www.nksd.net

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:81:0f:8d:61:11:f6:2f:c2:e0:fb:f2:db:bd:31:fa:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nksd.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:81:0f:8d:61:11:f6:2f:c2:e0:fb:f2:db:bd:31:fa:6c
Serial Number (int): 297578339852319793982242289415150227290732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:7e:07:d5:e5:f4:a3:9d:b4:b1:4c:8e:52:2b:7a:9e:85:b4:1b:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:36:dd:33:56:6b:7b:25:6f:c9:56:01:27:99:20:01:4b:62:14:1b
Fingerprint (sha256): f5:d9:c9:7d:9e:fc:fa:be:27:e1:0a:56:74:d0:20:73:04:a0:ce:85:3a:fd:96:d2:ae:67:0c:72:80:59:9d:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.nksd.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nksd.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nksd.net

Other certificates including the domain name nksd.net

(limited to 100 certificates)
admin.calhanschool.org
www.colegiofranco.edu.mx
admin.sl.nksd.net
admin.casee.chebschools.org
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
sea.mynhusd.org
nksd.net
combshs.jocombs.org
admin.centerpreschool.centerusd.org
admin.ourcommunityschool.org
nksd.net
makakiloelementary.k12.hi.us
admin.casee.chebschools.org
sv.gvusd.k12.ca.us
admin.casee.chebschools.org
nhstitans.org
www.slcd.org
admin.ahs.ardmoreschools.org
admin.centerpreschool.centerusd.org
admin.ptcbus.org
nksd.net
el.westwoodisd.net
admin.3rcs.org
frayluisdeleon.edu.mx
admin.kit.mynhusd.org
school.sjnewhaven.org
admin.ahs.ardmoreschools.org
admin.fcue.franklincountyschoolsms.com
admin.nksd.net
memphiseast.com
admin.3rcs.org
admin.ahs.ardmoreschools.org
admin.da.nksd.net
admin.3rcs.org
www.kalakaua.k12.hi.us
qe.nksd.net
kahuluischool.k12.hi.us
postoffice.nksd.net
nksd.net
admin.calhanschool.org
library.nksd.net
admin.3rcs.org
admin.ahs.ardmoreschools.org
admin.ealas.org
www.ebcacademy.com
admin.3rcs.org
admin.centerpreschool.centerusd.org
admin.centerpreschool.centerusd.org
admin.3rcs.org
admin.gsdacademy.com
admin.ahs.ardmoreschools.org
library.nksd.net
admin.3rcs.org
admin.ewamakai.org
sea.mynhusd.org
admin.sl.nksd.net
admin.mynhusd.org
lshigh.org
sedi.edu.mx
admin.casee.chebschools.org
nksd.net
nksd.net
admin.taketwo.ardmoreschools.org
www.hilohs.k12.hi.us
www.nksd.net
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
l2ic.lex2.org
nksd.net
el.westwoodisd.net
konawaenamiddle.k12.hi.us
fcue.franklincountyschoolsms.com
admin.calhanschool.org
admin.ahs.ardmoreschools.org
www.konawaenael.k12.hi.us
taketwo.ardmoreschools.org
admin.nkhs.nksd.net
admin.paloloelementary.k12.hi.us
admin.calhanschool.org
admin.calhanschool.org
admin.ahs.ardmoreschools.org
admin.hickam.k12.hi.us
admin.calhanschool.org
nksd.net
www.nksd.net
admin.pchs.k12.hi.us
wes.gvusd.k12.ca.us
web.preparatorialasalle.edu.mx
wms.nksd.net
www.harborfreightfellows.org
admin.ahs.ardmoreschools.org

Certificate

The complete raw certificate details for www.nksd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297578339852319793982242289415150227290732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 01:15:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 01:15:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nksd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664018646368337090729929583493871937445053576333774025801055425894168042748161348855040997967964433986287995329003410185712960319547915459956552852078606988054524756527241913882836442969528210203521269996453973213140606626736849300982081293547052809781836516452973769773697649463247142340612581127711005376530379621091405770499306972477201806115714522711746894112623231974472709386795403274125601437448316209013939452211585853083724674198208274826784804074932745526940217101122570954922602841856203637341491783155621004613008776844262571050360259156080649159768147168550709160499110225173000001116752965886319092498666041004831185262369010993531237048434100985374986973946450532694447590348721876990697853055414792513844766676505516194219398421203286597917789111175498570538654696246662288518911369712175160414007542584823240029404467000083323049997632724250108007393963657982031559081565636059590699881752355919214502584461670740203214624695824121116743793589225442867689366222102859755834281088442939489811872685039104978030846121694143141046246312592816697630024962917621342108093879614979833243444674738999662553193142923990247858882066181255555048474174819122646772583006500561929468708465688264902317520377846610042559908704719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f7e07d5e5f4a39db4b14c8e522b7a9e85b41b1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nksd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc971f5880000040300473045022067ca4878c73d2ebae9c8462ddef295330a7fee78dd1d1c7d400ce64d3b668227022100efdf4a203c30a8f370a6988d4bbab88fd5ed756ab1afa02d9645ef85252b4267007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc971f5e90000040300483046022100db2dc8b414a4dcdc4eadcd5e6640f85161a8f4567cf4fe8daac6a47f4a2f14fa022100854423f775d9940e0bdcdc35f385e8cccc00318ed0d837f81a2072843c5e8e66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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