willrogers.ardmoreschools.org

Issued by R3

About this certificate

This digital certificate with serial number 04:1d:8f:65:97:a0:34:d3:59:5f:3c:5f:e9:4a:36:dd:eb:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=willrogers.ardmoreschools.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:8f:65:97:a0:34:d3:59:5f:3c:5f:e9:4a:36:dd:eb:28
Serial Number (int): 358507939468464861893939772391403647003432
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:89:89:ad:19:d4:22:1f:6f:33:4a:a8:80:07:cd:df:cf:1c:ff:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:bd:ff:ad:18:aa:de:fd:ae:d1:2e:80:5e:0e:1a:ed:6f:bb:ca:58
Fingerprint (sha256): fe:a8:45:8f:87:42:3f:71:4f:69:8b:0e:22:4c:1e:f5:35:50:71:34:47:c8:9d:2b:3a:bd:bf:45:03:c9:15:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate willrogers.ardmoreschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for willrogers.ardmoreschools.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

willrogers.ardmoreschools.org

Other certificates including the domain name ardmoreschools.org

(limited to 100 certificates)
sequoiasamurai.com
jefferson.ardmoreschools.org
bps.bayfield.k12.co.us
admin.belmonthighschool.org
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
makakiloelementary.k12.hi.us
admin.belmonthighschool.org
admin.ahs.ardmoreschools.org
lincoln.ardmoreschools.org
ardmoreschools.org
admin.belmonthighschool.org
el.westwoodisd.net
ardmoreschools.org
ardmoreschools.org
admin.belmonthighschool.org
taketwo.ardmoreschools.org
admin.belmonthighschool.org
admin.ahs.ardmoreschools.org
charlesevans.ardmoreschools.org
admin.ahs.ardmoreschools.org
www.kalakaua.k12.hi.us
admin.excel.dcs.edu
kahuluischool.k12.hi.us
ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
lincoln.ardmoreschools.org
admin.corey.bpsd.k12.ca.us
ardmoreschools.org
admin.jewishacademyorlando.org
admin.schoolforthedeaf.wvsdb2.state.k12.wv.us
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
admin.dtm.flintschools.org
admin.ewamakai.org
bhs.bayfield.k12.co.us
admin.brownell.flintschools.org
ahs.ardmoreschools.org
bis.bayfield.k12.co.us
admin.belmonthighschool.org
admin.belmonthighschool.org
admin.taketwo.ardmoreschools.org
www.hilohs.k12.hi.us
admin.ahs.ardmoreschools.org
admin.ahs.ardmoreschools.org
usf.com.mx
ams.ardmoreschools.org
l2ic.lex2.org
el.westwoodisd.net
konawaenamiddle.k12.hi.us
admin.ahs.ardmoreschools.org
www.konawaenael.k12.hi.us
taketwo.ardmoreschools.org
admin.ahs.ardmoreschools.org
www.forthamiltononline.org
admin.paloloelementary.k12.hi.us
admin.ahs.ardmoreschools.org
admin.hickam.k12.hi.us
www.ardmoreschools.org
admin.pchs.k12.hi.us
admin.liholiho.org
www.materdeiathletics.org
www.harborfreightfellows.org
www.juandiegoadulted.org
willrogers.ardmoreschools.org
admin.ahs.ardmoreschools.org

Certificate

The complete raw certificate details for willrogers.ardmoreschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358507939468464861893939772391403647003432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 01:38:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 01:38:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'willrogers.ardmoreschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899838660427519801865347204510457212802607657523248467912077492046559837697307922446730608700398795069198822618060293328779563179532910529126908046763154906567099203296604396438914214123142578332533983621706448976366418996380013451574012941031747901773773860206178615104733667566559017325068761138878186286399536884566886192841014932688137214237952639853860063375081577471150390195097062138448862036638464967268294032783431932447606921748055908540037586796243183436324619910637075920859567656567435144087401290748259403863008879252946302564307808991823894162259592291623593813242866705296359771368994046473435696937963352154198634677134676935345103664011791831952260982086804183292032780989802929758065653243420360479637962415795089064469848577430631285033952002374763257725202519719485631946757876428051909593472087352169455100613986721472520404415721210052397946536716859977254199885299980204840166192252132051771716757291408630160197943498759786171145009214345729940818275506020468414414007928799816179949792990174283096400128959500320227326997828601551411642789932971795029236499409637055610328559151014847424401926578006984991090231683998201914516318487342087865311159245868312372983069367612140149137987147048696712901352704693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c48989ad19d4221f6f334aa88007cddfcf1cffbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willrogers.ardmoreschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c13caa10d0000040300483046022100fb1f673501ecf6eb9ca5d34ff437e017a4ebc47e2fa2a81c709ba5f203fadb7c022100cc36ea31d5d2ef05d597fa1a30c4f35e6659c02dc117b8c4f2196009fc20a76c0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c13caa1080000040300473045022100dd688d80591b5b75ae5761e34dacdd73316500ae4c9d0b007f930a64566a0c9b02205eeea9b3b80eec8103938e1d7cc2c60ef8a2c034e358a5bc86fa23bcd6b16b9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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