needlesusd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:cc:f2:d2:2d:d4:11:a0:04:b4:e1:1f:68:59:54:bc:65:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=needlesusd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cc:f2:d2:2d:d4:11:a0:04:b4:e1:1f:68:59:54:bc:65:7f
Serial Number (int): 418189511065742932400942142157184237856127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:8e:bd:1c:56:3c:f7:b1:8e:37:04:2b:a7:a3:84:06:2a:64:f9:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:5f:65:b0:b8:6c:aa:cd:0f:f3:a7:89:71:91:29:b1:58:3d:a3:15
Fingerprint (sha256): c6:53:10:7d:b0:2c:94:3c:05:6d:0d:fb:0f:ed:26:d1:b3:f5:10:49:39:73:e2:c9:e3:29:e5:3a:91:97:75:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate needlesusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for needlesusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

needlesusd.org

Other certificates including the domain name needlesusd.org

(limited to 100 certificates)
hs.unitedsd.net
abramfriedmanoc.org
abramfriedmanoc.org
abchandler.henderson.k12.ky.us
nms.needlesusd.org
tcms.todd.kyschools.us
abramfriedmanoc.org
admin.tcms.todd.kyschools.us
peck.cps.edu
admin.espanol.tecsalvord.org
admin.athlosbrownsville.org
nms.needlesusd.org
admin.mes.mayfield.kyschools.us
athlosaustin.org
hms.frenship.us
admin.clarabartonhs.org
www.needlesusd.org
www.nicholsonstemacademy.org
6gc.owassops.org
abchandler.henderson.k12.ky.us
116elementary.org
admin.alvahscott.org
abchandler.henderson.k12.ky.us
clarabartonhs.org
admin.liholiho.org
116elementary.org
www.pacificschool.com
admin.stonecanyon.owassops.org
camden.cuhsd.org
balloustay.com
lawtellelem.slp.k12.la.us
abramfriedmanoc.org
abramfriedmanoc.org
admin.alvahscott.org
needlesusd.org
admin.alvahscott.org
admin.alvahscott.org
7gc.owassops.org
sunrisewaldorfschool.org
trinitystelementary.com
abchandler.henderson.k12.ky.us
116elementary.org
admin.alvahscott.org
www.notredameacademy.org
nms.needlesusd.org
admin.edlio.mx
www.eshelmanelementary.com
admin.alvahscott.org
admin.alvahscott.org
admin.alvahscott.org
www.ascisd.net
admin.7gc.owassops.org
bishopmacdonell.wellingtoncdsb.ca
delbosquemexico.com
abramfriedmanoc.org
116elementary.org
holyfamilyhs.com
www.ccs-nc.org
etc.needlesusd.org
admin.alvahscott.org
116elementary.org
abchandler.henderson.k12.ky.us
etc.needlesusd.org
abchandler.henderson.k12.ky.us
www.summitacademyschools.org
www.macademy.org
admin.ntes.todd.kyschools.us
116elementary.org
admin.clarabartonhs.org
abchandler.henderson.k12.ky.us
garfieldelementary.org
vces.needlesusd.org
arnaudvilleelem.slp.k12.la.us
admin.sssq.org
nhs.needlesusd.org
116elementary.org
es.franklintowne.org
admin.sierra.bcsd.com
116elementary.org
stonecanyon.owassops.org
admin.cuhsd.org
admin.sandiaprep.org
lennox.k12.ca.us
admin.pes.davidson.k12.nc.us
abramfriedmanoc.org
admin.alvahscott.org
admin.alvahscott.org
needlesusd.org
admin.brightfutures.grandviewc4.net
abchandler.henderson.k12.ky.us
116elementary.org
admin.needlesusd.org
admin.tcms.todd.kyschools.us
admin.br.needlesusd.org
abramfriedmanoc.org
admin.sssq.org
admin.barnes.owassops.org
116elementary.org
admin.todd.kyschools.us
admin.alvahscott.org

Certificate

The complete raw certificate details for needlesusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFxsAH+OcXVeUAclO7XZ
gsODFspWFbfYSuMEw10wXt/RwfQymsIQ2cUQipeIAYizQ+hyL5YgQ9SysmqFbmS6
JE4CI1g6JykhV9/FV+oWCDHJ/Fi8FVI0Wl5jf0WaKRR5I8SoUCPlXZfyZZRZZ60Y
lr4P0KOgofcD3ZKsRugzcwYUqI98qf0oRC03cUJ1N/ftM9NGo+D2at4PXrTieYw+
ySJrUh/LDFII8YNbKL8zPH0wxlW5v3uNxBxNasZtO4weDj4HrCHc4z7kw5fd8NKz
5R0pyI3JwLE9O31MosfPkEhGTrSG5BBrOfxz49mPIfNnzsSDGX1YK3AEEgVTFA9I
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418189511065742932400942142157184237856127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 12:14:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 12:14:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'needlesusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20748656943345993367123738257796878735885477579425257104953748077456314415674486407536256289924114079183217039176197436448897342251381221823793263655344676544284455155083885166271205468627192580297208394658359679346817390209898492849614677109464734536244617581856858534080536326514074221560971541182473014166505248018926475608215141658052156653282753109535011233024392821685813340172753570125650469690276927106384656170358593682096975222783697575034409764610344680812502807584370713878018344900066126239073295887956517134988749499138408347899846504306565500819524977217167782846033112176375619277733120445497757091871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e88ebd1c563cf7b18e37042ba7a384062a64f9f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needlesusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b240637490000040300463044022065456f96d53bda05fd3f7f3faffa7e55d26e9e1dd50f0a12b9fc16f690c04dec02205ed1c7e185b6a2e2633c85d0f40792cf6aa8098c18fa1904187a9e5ecdf36b89007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b240637530000040300463044022052177a5640023f175f9e9f49c4150b4a45f11e84a4f071bef2c7682cc0971fec0220193af75df8589e855d8a0b0d57f50e553a7d5409fc3e6103684f269ba4de22db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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