www.griggscountycentral.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ce:7f:ff:38:40:df:d9:e5:68:e2:54:47:c9:26:a3:6a:9f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.griggscountycentral.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:7f:ff:38:40:df:d9:e5:68:e2:54:47:c9:26:a3:6a:9f
Serial Number (int): 331605162513112492893087098783545640053407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:13:5c:ec:41:61:90:98:44:f0:a4:62:ac:74:11:ff:fc:1d:e2:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:e6:f6:a2:ed:06:49:58:25:90:87:0f:5c:57:1e:96:8e:a9:b7:c0
Fingerprint (sha256): d7:5c:0c:e2:fa:27:a5:57:90:6f:98:f8:d8:82:02:d8:9e:c0:70:f5:66:a4:c5:9f:43:98:3b:1f:a9:14:6d:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.griggscountycentral.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.griggscountycentral.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.griggscountycentral.org

Other certificates including the domain name griggscountycentral.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.griggscountycentral.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331605162513112492893087098783545640053407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 02:36:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 02:36:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.griggscountycentral.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658397361544938018596917246713669363980760083902595515979866044321268800114692879092413100072804473960099158882780393873676766740735460160115798183687033056337078674812940733098718080053133368879862088726216917847426944819282321357299337870455909534106822600348324394897725936968513560337073203917932942051504107986525813617373054194183403742820084754333407186956481564625331185787084934588686001180052248409842599665923939234356742631702658995810934433008128372805209319671411210327315985594590226157719245142194003665123784872436046558408073287286388113640331029494524722960207153398269295936339056387210323707959760021776934421293609818445036596094918903642763773027110269766265330757883482637434256984824425632917895440881603791785512121762125871049787958127406814683998767115191710978675394174091316600869776960441168227275744506128925766552635662250343928655972158548211931127713009044569170276694917870992496640820149660907302856815844643966916693842046424927651830632467706853584713891296093783133260647395438188224911951497337714739263381393229053782977812791566649665074948570636648667263090750678471863879417532453338866942716408942631909828999601786240303001102113281032740689987814112236836309999553767278933980894867339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd135cec4161909844f0a462ac7411fffc1de20a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.griggscountycentral.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c192669420000040300483046022100869976185f984559e33b38f65860580c2b747492b0f9cbade59ffc011a47b0d40221009a0bb3fa814e5237ddf472097c51c1f9dbb19f3f32ad1dd5fa03d198927f5437007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1926694200000403004730450220551a1084ca2e6bb7ebbe4d2889d7c55c1dbb96eafddc57d242384f4c91fea1e0022100fc29b47f6c87fd2c97973dfd6cedb1e2b1221248d85ca3865b8b902b909ace35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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