agbumds.org

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:08:51:e0:21:ae:24:4a:43:cd:6d:b8:19:c7:0c:8f:60 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=agbumds.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:08:51:e0:21:ae:24:4a:43:cd:6d:b8:19:c7:0c:8f:60
Serial Number (int): 405627640315698643941052846033995633037152
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:d5:b2:e5:75:be:fa:96:e9:5f:ca:dc:8f:82:b9:f0:2e:f7:5c:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:6b:dc:a7:a1:95:3e:06:fd:d8:fa:7f:2c:b2:bf:a8:f9:8a:00:49
Fingerprint (sha256): ec:48:9c:b6:38:d7:83:14:cd:b5:10:22:9d:07:a5:0e:2d:51:6c:a6:1a:21:61:ee:41:71:ce:4b:ae:f0:a0:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate agbumds.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agbumds.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agbumds.org
www.agbumds.org

Other certificates including the domain name agbumds.org

(limited to 100 certificates)
admin.agbumds.org
admin.agbumds.org
cenu.edu.mx
agbumds.org
agbumds.org
www.canyonhighcowboys.org
admin.aes.pgsd.ms
a1ms.jcboe.org
agbumds.org
agbumds.org
admin.aes.pgsd.ms
ps29.jcboe.org
www.gervin-school.org
admin.aes.pgsd.ms
admin.aes.pgsd.ms
agbumds.org
admin.ps41.jcboe.org
admin.agbumds.org
aes.pgsd.ms
admin.aes.pgsd.ms
admin.aes.pgsd.ms
admin.aes.pgsd.ms
admin.agbumds.org
agbumds.org
cole.eastside.k12.ca.us
admin.agbumds.org
a1ms.jcboe.org
admin.ovhs.info
agbumds.org
agbumds.org
ovhs.info
www.enterprise.eastside.k12.ca.us
admin.agbumds.org

Certificate

The complete raw certificate details for agbumds.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9SxR0IkOI7imxe6tQ6d
ukeUv8vR3YJgEm8Wy1+17Vbxa51q5Z8yuAzWCmaGgeYWdCU02CMcSs952CFg0PVX
uxBX6kVWS5YCjXI38ohEkZ+lXcEIjYoFICG/lerHLkigINrwScGBJbRbCZcuX72j
gYO2X9GM+oHS+V/j0Ft41n6Ei4DMWpb1FeHSO0/pTXvf6wk7SHSZXPVxVQe+Ucck
XH9JZiT1QybMlLg+Mf6Zt/RTNfBMWnU7hmjjNgka4kY9O1ODoSYy5xUz6v61qq1t
zcGr1kF865rVSopbsDk01tanfRMcOK8a2Z3vE/2s5c+N6s1qU1vVrLCMjEDPoRdK
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405627640315698643941052846033995633037152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 08:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 08:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agbumds.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24216398826121970432105851788740135520483040058686460906012885696871739502228646590425553086805586750786291247120431057496495185492073649741499520391484805686567397143753488994170457983542672728846758760853163205776870050225464743483152448394715844471050066656464586464361416985693737663045488158811403849128954888214328524486794666595600260227139513762977258655486889287913710347210682469700693987022022821032248556889528241633560538949451439852977844289931668188521762887521736576050929342924671287162731255466873457834876483141501802595637432010925804964779893801007006079000032641477526301606644131900074757671493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebd5b2e575befa96e95fcadc8f82b9f02ef75ca5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agbumds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agbumds.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b99a827ad00000403004630440220162cf8b57353b9e533663c2a3d77033950f2ca1abd21fa7d93c0f5dbd1857a1e0220041bd27df5033a8285eba40b22f540e8454064c9575cf75eb0470f2b4f6ba1f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b99a827e00000040300473045022100a23afe79b049ff6a6021716f0e845524c22635e3231f452f70ffef0818735416022005922d8a7a135852f8a3f37f38e13faf261424683708475366916491385fd8e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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