www.fortdodgeiowa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:66:75:dd:3d:c3:28:86:d0:ed:4e:c7:4d:c2:8d:68:e2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fortdodgeiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:66:75:dd:3d:c3:28:86:d0:ed:4e:c7:4d:c2:8d:68:e2
Serial Number (int): 305369476369690150611504115709468243486946
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:e9:31:1d:73:85:c0:dc:56:af:42:33:a1:9e:40:01:40:0a:9b:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:ef:61:cf:31:e5:be:40:c9:16:0a:78:b0:f9:00:56:b4:2a:cc:ff
Fingerprint (sha256): c3:5f:98:d4:22:73:3a:80:0f:d1:56:2b:f3:bb:33:e0:bb:af:83:56:49:3f:67:29:16:e0:30:5a:f8:7b:47:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fortdodgeiowa.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fortdodgeiowa.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fortdodgeiowa.org

Other certificates including the domain name fortdodgeiowa.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fortdodgeiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305369476369690150611504115709468243486946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 12:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 12:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fortdodgeiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3763726343736804705835387109395509017973529726202096224497938243632632249061267254300161576377145281745288275417377062668327646904418697264249639976803104200967056082311399934295416785055185127702201815764127168942249411450969246811567535111146464157490046920480195388300636654609743218935670710539141078790929081955682337957405734976196441584253044455097495993861253144103764324133028789977606830986393425485884037964019180260410829000353915763307352620898832004649418893645307271046467426483577367983248650565714862720573193780623046801692770557850420472621809981957961725276766913009258589723392483118688215426627408796465134230334362399024734978991642686453240879042596638299073114145854603578025408229805408039920039166851772176543097111648138616143292820040693571200691489030865215683112266318613780231444812941244393557407253392374597082284290460545434984290440697263687325912299584696550780974870665008271321187523587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87e9311d7385c0dc56af4233a19e4001400a9b39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortdodgeiowa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b2295064e00000403004630440220654f7b13f7bda5333b9ff769d733c7bfa3044a6c2f53210f446baefe97d1985c022048528129676620c87ff637b18c65674f8c9b256789d7ed6a212717f679f30f94007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2295066a0000040300473045022100bd2ae5d8d0634a3347b9f3c62000c0609c4bbb33287b71ca67213bff737700e902206b3a69cadbd47cdf4316419520f80577d8e8717d74de0160cfaf910e5dbf7be3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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