aspire.sjsd.org

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:1f:3f:50:18:4d:bc:0e:5a:d6:75:6f:fc:6d:dc:d8:13 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aspire.sjsd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:1f:3f:50:18:4d:bc:0e:5a:d6:75:6f:fc:6d:dc:d8:13
Serial Number (int): 282135616984547708181413265247310339430419
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:5b:c5:ae:62:5d:32:7f:7e:f0:3a:f0:4f:ca:20:d4:47:2f:09:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:8d:fa:d5:78:3f:d0:59:bc:19:c8:d5:27:a2:af:44:34:04:00:3c
Fingerprint (sha256): b8:8a:d4:7d:b0:17:54:d0:fa:47:eb:a8:ef:d6:bc:71:18:89:7d:62:99:64:aa:6c:ce:af:c7:63:6f:04:23:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aspire.sjsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aspire.sjsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspire.sjsd.org

Other certificates including the domain name sjsd.org

(limited to 100 certificates)
*.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
blanding-elementary.sjsd.org
*.sjsd.org
www.bduesd.org
sis.sanjuanschools.org
media.sjsd.org
sjsd.org
hybrid.sjsd.org
admin.ams.dcs.edu
old.sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
albert-r-lyman-middle.sjsd.org
sjsd.org
*.sjsd.org
rds.sjsd.org
sjsd.org
web.monteverde.edu.mx
heritagelanguageresources.sjsd.org
sjsd.org
media.sjsd.org
sjsd.org
sjsd.org
monticello-high.sjsd.org
media.sjsd.org
old.sjsd.org
old.sjsd.org
la-sal-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
bluff-elementary.sjsd.org
www.colegiobauhaus.edu.mx
ps26.jcboe.org
navajo-mountain-high.sjsd.org
monticello-elementary.sjsd.org
sjsd.org
old.sjsd.org
montezuma-creek-elementary.sjsd.org
sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
san-juan-high.sjsd.org
tse-bii-nidzisgai-elementary.sjsd.org
media.sjsd.org
media.sjsd.org
san-juan-high.sjsd.org
heritagelanguageresources.sjsd.org
monument-valley-high.sjsd.org
albert-r-lyman-middle.sjsd.org
rds.sjsd.org
media.sjsd.org
monument-valley-high.sjsd.org
heritagelanguageresources.sjsd.org
media.sjsd.org
sjsd.org
www.sjsd.org
media.sjsd.org
*.sjsd.org
blanding-elementary.sjsd.org
media.sjsd.org
admin.albert-r-lyman-middle.sjsd.org
whitehorse-high.sjsd.org
media.sjsd.org
www.fortsupply.k12.ok.us
heritagelanguageresources.sjsd.org
sjsd.org
sjsd.org
sjsd.org
media.sjsd.org
media.sjsd.org
heritagelanguageresources.sjsd.org
old.sjsd.org
aspire.sjsd.org
media.sjsd.org
*.sjsd.org
admin.stjean.org
media.sjsd.org
whitehorse-high.sjsd.org
sjsd.org
sjsd.org
admin.albert-r-lyman-middle.sjsd.org
sjsd.org
heritagelanguageresources.sjsd.org
*.sjsd.org
media.sjsd.org
www.stjean.org
www2.gpcsd.ca
*.sjsd.org
admin.ii.jcboe.org
media.sjsd.org
*.sjsd.org
sjsd.org
media.sjsd.org
cha.ldcsb.ca
old.sjsd.org
media.sjsd.org

Certificate

The complete raw certificate details for aspire.sjsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282135616984547708181413265247310339430419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 14:06:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 14:06:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspire.sjsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816612994233417266132737917995636973169276615285511598153968628276978380412071413506187204663649377403046097952867644768468169385204207587019014935090733610387995885414775967291834849426590353179127950338077403795785891651910997668884489255985302848500543354927412842985758657100647109118210103839301720712452709842537090402715871797291435327093239667088362631463955920859568935411635962951670866499149291604966946906897659975240263659469961759378431115663500932669544187420213079503349202082109164620620412520938903405106664733269852799438812810221065867956322418329975469205037327007065213312123180985221675956424681633363123159755660620539664947515462138617879611690898238588531768675222306458066931566513024801557661611396863769155582235366115841276876604967372930306013737270668236586958579980930661386444258772551502090660625324812390009875849004156313963542019246308629664032741978420017497186035361284679129989953818490203607216913684313236544114235383318899528133984845724270369808940091685232771282824525374817710241945157601220421387528881817724285307272875794617468994251099323402357977680897649471530991960672618268358546535379503575744561395649451934245410554999795067060788959098701065936931381724477202353833693600317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c5bc5ae625d327f7ef03af04fca20d4472f0983
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspire.sjsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccab60dcb0000040300473045022100ec45850f600001e44b7837b61937dc032c1251639aceb7c1692cfd496563aaba0220780c78d4d6f5c9f230c22b500b911bb360fe04c9f0bea1a7948da9c53682ec2300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ccab60e1c0000040300473045022100f52c7537ea8bc4ee8b5484c1db8ded4d1f08a3fd5be1816ecb365a9bdbd15b430220203a25614602c2c2977c5d41369fb004e4d99627c7fcf74bd4ff034528307512
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00779eecc520a12cd6203035d6776c0586beace2f53c936cc80de677eaf873d86ee2989fd0d05dcd14fcde54425c8859e67ce414449ca53fc7e89d0f5bc4c8ccece069bb7c65c4ffe7165e58ce67680d4bf486f8dcbb571a35f665f3bdce058eefdc7c7d010dc4ed6ca1ceadaa4f43c0531399ba95d986bca849d80d2d7fe1ace2a11ec60d344e81d823a8235202d6d19bcf5f42babfe3691199b255943298ba136e12fe3144b5564fc9aa0d7c6293c43c7b5d8226af9b15732bef790cdc1e6af0cbdf73010f8a9bc20adc31929b4e34ee54efaa178a76b88d20ed6e1b946858d226c192bde60dcc466f9c44a05af78aa515dbe5d1412ab2bf989d94f4066d57a2