kosonk12.org

Issued by R3

About this certificate

This digital certificate with serial number 04:8d:26:5f:dd:99:91:8d:a8:48:74:2c:b9:83:d1:bf:62:0d was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kosonk12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8d:26:5f:dd:99:91:8d:a8:48:74:2c:b9:83:d1:bf:62:0d
Serial Number (int): 396479965889514175397986846730476050145805
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:52:6c:d0:14:a7:5e:be:69:91:ba:34:88:c0:32:07:2b:23:37:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1f:d2:5e:60:76:6b:8a:f9:63:22:c1:b1:72:1d:b3:74:3d:31:31:fd
Fingerprint (sha256): e0:c4:3a:dc:58:a2:7f:df:91:e0:ca:55:bf:b6:b8:10:16:e4:bc:d2:ec:10:8d:eb:ad:ba:d8:ee:14:9c:7b:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kosonk12.org

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kosonk12.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acropolis.cx.t5.at
car.mohos.net.zodiachoodies.com
dentcommand.com
fairdeals.in
gopphoto.com.tokenea.com
ifthedecalfits.com
indoortvantenna.com
kahloon.net
kosonk12.org
leilalewis.com
ltk.co.in
miracleplumber.com
nationalhomeschoolconference.com
numberall.com.cn
sexstoriesliterotica.com
simiisland.com
theconvoytocanberra.com
www.hemphaze.com

Other certificates including the domain name kosonk12.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for kosonk12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm0B1q6rR/Gssx1tMLrx
eNlsHjojSrWJX8A/wBF6ZTjV7VoiHYyHJx2VfsSvG0a03TIRVq5jYmzPA5IvZFmi
db3Gdn6DATFIjCuMffb6YeEObmBUoSIE7E9p5yLR35jhadfjfY1pfbWJIWiUBbpM
quBzCxTsB3xaVSP5J5AzYMkYbeFtfZhcU1hEXjpKW4PQ2OYhB5qX9qcLuKjEwBwi
i4+M1D45uYG77+jEleeNijj0+AJvRSSi5kg4DwFAZBg5oNZS0qrtTKATLTDcb8yF
ZS08ENp93NKrU1moWyymp94XK7N5steIXReBuDkuRUhL+ry0uaJbRQ43n3nHNH9H
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396479965889514175397986846730476050145805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 06:55:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 06:55:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kosonk12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23029124948705880108809157898841246114950202933479324650490228957339603377682918434633139052412913911014861900918351231306090135386772925421190891208905951809356838923311280954011055806199725612197699656620892379935499813127575128100482206345037717844943815420422186996623307001417668836496851487099264849171512658658163877537992656572433099767650958987022529422310053089793380179945264682547681331729983390168577754011967366211956498463151808395607022555896863606613538447986417984771753857935124693736894582441997407502421164796129715170350392313724781878526281173561629458796021080828993868146595439235462244288367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98526cd014a75ebe6991ba3488c032072b2337a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acropolis.cx.t5.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.mohos.net.zodiachoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentcommand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairdeals.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopphoto.com.tokenea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifthedecalfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indoortvantenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahloon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosonk12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leilalewis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miracleplumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhomeschoolconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numberall.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexstoriesliterotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simiisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconvoytocanberra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemphaze.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be6939a75000004030046304402205f6f26d187f1aca2ed35bbdbdcc87238fc05bda197a08536957f5fbf58c1d6130220298a1ac33d7c9ae4ebdc19664804ab22f8da59d0d15d1fc66be49e8cb5a8853a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018be6939a7a0000040300483046022100c6b18fff70e7f9e7d6537dcdc7a4619e7d0db816ad46a74d90ffa17583150187022100a5d38e85709a7166049ecfecd1daaf10d412f58fde61fa8110cf8a05d8030759
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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