAv0VqlkPQ
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297247832736049398720279675329037387750650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 10:03:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 10:03:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northkitsaplacrosse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30649687990392211335536508158012990026625867908155668915267557846993124803482767603995592158188896472056670825512589910999818676462943997660835226885969360408920025257896816927584337094799430932462479662539980785661249449385309172794382494345783694726608445289070378834659504983672771827924085018968317575802498599651438053976842709724058535092596648154871882444605767183055540083600720656151443621126241677049786986632340058814402972551370042430532459252771331938534503589898506886838275309299207257632813151945049112700060174539898593342098820477423841389165896157245503979566809892301534096332742604568775515951281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cccf33a1145d43aa2fef2ca5865f897dea830d90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northkitsaplacrosse-org.ravingrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northkitsaplacrosse-org.ravingrants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northkitsaplacrosse.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cede4481f0000040300473045022100bda90562f69c0c09d28fef76d63efc6cd968540c5d4250536c85c120fe7549130220064ecdcf0f0dff95dbd61c343e86e98e75e01909c082213eefb4455043e246970077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cede44a1d0000040300483046022100c5b7a6771bdf86afacef43937efc6f52162e1d7153357c9c4277865935712638022100e8cf675cd9bc937c2eeada776dd04aba16400e1ee629fae2020e8d0a797a280d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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