flatrockschools.org

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:af:f1:ca:ec:3e:87:28:65:4a:28:fb:d8:a4:ff:dd:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=flatrockschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:af:f1:ca:ec:3e:87:28:65:4a:28:fb:d8:a4:ff:dd:e9
Serial Number (int): 428309087945109791965503403177045714263529
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:cd:4d:e5:63:32:90:1e:ca:3a:c5:a7:f1:cd:85:0f:52:b2:78:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:a1:c0:14:79:0f:b8:3c:9e:25:aa:7b:58:9d:69:70:75:01:58:2e
Fingerprint (sha256): ed:fa:71:37:1d:9b:3a:15:4d:f2:d0:d7:11:c2:04:c6:63:39:b0:2e:1c:b3:ce:26:f1:05:86:e8:a9:3c:12:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate flatrockschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flatrockschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flatrockschools.org

Other certificates including the domain name flatrockschools.org

(limited to 100 certificates)
admin.oes.oneidaschools.org
admin.ae.jcsb.org
flatrockschools.org
is7vikings.org
frava.flatrockschools.org
www.is7vikings.org
admin.oneidaschools.org
flatrockschools.org
flatrockschools.org
nem.lauderdale.k12.ms.us
flatrockschools.org
flatrockschools.org
www.newlima.k12.ok.us
www.governormorehead.net
flatrockschools.org
flatrockschools.org
flatrockschools.org
oes.oneidaschools.org
flatrockschools.org
flatrockschools.org
flatrockschools.org
admin.ces.lauderdale.k12.ms.us
www.oneidaschools.org
admin.sms.flatrockschools.org
admin.ae.jcsb.org
flatrockschools.org
flatrockschools.org
admin.ae.jcsb.org
flatrockschools.org

Certificate

The complete raw certificate details for flatrockschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokNkTDk+kdQNyto5hCvo
i+cYdRN3Fv81alWUZ9yKtdaddIdNoShOcuFoE9CA54JI+XYx6JMsUS2umLzFtejI
JW6xBjhM33Y15fTPXiBCAt3ab9vSTO4qPWdAz4Ke/tBP5U+u350qhfx94EEJNUkj
vHbojAF1KZU516flsht/3AcoKtuEhtbfpfrDTGGdWC1Hwnzzto2/D4DLr6lvVnoQ
2+tDVLx4xyP23suSY3sNaQ8EzBIEwSQv2u+fe2wdC1Hd8Bq8NEYWEp+hKLUWZFYq
qf0/Cysm5Fdvh1Z7+GRseSYcFUdKJBLoWIjF6gpOa9XejnRZcmWWSejnx/YQrAFx
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428309087945109791965503403177045714263529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 14:41:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 14:41:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flatrockschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20483837533782165714949327979980100773443680060690959792612201888079612550149606741744001975986073998878581928717364197254374506221830461119341713123623443551775575507437026301891735743589388447975588320966591325225239214405509458146036301657609404243563407158059254421550710599116050256366461757173794424878255261138242186589452798879376231630812467429531584247630372447854714920590759672289306774052927357398783562955466000000142966295236228961829972112819299994016124886480718460981834112461998889772736494581585202865476880127444401029770578580623906036259712241942559344838975000515670257302353343218901118448033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96cd4de56332901eca3ac5a7f1cd850f52b278c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatrockschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf7b199d6000004030046304402204b13a0d35765989ce476c381a079d43a6b7b7002ab54b7bf2a23fbd4a111ba9902203cab936dd638a8776661579bc7d8a697d927b5b5838bedd50fe2ac1a3fd95d9a00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bf7b19a260000040300483046022100df4dfa3b92b0895769e7640a9a9860c1dfcf02be57c2eb93a3d6f3a729abe796022100d5e9dd02cf0b457bf80e7b0211c754735f4280319a6f32a94e8f4901ad9ebf98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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