omega.tiftschools.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:37:8e:53:eb:42:7b:c4:81:e4:dc:94:7b:0f:29:bd:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=omega.tiftschools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:37:8e:53:eb:42:7b:c4:81:e4:dc:94:7b:0f:29:bd:26
Serial Number (int): 343078472404307244420059302753196309069094
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:a3:80:8d:4c:67:4b:9d:4d:31:7d:7e:24:92:98:e4:5f:1e:92:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:77:01:92:22:40:82:45:40:50:82:28:98:ae:99:46:ec:a1:30:98
Fingerprint (sha256): d6:22:9f:39:c3:e7:fe:2f:af:a7:b0:84:b4:63:87:02:c5:45:34:68:07:83:38:6a:dc:cf:5d:04:95:d7:37:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate omega.tiftschools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for omega.tiftschools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

omega.tiftschools.com

Other certificates including the domain name tiftschools.com

(limited to 100 certificates)
admin.almadinah-school.com
abramfriedmanoc.org
abramfriedmanoc.org
admin.newbernmiddle.gocats.org
jes.pullmanschools.org
ahs.oc-sd.com
campus.tiftschools.com
abramfriedmanoc.org
tiftschools.com
bell.robla.k12.ca.us
reddick.tiftschools.com
admin.athlosbrownsville.org
admin.almadinah-school.com
tiftschools.com
admin.athlosbrownsville.org
athlosaustin.org
hms.frenship.us
tiftschools.com
admin.almadinah-school.com
anniebelle.tiftschools.com
lorenaisd.net
lms.pullmanschools.org
admin.rembrandt-elementary.vanguardacademy.education
www.pcsd4.org
www.saltlake.k12.hi.us
anniebelle.tiftschools.com
admin.almadinah-school.com
www.sycamorepreparatoryacademy.org
admin.almadinah-school.com
lorena.exteraschools.org
abramfriedmanoc.org
bailey.tiftschools.com
abramfriedmanoc.org
campus.tiftschools.com
tiftschools.com
admin.hlc.gocats.org
tiftschools.com
sixthstreet.tiftschools.com
campus.tiftschools.com
www.mountalverniaacademy.org
tiftschools.com
www.tiftschools.com
*.tiftschools.com
tchs.tiftschools.com
reddick.tiftschools.com
admin.almadinah-school.com
admin.hickam.k12.hi.us
northeast.tiftschools.com
delbosquemexico.com
abramfriedmanoc.org
jtwilliamssecondarymontessori.wearecms.com
charlesspencer.tiftschools.com
pluto.tiftschools.com
holyfamilyhs.com
admin.almadinah-school.com
www.gordonbernell.org
mattwilson.tiftschools.com
leusd.k12.ca.us
bailey.tiftschools.com
admin.almadinah-school.com
admin.highlandrenaissanceacademy.wearecms.com
tiftschools.com
anniebelle.tiftschools.com
anniebelle.tiftschools.com
admin.almadinah-school.com
lastinger.tiftschools.com
id-rapidportal.tiftschools.com
admin.almadinah-school.com
northside.tiftschools.com
kes.pullmanschools.org
www.lemondenorman.org
admin.almadinah-school.com
admin.almadinah-school.com
admin.butlerhighschool.wearecms.com
admin.newbernmiddle.gocats.org
sixthstreet.tiftschools.com
lennox.k12.ca.us
kalihi.k12.hi.us
admin.almadinah-school.com
admin.pes.davidson.k12.nc.us
abramfriedmanoc.org
campus.tiftschools.com
eighthstreet.tiftschools.com
admin.gordonbernell.org
www.beethoven-secondary.vanguardacademy.education
admin.almadinah-school.com
omega.tiftschools.com
charlesspencer.tiftschools.com
abramfriedmanoc.org
admin.sssq.org
admin.almadinah-school.com
garfieldelementary.org
tiftschools.com
id-rapidportal.tiftschools.com
admin.cecdc914.org
www.materdeiperformingarts.org
admin.almadinah-school.com
admin.almadinah-school.com
castellanos.caminonuevo.org
abramfriedmanoc.org

Certificate

The complete raw certificate details for omega.tiftschools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343078472404307244420059302753196309069094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 03:14:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 03:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'omega.tiftschools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706455851051156491637240202932357961830680555234222587419800852872327194260000871711232515154408762446490200435677580329255667909725068297179261077351678801003502289204278684318843845373032948329484453190823170430276283809524701411375082543539668885636324292040072957043184550720244760692814099124857475156633166580006815564007119530017124801514658393661573909569515430556961936834539373658238599563798950288571647874792115384026576829466187618614340319190356174791422232509756682270514703593827333361637839080144509315197145770076107352788904550319682413669935882390478782866284058212202635375949135281490794014657533165932662550926284711830395172719589310031478104506636314521620102731141452752781159134292471893180232677490237258497343671606273865754814134990711962234558777631338978751048735988247507045706855073647996813242398261047616367008790786840823730946656019569790500971473780321065999656665217264923463988511958048456935124720249750208040367067188631919012783806411510544829062915135612069456925920796646050345541025796313594040538704476542674215582800173956559337063445506481287643141073718998777419348819416951932433092566078084359381863006821918325666255820861674413085988131494057329497584107637795262626357777141227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fca3808d4c674b9d4d317d7e249298e45f1e9239
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omega.tiftschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c70d4f80d0000040300483046022100fe0cd528bf46176da9d9f989c7e3d85a2ae21430bf2225cd8e89eb1d04d64d4a022100b368de14cbf7753830e4ee42bc9eb34ba4393a905ea76909c2273fb8696a13180075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c70d4f80d0000040300463044022014e23ed40d0a14bdc3b364c155504a82ffa6eef1afe5f297a25ecb228799667202202375ca1754d7eb583990d3110df213408eeadca2a22d7b36510376b0f70ca751
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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