maca.slpsb.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:be:34:70:92:ae:a5:a8:db:1e:10:2a:4a:ec:95:4d:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maca.slpsb.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:be:34:70:92:ae:a5:a8:db:1e:10:2a:4a:ec:95:4d:26
Serial Number (int): 297659614290787232891816217401314139000102
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:bd:77:ac:e0:75:4e:64:bb:13:47:f2:7a:c4:2d:cd:a8:66:e4:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:38:83:9a:b9:e0:7d:62:f3:3b:2a:c6:f1:8b:11:ec:72:85:9e:ef
Fingerprint (sha256): f7:0c:27:93:0d:f8:63:50:bc:4e:88:85:ad:72:e9:6b:0d:72:e7:5f:99:9c:6e:15:ea:aa:bb:07:97:be:8f:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate maca.slpsb.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maca.slpsb.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maca.slpsb.org

Other certificates including the domain name slpsb.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for maca.slpsb.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297659614290787232891816217401314139000102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 01:35:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 01:35:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maca.slpsb.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661444656530707747611036432296013945496445400856793955796163145081555758596619950381202483739413884150430665201520204963153365525093337747685696468500928626099187181471385854251085426571407948845024926623794750432721055035027670145159851577326991399426546994637334380640799156013537436981816643379028596313408203301678814520477685409103605566646348238395426443695982798270638568909184342372654140240404150333912526676701772186225301837657002456389527833692604548662458616422847888295602264947411916265439620768730581258496166780310745260345237793845822173527067558139177822785377896601125395193627699315781838771173774550379314473800852195302922091208813915165773606861185973171505582019921236274249572014818144537679312412001509418158408609651091454875012150401189123569128295517230417093003726850577519042809303909824351744557257737666689963980188894365133612511323260266484253239295966171450216286462285136782728856073112030891822919347904877672774492383763858413040284668498982226203090915009928133425467853220587530381737983238294315432731552392410847213604550290428878518516493852723986233224134878207912058370707507633016141206000092692301148074053343964515678660044544701831828762917604002690755128388474959339603387828962911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cbd77ace0754e64bb1347f27ac42dcda866e43d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maca.slpsb.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001872b3873170000040300473045022100ef5012bd5e4f6ae61406dee25cd7674e9a71a37dd2a931e3fc4bda825a27a80902203691f5a27352b2187cb8d908127dc09819badc4e82258552fbba3751292fac46007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001872b3873060000040300483046022100db6676f0d2561d2121c79f5a4d9394ff7dcd337e5890e37dbbd6c980d5a9ef00022100d945ba782fcb210fe03013d47c753a9e25a337b1846ff38e9daea3430d075b52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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