somerset.k12.md.us

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:17:e9:59:22:fc:1c:3a:ed:c8:0e:fb:3b:3e:6f:85:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=somerset.k12.md.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:17:e9:59:22:fc:1c:3a:ed:c8:0e:fb:3b:3e:6f:85:0e
Serial Number (int): 402245541557526592094788154616400292316430
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 95:f3:60:e5:a7:a9:6a:df:f4:02:ca:dc:ea:a3:99:fe:93:e8:41:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:79:ae:38:10:60:db:9c:fd:73:1e:bf:41:03:9c:26:fb:86:66:ad
Fingerprint (sha256): d9:19:38:58:f5:37:c7:76:c8:0b:17:1c:ff:19:aa:47:c2:8d:42:30:fb:b7:6b:a9:6c:b2:93:3f:b7:44:9e:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate somerset.k12.md.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for somerset.k12.md.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

somerset.k12.md.us

Other certificates including the domain name somerset.k12.md.us

(limited to 100 certificates)
wes.somerset.k12.md.us
admin.arcataafterschool.org
somerset.k12.md.us
admin.bayhaven.org
chs.somerset.k12.md.us
admin.bayhaven.org
shepherdstown.mbgsd.org
admin.chs.somerset.k12.md.us
somerset.k12.md.us
stmmsa.org
admin.elmwood.mbgsd.org
admin.bayhaven.org
cristoreytc.org
admin.whs.somerset.k12.md.us
somerset.k12.md.us
admin.somerset.k12.md.us
admin.bayhaven.org
upperallen.mbgsd.org
admin.pes.somerset.k12.md.us
admin.bayhaven.org
pa.somerset.k12.md.us
portrichmondhs.org
sp.somerset.k12.md.us
admin.portrichmondhs.org
ps.somerset.k12.md.us
admin.dis.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
monroe.k12.tn.us
admin.scths.somerset.k12.md.us
admin.chs.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.highschool.mbgsd.org
mail.somerset.k12.md.us
admin.bayhaven.org
admin.gulfstreamschool.org
somerset.k12.md.us
ps.somerset.k12.md.us
admin.bayhaven.org
lightspeed.somerset.k12.md.us
admin.sis.somerset.k12.md.us
admin.scths.somerset.k12.md.us
admin.ees.somerset.k12.md.us
mail.somerset.k12.md.us
admin.arcataafterschool.org
www.usd465.com
somerset.k12.md.us
admin.broadstreet.mbgsd.org
mail.somerset.k12.md.us
admin.upperallen.mbgsd.org
admin.bayhaven.org
mail.somerset.k12.md.us
msp.somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
admin.ges.somerset.k12.md.us
sis.somerset.k12.md.us
admin.wes.somerset.k12.md.us
stmmsa.org
mail.somerset.k12.md.us
lightspeed.somerset.k12.md.us
somerset.k12.md.us
mail.somerset.k12.md.us
mail.somerset.k12.md.us
somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
www.somerset.k12.md.us
admin.middleschool.mbgsd.org
somerset.k12.md.us
sp.somerset.k12.md.us
scths.somerset.k12.md.us

Certificate

The complete raw certificate details for somerset.k12.md.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJawtTjlpLVVagqcohLW
sDdY+MH65BmPfUAw05H2h3WSa+bCwWc1YT4QqUfhz6jJAfMGU8S2SPfDVjyYM+Na
Bq515ImYtLvW+rvmUElbt3rXvsDWSBW+1R2ZSrHthbnq+o8XLWdywrt8nFKHvXo0
a6Mb/P5PpQvJMJNiq7kCM2PGsE6ZSR06GhRNRPKa2ZVhfXYMhynvx08gr/2cUUtX
iHSAuHhj6OwTKZMdf7fp8FdycBdejSt8pIOKOxnKPt9w27TKqJzsEc4Z0wIKu8sZ
DQ0Q+l67XLdgEYSczxp5zlAb3n5yYZ8aKLtJxsxGxXZfojyzCceLybZm1H6Le2hi
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402245541557526592094788154616400292316430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 22:58:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 22:58:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somerset.k12.md.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25321969132499975294285716377572398996634920432544693148430587254873015852954230427799555400765924230653891953691346457730335921130680823966518783816581286874423311787398334007352662854172131802048579134270208580261308198093135956943265784041164123861835682760740855905063694885161055395524063550441554740432263290221184499748376336218783538112670436072879447052683720910204797402835132379491416607518263957931282062596893027935287696653570356712715084657867958525859751247672776932662870353681341203209717442947906826729532251488583643891200442815672243711347802264327429769573396160640063722649486871227231797535309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95f360e5a7a96adff402cadceaa399fe93e841b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somerset.k12.md.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e91cc8aaf0000040300473045022100a88376139312f23cb500d0803bfa30e55a3454bd5fe42505cbf73d9dcfb8d8c20220086ed7d3c00197c898a82860c136f6c633ced1944782239f307590c377a39d8d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e91cc8aab0000040300473045022067d2118030d8d57bd01c447329ad265b5cc63e7cf62d7d12d5422fdf4861cf7f022100a11630e854de3bb6282239b88f8898e4d9f6b3a331b9d981f9c91f1e1d99cf64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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