ghs.goshenlocalschools.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:2f:8c:cd:93:d5:df:6d:d7:32:00:4e:cc:a8:7c:b7:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ghs.goshenlocalschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:2f:8c:cd:93:d5:df:6d:d7:32:00:4e:cc:a8:7c:b7:5f
Serial Number (int): 415207692450513710401658108940439982487391
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:1b:5e:b5:04:2d:7e:a6:ff:24:8f:3b:51:72:26:77:ef:b6:ea:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:4c:59:ef:dd:bc:27:20:b7:14:51:d2:7d:1c:d4:c5:b9:8e:d1:dd
Fingerprint (sha256): c7:0e:7f:3f:ef:24:5d:b3:4f:ca:e0:88:f0:49:8e:8b:c8:79:fe:43:fe:8f:37:b6:f7:b5:13:9c:92:d7:fe:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ghs.goshenlocalschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ghs.goshenlocalschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ghs.goshenlocalschools.org

Other certificates including the domain name goshenlocalschools.org

(limited to 100 certificates)
admin.raak6.richardallenschools.com
admin.newbernmiddle.gocats.org
sunnyside.goldenruledallas.org
ses.goshenlocalschools.org
bell.robla.k12.ca.us
www.msd120.org
admin.illinois.goldenruledallas.org
admin.bclc.burke.k12.ga.us
admin.almadinah-school.com
admin.nichols.bcsd.com
fes.comalisd.org
desoto.goldenruledallas.org
leonardeulerd.edu.mx
admin.vannoy.cv.k12.ca.us
mc.goshenlocalschools.org
admin.evergreen.bcsd.com
pg.goldenruledallas.org
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.longfellow.bcsd.com
goshenlocalschools.org
admin.redwood.cv.k12.ca.us
admin.athletics.goshenlocalschools.org
lorena.exteraschools.org
admin.alma.cv.k12.ca.us
dvms.comalisd.org
admin.athletics.goshenlocalschools.org
admin.harding.bcsd.com
admin.hlc.gocats.org
gp.goldenruledallas.org
harding.bcsd.com
admin.almadinah-school.com
admin.bethune.hattiesburgpsd.com
admin.thorner.bcsd.com
gms.goshenlocalschools.org
downtown.bcsd.com
ruggleselementary.org
athletics.goshenlocalschools.org
admin.athletics.goshenlocalschools.org
admin.pg.goldenruledallas.org
admin.sunnyside.goldenruledallas.org
goshenlocalschools.org
admin.almadinah-school.com
www.gordonbernell.org
admin.fletcher.bcsd.com
admin.ghck12.com
admin.almadinah-school.com
wilmer.goldenruledallas.org
admin.athletics.goshenlocalschools.org
stanton.cv.k12.ca.us
admin.almadinah-school.com
admin.lindenusd.com
admin.wilmer.goldenruledallas.org
goshenlocalschools.org
gfes.comalisd.org
admin.goldenruledallas.org
www.phcsd.org
admin.wilmer.goldenruledallas.org
admin.almadinah-school.com
www.goshenlocalschools.org
school.sp-apostle.org
admin.almadinah-school.com
admin.gp.goldenruledallas.org
admin.newbernmiddle.gocats.org
ses.goshenlocalschools.org
mc.goshenlocalschools.org
admin.washington.bcsd.com
glenwood.lindenusd.com
goshenlocalschools.org
admin.curran.bcsd.com
ghs.goshenlocalschools.org
illinois.goldenruledallas.org
admin.almadinah-school.com
hort.bcsd.com
bchs.burke.k12.ga.us
admin.bcsd.com
admin.almadinah-school.com
admin.desoto.goldenruledallas.org
admin.hills.bcsd.com
admin.cecdc914.org
admin.almadinah-school.com
admin.bcsd.com
admin.almadinah-school.com
admin.monessenschooldistrict.com
ghs.goshenlocalschools.org
illinois.goldenruledallas.org

Certificate

The complete raw certificate details for ghs.goshenlocalschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415207692450513710401658108940439982487391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 01:05:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 01:05:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ghs.goshenlocalschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757548857767139748941963770284785573822823036347960339893925144374344610478060348067425974228482934901629027804848099306410408096411051134244519091800662856511978007225510999188777637228436061262487633725842885697663848419931701837803506473966212181382795706237650306824474534090363018062651566894876508008998538676594395921472158290279543628232034446669209623703665054204046784532000165599856587357502888150891273727962320953600790936678515843153351305911163669877108733272093226033522343896028950119197798240063874224381698896852989577092316708954770067266028421356065514156551928334080658352221977675943384872063168862560569127826481361164774336745309869912746280145167502687450989972286804116817408057458989144875399384394032517187609938826586402111334966224234012084819243412918047224228147227686456094149330900444410492392383447237107324093836461049568383596493736329893490611777541362463236386154975857110453405166131291814651314161512667512818498431189341140185865525361179229853196230754068152158833949699359302186201537853281738346030874280641557197246755255508851082707242005314078357029200732597108520330551283395953596818102998609517184934050347381070846709566896900071135409375073486072411945487596248714800906534288337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db1b5eb5042d7ea6ff248f3b51722677efb6eacf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghs.goshenlocalschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c66129af9000004030046304402207f96823b9b0e43be3030946514ea4d34bee58f4aab603aef8c747efb9447b394022067689757ca1af4aad1b32752604ede7715e11d9485ea20639a56a9070349cdf300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c66129cf500000403004630440220196971376fd31e63328609bbc3e392ad6b4b6cfbd645aeeab155816346ea21b702206a3817c9ae4d6c695b8bc9af2d5e35690e846eb64851739f797cf55c1bf5233c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004428e7d47043d6bc860747526f03564d9b41647cf2e9e94cf43df0a44424d589d5a5bede6decc7b342b250d23f878f57505bb954fae88fdedd13528c795438504acf612cfbc520813f291ba28aca3c271270d87e92c0cfaec7cfa5b2ff7879946d67a54f3a77f8f703b9f58b20aea6998a54fe322ac67a440445a02c3d3ec3183a020962c5118d7a7df6f973a2b0956935daf7118c4f39e4c4ff81115d58d8c85f3ec1b66fb57d0134030c345e308a934d0816441333cf2d9fb08f4476e2853dd2553862ceb5f984bbf68191b5725473e485bbb3f61c14922276810a7f74a7716d995e9e30cb624f8c8c620328fe1fe830aa7c7302b98ca7e9cfefba873ce665