www.banderaisd.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ee:f0:2f:35:c8:c0:36:b5:af:a2:dd:06:d0:5c:a8:ae:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.banderaisd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ee:f0:2f:35:c8:c0:36:b5:af:a2:dd:06:d0:5c:a8:ae:6c
Serial Number (int): 429755606902037900595433815793770869337708
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2b:9a:c8:a3:60:fb:04:c8:cf:4c:c7:89:cc:c2:7a:fe:a6:14:b3:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:35:f5:68:43:4b:02:23:b1:97:17:ee:65:71:49:e8:bf:33:15:b8
Fingerprint (sha256): da:5e:b4:5e:a6:5e:f8:62:13:ff:92:f8:f2:19:64:0d:4d:02:d0:ed:7d:bd:6f:91:cf:13:f3:49:e9:b1:5b:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.banderaisd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.banderaisd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.banderaisd.net

Other certificates including the domain name banderaisd.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.banderaisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429755606902037900595433815793770869337708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 13:03:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 13:03:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.banderaisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946855457599520178986526262307007891713179032618813022216727098896149060370560015633487893329620254677011906746353423191406485502334624671824642688655828550020576837239718017851773449906496581289306980910182325188025671413422041858131345876540162335510372843402566783155633374820727187874699552684357250411152252586679673482875002628689712076530850054850905531890788187336965061544528388450218626640263409956724593924853797943479264576376361912067599988988749609128613824312369816560413272726019223051092137092577082825994599389084464725900291707111884405345652038024140918895700046577690681498997796698510189621722562287153500685908085936065860119564039069921071140091329797414279839117581304533793163809368966653341732229208607028606773013694983356642035913564444515159479391397557640143054550256157239307637060423199250363081870982193377846917469700920338239286913294697775360475716796029659252382753101448288367689541580642018021371262038202459811471646913279540442597517443908187939877266330207685173551048399603982198207438075026458539360885030113287606272825074742819690093791034893606304065299349453702934101960128436201247897221610230461872446064478976967551806948316365907734491031327704467224445567682888379604533917956599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b9ac8a360fb04c8cf4cc789ccc27afea614b37f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banderaisd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a214fb5410000040300473045022100af5dfe5daf6f6e409af0a82332ee1e4d172040081e97074efe3e78e06d815d80022068366b52460a4e3e274e4af468ff279fd3c82a23dd8f5f43b5a546edcec4c0bb007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a214fb532000004030048304602210092c2570f6395f33126b06e200ba14261f091d0061614c7c42daefeba167d2937022100f10181dce42a8171b32fd414dbd6b8a35ab44cde9b135575b623e520bd6ec47d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044c4d3b38d528de0719757e9228a3ae844379c3b2cb8731496c596a8a0159e2dc4787e743c9ee2c4728e0c7f12099fe6e8525bac24bbefbeec5a125dc84b07eeb7554f3e7ba0480547f13061d7886fee7d04014a341a25b86dd1d116b8725a1b32de7e1368d6ebf5aa3a70d71d955f29ea6e1c1f9ae6d3405bb220cf94f44304e58d1571c4a8d484b75f580333b969a4ecaa4c6417badac202c7c2723a7f11af99e07d9d60c939846abfecbc6f3d72099302f6fedb07f286184892ec7eeef63f734ee6b147b1dabd4050aa494270693508a94cf37a96775982904563c927714784842e11004d097e053a2a099db6ce34badf50560bbbc75173511fa1059463d2