*.shulcloud.com

Issued by R3

About this certificate

This digital certificate with serial number 03:66:3d:aa:7a:87:c0:2d:1e:62:04:3b:4c:21:be:e3:71:5a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.shulcloud.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:3d:aa:7a:87:c0:2d:1e:62:04:3b:4c:21:be:e3:71:5a
Serial Number (int): 296127627304634543254036029415313012650330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:aa:08:47:a1:88:76:1e:ff:41:98:7c:ee:6a:c9:1d:4e:13:d3:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:be:b8:ba:ce:49:41:75:f1:7b:e4:96:ca:90:96:29:1c:1f:7f:ab
Fingerprint (sha256): c8:99:30:af:7c:25:34:74:b1:76:c6:45:45:bb:53:20:84:e4:dc:cc:ba:ea:51:b9:d5:14:74:a7:13:81:e9:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.shulcloud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.shulcloud.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.shulcloud.com

Other certificates including the domain name shulcloud.com

(limited to 100 certificates)
*.shulcloud.com
*.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulslive.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
*.shulcloud.com
*.staging.shulcloud.com
shulcloud.com
*.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
shulcloud.com
shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulslive.shulcloud.com
*.shulcloud.com
shulcloud.com
*.shulcloud.com
*.shulcloud.com
shulcloud.com
*.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
*.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
*.shulcloud.com
shulcloud.com
www.shulcloud.com
www.shulcloud.com
www.shulcloud.com
*.shulcloud.com
www.shulcloud.com

Certificate

The complete raw certificate details for *.shulcloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296127627304634543254036029415313012650330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-01 09:22:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-30 09:22:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.shulcloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720051231983468534390040556577191371077011926398892174892745383941685814415307891285101916417635899759124694713786859647890359605963236017749973123920373357539710786452680414620375919883378047498823911647225287389700955463492000036897882215975375690330954658310297678601630816457833211451803513997811740328198118711212986405073997428953590318146774600043078544805704018523306628781840663581602606616100453421157505080251797865668867524246298884629930221752546607144313086666854264778744159749003879917330800970611654583580479205630267516259902509852449137492611165771987208137753826129544211430847054136799325469783088562807703696225476126301791521010028192211215082950057415920921454640610168691668412615061411773026628911156525671897831627874769703085706690135803123900015023700070994840685515053474274884009283734830994899116703180002925103175280770050836715202826257696370957195184197882666578704868645286407716064553358735508692817974813156563075704291148669406369094940182272343895991548270372804205352801937851199990903910393177324898199011199401267354481812100680665012736113725714427722284683222930984648949527676515173751056488224602273280344046123796300293597276776126334785808349136881653761174510088700032110478508266721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faaa0847a188761eff41987cee6ac91d4e13d332
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shulcloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001788cf4eafe000004030047304502207606df4e80ef3aed40e9324ba9b680f183b29b40e8cc167cd03dab86794868b6022100d517c98bc14625b11dcae1eb4a3b9a80efb61236a196149891b9465e5170e2a7007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001788cf4eaf80000040300483046022100da26f90e47b339cd6c5ea4c232990f19f313681a4d83ea925b203a8a2d1d55f902210082b46c7321774d63ca29a0ae1d61545ffe678daa23d6e498c6c31c5343c3e266
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096f7e1a1611acefbc25cd8bff8576446833d84dac88bfca32047c6b40ef8c086aae28d2f0d9aa8ee5c700e8621bf0bc41835bc5063ea7d21278ce9c003be03ae39a44262187469a4d580173210cb972ad0fcde1a708bf9a98ff0731ff769015cfadc59c4bcb56cb4482f1834ccd7eb566973a57efa9ad38cda2b5e7098daa9e5a83249281f1d3feae1cb71b9ca81e86333a8c8b7f2e3e7075b7ff1992866461bef1e78a9fc0ea678358ec6d05aa0f3a81fb511c67321b9f684bd0d79efe515522bb11c755a73b65da7afaf6d8d263f562d1c7881cc20919b341b62e3130915ae39553abf490545bedcecf96bc6ed93041032cb1281a40a4c146face68382a145