DV SSL/TLS Certificate for upwardtulsa.org

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the upwardtulsa.org DV SSL/TLS Certificate

This certificate with serial number 05:67:e1:18:cd:f0:4f:25:dd:ef:cb:7e:7f:13:e6:12:7d:f1 for upwardtulsa.org was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for upwardtulsa.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:67:e1:18:cd:f0:4f:25:dd:ef:cb:7e:7f:13:e6:12:7d:f1
Serial Number (int): 470909718542767328723227041176924579855857
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 33:53:2b:a7:82:d1:ab:75:87:77:c5:4d:ba:6f:e6:10:10:7c:20:c1
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 7d:fa:25:2f:65:88:f9:ce:26:a9:f5:fb:ab:c1:9a:58:7f:ef:14:39
Fingerprint (SHA-256): 5b:16:62:80:50:b3:fa:eb:c0:2c:4f:a6:6a:4e:83:f9:c0:47:2c:85:0e:83:48:b9:03:b0:e0:fd:f6:43:d4:d6

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/114.crl

Check the revocation status for certificate upwardtulsa.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for upwardtulsa.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for upwardtulsa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/AQ7y8pHL837NDwUDdx
84wVl/DTouOJnhSLP00XGMNakqBzMsqbu+pTf2LpByNziZponaXFQbgzEjD7umrA
yw3SOmFR785p46RnVLVnp4XUw8a5HCXbNL8PHRTcmp2YVwEa5o1wDAgiZUhKrQpi
H/zmejSBltKhx/Nq2oa+RN2XKzeTivWx78Uo7yZVr9JgfHJIiun7MKr4aa7qcUEI
9IBYmNWRBPlPpiYBoGoE5TQxXE+K3uxtU+XxLCNhVJ42XruHurSun+rOaz8jmAky
rtLq3W6FUVpBEY49R5orAD+Csoo0a1v22zglpVffe6iwEzLXrM5rkis9gG0QvIEp
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 470909718542767328723227041176924579855857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 18:30:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-03 18:30:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upwardtulsa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23724944059172515325103562691802151714551160719963482694197561357202438349538418932533444883172535187166843887561599173431621392068852675690570049903740603805390019665267722836328561898149841260143615692813992841350232896326686775829683006761927622730666991782538814140475844689955003716550499081786482930352074434399842638167812414084244512624886937822454411540200695153042957423704286297306140335408449544352580363638404079479381389222662464639181038032890783049431627480506612374282149650864958904898645405254427375730245874148110006451772893123280655744891137433134279445348451854951720940668742477456813615819137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33532ba782d1ab758777c54dba6fe610107c20c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upwardtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upwardtulsa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/114.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197dc1053c80000040300463044022005f7876b529791e25a835572ecbfdb3336d56d4c628c199c6706ff8dcc05d32402205689b030e3b7cec6d11e27b3c58621862149c82a69f72a1c89eaac23d53fb2f80077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197dc10636900000403004830460221009a49704d97a6186a9cbcddee1f4db21afd9bb6427b289bbd9c4002ec60a98bb2022100b02570ce6a32753edee8b9928678332b9eee8f17bc157f5946bd97ea95af83df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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