upstreamcollaborative.org

Issued by R3

About this certificate

This digital certificate with serial number 04:53:24:e8:95:d9:b5:18:a5:af:d4:1f:8c:9b:75:49:59:01 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=upstreamcollaborative.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:53:24:e8:95:d9:b5:18:a5:af:d4:1f:8c:9b:75:49:59:01
Serial Number (int): 376741640041525904898515570167415004813569
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:16:f9:71:c7:8b:67:b6:94:94:3d:9e:52:f3:8c:bf:10:17:fc:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:07:e7:93:a5:9b:41:ad:2c:85:9b:0c:5b:e0:ff:10:0b:09:e4:84
Fingerprint (sha256): 38:f2:3a:70:90:04:e5:0f:7a:ac:23:47:d8:a5:21:20:e9:0e:c9:e1:5b:c9:18:13:8a:12:4f:9b:60:29:34:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate upstreamcollaborative.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upstreamcollaborative.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.upstreamcollaborative.org
upstreamcollaborative.org

Other certificates including the domain name upstreamcollaborative.org

(limited to 100 certificates)
admin.canoncityschools.org
www.newtownhighschool.org
aceroschools.org
admin.comptoncreekmad.org
admin.kimmel.aasdcat.com
admin.rvs.monroe.k12.tn.us
admin.gordonsville.smithcoedu.com
aceroschools.org
145innovators.com
acrma8.org
www.kingcollegeprep.org
admin.avant.k12.ok.us
admin.gordonsvillehigh.smithcoedu.com
upstreamcollaborative.org
spectrum.canoncityschools.org
www.upstreamcollaborative.org
admin.veritasca.org
aceroschools.org
admin.newmiddleton.smithcoedu.com
aceroschools.org
www.canoncityschools.org
145innovators.com
www.okolona.k12.ms.us
admin.upstreamcollaborative.org
acrma8.org
www.ivyhigh.org
sac.gcsd.ms
www.grovetonisd.net
ewcc.taylorisd.org
admin.portrichmondhs.org
upstreamcollaborative.org
admin.eaton-academy.com
145innovators.com
acrma8.org
www.cri.edu.mx
www.dormanhigh.org
www.upstreamcollaborative.org
acrma8.org
145innovators.com
145lions.com
admin.mnths.manorisd.net
wms.csisd.org
aahs.aasdcat.com
acrma8.org
admin.shs.monroe.k12.tn.us
acrma8.org
www.grandville.k12.mi.us

Certificate

The complete raw certificate details for upstreamcollaborative.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm+PUl2mXvUbHEi1fCTR
Nc4t/iGjiC/1jp0z2q25bfd5zJ0bFg86kJnAyXVFG/NV30Zq/GCtSt2NBUVpO7E3
DLjLwxu/HlQVWTOdPsM/7LEQawmeGtbI8IVFjvN3gmA0N2R6uKuIjYqHPRjxuSPW
QgvbuFeWYIHT1cSFqDlx5KqI2HxxMe9H+Cy/YkqDeBYL6MPYzejnjMWdzI9WfyAx
IZ4d54T6ryX9ZHfd4j3SOnEZXnID9mnGMhw1MX6bN8XTLE8f4iEFvDgqmgm+cwPL
ETtMuNMFIdAm3sgMu3AkNG0NZV73oria/tskEVk8gD7KpFuTWGkK907bLx10NeQ5
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376741640041525904898515570167415004813569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-15 09:42:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 09:42:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upstreamcollaborative.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26060103035648842000035522844346140856058442866512639208894176366511829227348300594717650998103295861843200628993492468574987742211882930245622118438003075915487667992721936323725115454439206361774134945859199100664947183176384658294462895499038468218005199374466126044203547679711250118694413058589446312499980447079063654693654543723514929261485448125620158772236520722264746269430986949685459465413244589075968487117773522165323923527922461327046939280173845970098916363361852907871581252142085304992860032103316168840812101530655302169939166406495453801413077046797401517075540377909721613102506110924477419502061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4316f971c78b67b694943d9e52f38cbf1017fcec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upstreamcollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstreamcollaborative.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186e4dd28af00000403004630440220597733d361b949e70be69e4ffce3733a7fbc2a29b3a8c24c99d5e2112985ccf0022005412482e00d27e1d0d4d42babf3f70802e8e86dbc963900d1f7bbf8929e01c40075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186e4dd28b60000040300463044022022026f1d14017a10721eeae9a62c94bab7aeb447c0ab7ce2e9343bde928f361e0220271af4ffa529e0ae6bd2aefa17e37a359ef02ab7861d77ca3e198aff24fd6426
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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