gatewayk12.org

Issued by R3

About this certificate

This digital certificate with serial number 04:b8:6e:88:f6:50:d7:6d:07:91:4c:9d:f4:bb:51:f8:5a:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gatewayk12.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:6e:88:f6:50:d7:6d:07:91:4c:9d:f4:bb:51:f8:5a:9c
Serial Number (int): 411208025468280451931548287293149813430940
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:6d:f3:07:97:7a:8a:03:0c:ec:f8:81:5f:a7:96:5c:df:39:89:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:8c:8e:d8:21:c6:c1:a4:e0:bc:08:99:28:bc:07:bb:78:48:f0:e0
Fingerprint (sha256): f4:0a:c5:62:a9:76:8a:2d:32:a9:ce:75:72:38:a5:85:0c:d4:3a:8a:2c:ab:bb:f4:54:6a:23:81:34:3f:46:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gatewayk12.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gatewayk12.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gatewayk12.org

Other certificates including the domain name gatewayk12.org

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
qlink.gatewayk12.org
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
activities.madrid.k12.ia.us
gatewayk12.org
activities.madrid.k12.ia.us
smtps.gatewayk12.org
gatewayk12.org
activities.madrid.k12.ia.us
admin.escalante.durangoschools.org
smtps.gatewayk12.org
*.gatewayk12.org
mustangsla.org
www.colegiolospinos.edu.mx
admin.cornellsd.org
admin.union.kyschools.us
admin.betz.cheneysd.org
www.ps52si.org
admin.betz.cheneysd.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.troupisd.org
pdhs.rbusd.org
gulfelementary.org
www.olsorrows.com
gatewayk12.org
activities.madrid.k12.ia.us
www.cornell.k12.pa.us
qlink.gatewayk12.org
activities.madrid.k12.ia.us
www.watervlietps.org
admin.cse.gatewayk12.org
admin.elementary.troupisd.org
admin.el.madrid.k12.ia.us
admin.desotoschools.com
activities.madrid.k12.ia.us
mhs.mtsd-vt.org
admin.betz.cheneysd.org
www.hancockhs.org
gatewayk12.org
activities.madrid.k12.ia.us
cis.cocisd.org
activities.madrid.k12.ia.us
admin.betz.cheneysd.org
admin.ev.gatewayk12.org
activities.madrid.k12.ia.us
admin.aspireinskeepacademy.org
admin.hw.cheneysd.org
admin.fdes.mobridge-pollock.k12.sd.us
admin.betz.cheneysd.org
lincolnparkpublicschools.com
admin.betz.cheneysd.org
gatewayk12.org
www.erpsk12.org
www.markedtreeschools.com
activities.madrid.k12.ia.us
gatewayk12.org
activities.madrid.k12.ia.us
admin.altavista.rbusd.org
www.gatewayk12.org
*.gatewayk12.org
admin.betz.cheneysd.org
admin.dss.desotoschools.com
activities.madrid.k12.ia.us
admin.zcs.k12.in.us
admin.betz.cheneysd.org
admin.hillcity.k12.sd.us
admin.animasvalley.durangoschools.org
activities.madrid.k12.ia.us
www.overtoncountyschools.net
admin.betz.cheneysd.org
ms.mobridge-pollock.k12.sd.us
leonardo.gatewayk12.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.cypsd.org
admin.chs.cocisd.org
www.bpsd.us
admin.gulfstreamschool.org
admin.betz.cheneysd.org
meadows.fmsd.org
www.crutchoesd.org
activities.madrid.k12.ia.us
*.gatewayk12.org
admin.betz.cheneysd.org
gatewayk12.org
*.gatewayk12.org
admin.high.troupisd.org
admin.stmarysspokane.com
activities.madrid.k12.ia.us
admin.aspireinskeepacademy.org
admin.ev.gatewayk12.org
activities.madrid.k12.ia.us
www.pullmanschools.org
gatewayk12.org
www.colegiocipres.edu.mx
*.gatewayk12.org

Certificate

The complete raw certificate details for gatewayk12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxlPfNEtd+4sSKBJEDlQ1
a6xyDnirj5Nm9i+x6Y3Ia0YQwddJ+OgINvwvVvFM3ywPOi90H97dOd1lZ+rNs5vP
jAVS0lQzTHQGugUApWTmzF7ZOGbJ3u7YG+L9DsNF4ezkEiK8UyTR/gnbAl9uF3tL
wpWabrB5NLoZuHGodcg3pMEh+2tg90b++rOFMgKKqE7KaLESWSHWaxz3kjnIvwPN
P73UQ1HnvX6Q2fl2YEINJA377yIXJfTMcuOJBm3SfR/uexwiY7EWqlQvP8QvZAtJ
/pey+OsRz5AKF33D2s/hWjetB5Bxl3m/dgzumwmZQs/X1msxNlGKbd8XjpT9wEQB
mZwVrobsltATTgtpLTtzon5tWTOr3ygFDvXzTDZv1nKaS/2AWE/mElTHIZ2dDrN5
AbQ7EdetZYufgcKpuJE5+JQjtfl9gU2YZrBbwo48NN74GYA6+dHeMj3zzPj4kNxB
NTw+UYUFcjUlkfEgwmM4icLjTxqxdys4pTN7NU91XSDUQQgpsmVgqP/GxzOAf2f+
jdgRaoKD5eJRiUAQiJSwMXARwLD9VxWXFxcwbal0tGGxv/umBzU7eQYp1zkdo8wt
rQVUYWTpXJ21UL7AxjK1xnbacl8TnJYpJAc8rEeA0xZccBrt2+KkQ7OPMbqamWmZ
4Jot/YBCJFrd0hZCJobjJy0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411208025468280451931548287293149813430940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 12:27:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 12:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gatewayk12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809106117129877795246385035929535938243911966885836147713064393530783844091643375092957930040571388109266577169820925230553131420412158417265274618874361405858216873268955142141852163864666616014103591330797094201445067797778358949424686130269974643721635532860228643990357132388754994118241596599933388502417568673093244344458304996855625749300905866798862632968797357562672604341679963618713489093408161560838625329990886165607335208404391571275295879472229158461174339187894226786086660323247577070120087306996272703385078774204154028583534325789692422097941790775885813110777941458330206770191287579596961349134630001702195622855205387013734748958539228124469058957803723533752232242978843874318703354937415912724539811266526984398202364989840311615648329738793901347738813739655282217089965557707906736050312804832889523209919052566452215504511462668383784880900143927669031456675927943195565436264466604621449927062328594499353882069621657359895978958561499991605174431656542908462986094971422297316674439291747291627592633936036434495460041076328215406777204166677190904498632824921721797808264611664531703176575285005722916034780899470585091243197817319859198750356954988313824342668577825881971712291989503484805727392048941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							866df307977a8a030cecf8815fa7965cdf398960
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayk12.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001890c7caa480000040300473045022100cb53a5a223332c2952eda61a79947915bfbca43bc1246024decd0ee399d3a46b02204b65348fa7471a9c3f005e69a082b1fa90c5eec72613ec52af878c792db7fe680077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001890c7caa630000040300483046022100bd21426e9b21ac0170ad4b04decb0ffb828be480d025682445f5e9e9a324f5d9022100e607ec56460c4c4ab364a473f2293516fde379db4774dd7ef855f350e9328d32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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