llcsd.net

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:11:88:18:bb:42:cc:53:04:05:b0:db:c0:c2:41:0d was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=llcsd.net

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:11:88:18:bb:42:cc:53:04:05:b0:db:c0:c2:41:0d
Serial Number (int): 5407941396871203365640194861442416909
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f3:ae:0c:e1:c9:3f:a0:54:8f:a1:a5:17:48:29:9b:4d:06:ca:0d:4c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 20:0f:c9:a4:b8:c2:cd:67:d2:52:4b:86:70:50:53:b9:7c:30:b1:64
Fingerprint (sha256): e7:f5:d4:37:ae:34:c5:99:3f:31:21:48:1a:b9:41:c1:4e:d3:a6:3c:b4:89:2d:c0:15:ea:4f:10:f1:c1:ba:f1

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate llcsd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for llcsd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

llcsd.net

Other certificates including the domain name llcsd.net

(limited to 100 certificates)
www.stfrancishigh.net
williamorr.llcsd.net
jersey.llcsd.net
186streetschool.com
68thstreetes.com
admin.aasdcat.com
williamorr.llcsd.net
lakecenter.llcsd.net
*.llcsd.net
admin.lisbahamas.com
cte.mvusd.net
lakeview.llcsd.net
lisbahamas.com
llcsd.net
admin.be.ysd.k12.sd.us
llcsd.net
hs.humphreyscountysd.org
186streetschool.com
www.llcsd.net
llcsd.net
cresson.llcsd.net
cresson.llcsd.net
paddison.llcsd.net
www.regentsas.org
186streetschool.com
admin.chestnut.painesville-city.k12.oh.us
lvmhs.lucernevalleyusd.org
studebaker.llcsd.net
186streetschool.com
admin.lakeview.llcsd.net
68thstreetes.com
llcsd.net
186streetschool.com
68thstreetes.com
186streetschool.com
186streetschool.com
lakecenter.llcsd.net
www.humphreyscountysd.org
admin.llcsd.net
cresson.llcsd.net
lakecenter.llcsd.net
www.186streetschool.com
186streetschool.com
admin.es.hillcity.k12.sd.us
186streetschool.com
jersey.llcsd.net
williamorr.llcsd.net
lakeland.llcsd.net
www.llcsd.net
lakeland.llcsd.net
lakeview.llcsd.net
admin.adulted.mvusd.net
lakeside.llcsd.net
admin.be.ysd.k12.sd.us
paddison.llcsd.net
68thstreetes.com
llcsd.net
*.llcsd.net
williamorr.llcsd.net
186streetschool.com
cresson.llcsd.net
llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.llcsd.net
admin.wilkescountyschools.org
www.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com
studebaker.llcsd.net
lakeland.llcsd.net
admin.williamorr.llcsd.net
www.uci.edu.mx
cresson.llcsd.net
186streetschool.com
*.llcsd.net
lakecenter.llcsd.net
admin.regentsas.org
llcsd.net
www.llcsd.net
studebaker.llcsd.net
icabh.org
ige.humphreyscountysd.org
admin.be.ysd.k12.sd.us
studebaker.llcsd.net
llcsd.net
www.llcsd.net
llcsd.net
llcsd.net
lakeside.llcsd.net
studebaker.llcsd.net
llcsd.net
lakecenter.llcsd.net
lakeside.llcsd.net
lakecenter.llcsd.net
paddison.llcsd.net
llcsd.net
186streetschool.com
186streetschool.com

Certificate

The complete raw certificate details for llcsd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPH6tQM3jhOVqY7jDFl
0b3gdQiXMF5KhNq52Oq6tER6DHxZgK5XsjYVMmpISw1a47HWGWV1WMHVIQqfNz09
6Pk1gFqeUavIYVWA8xz9RmRokiQ7xJCFK6YKMC+3ZvCzg0idnZZtylGN4BC8eocx
18EJ2a4ByVKrJOJx64wI+mUvXTOw8tnCEqfWpVKE53wNp5avPLE0NgrnjCptzRP/
27RMJ0boaBaBwIFaxDC0ojzzlEjeebwEiVJiftXqofVg6RKmHWa4trm7lQRgJF9J
uuzxrPlkmQFFrN1052s9W1GfRmUZ8TK0QMJxu6+nWZmXVQFl4diVjHAGC7cbAqu9
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5407941396871203365640194861442416909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'llcsd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22432833258222326559989648891189104251253563573787958636024748212844251666455395842707514521594333628983630979053331345353469250890883025841997232487304158922035210467054581381202360699465270072421372014532643685631222197011842985441644307130829483808347437730448876212621473329001986936938460722156442073625925873626644453109611449687714103363546179238417362088249509816587397827657968092064696388659059022497233549709056760308394528507952238337856956067871813897062962922009901186814127179574347277174235380516746145314583580238872549874453210910402480213387185313426424282175457271758514864699481501245077149433289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3ae0ce1c93fa0548fa1a51748299b4d06ca0d4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llcsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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