clsfacilityservices.com

Issued by R11

About this certificate

This digital certificate with serial number 03:81:da:1e:22:2c:9d:a1:bc:da:22:a2:01:d0:57:82:62:6e was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clsfacilityservices.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:81:da:1e:22:2c:9d:a1:bc:da:22:a2:01:d0:57:82:62:6e
Serial Number (int): 305523211293205419781981027666436305347182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:87:9b:40:6a:0f:f2:c4:66:52:fb:c4:6f:cd:d5:3e:fe:9e:ab:ea
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): cc:b2:b9:83:03:ee:9a:15:c8:44:eb:34:6f:b6:77:d3:ba:33:9d:35
Fingerprint (sha256): 88:a9:4d:3a:6a:8b:81:ce:91:12:f3:c7:a2:52:10:dd:42:5d:7c:3d:56:6e:a7:ea:f5:43:a8:86:f6:73:d0:5f

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate clsfacilityservices.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clsfacilityservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clsfacilityservices.com
clsfacilityservices.ngagecontent.com
www.clsfacilityservices.com

Other certificates including the domain name clsfacilityservices.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for clsfacilityservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVW5N7eClLaKam/4T3Lw
gMsQn4lCJ/BkaJ4asnRxfiC+4VrOggvue64e83Tcx8a5xUnUpnSvPvdz+SZm6rP1
jZ1//LED9IyC85Td+8ibolpbICyDszSM+Pq1kN3QGgzBuONAz6W8nZVoGHZHSae9
UoQikAAQQI9DuKZf7XnqntDtR8S9DfSkrb0207TMrgIxesCgztLWcCLYCOLlCAqx
PsnwSgTmtbEKL+j+TkgDzUPRUwGiYcMe5ylCdYWUK6PwIAtcc3B7C5FYDHdvRQqY
VSNhMU0RphtCXbXHABOx9BVXN+dhQVs/HE5fIEl1PVDOoFzdPbANmcDlNTSAuHrN
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305523211293205419781981027666436305347182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 18:16:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 18:16:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clsfacilityservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21881498595637481888362310482777981387549706148259583617467958489475005124007822939098786594326186444331913394084173047033266626832282964828677176332499348273620221317007275207021413021460609850329458152508858224778692269921053318048821049353819559216442110417118885342203201694147135324393445029458444064066617326613360601728115443938275243374778076124075488544244946071864443327366122642612647299482420042443738601579099269793299575139608449869280925697741490907071524563993316846332575237371566697071348872192532173746533361840775527032047962316595546340391325790796965654629281971190443066817847960613742330957201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b879b406a0ff2c46652fbc46fcdd53efe9eabea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsfacilityservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clsfacilityservices.ngagecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clsfacilityservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001901d5446de0000040300483046022100efabede097291217483fd62ae7790aa2247cd0af2d91da9fb2c1c4d935b3b7a2022100d568d23a664ab2cbb1072309b35610da06d5f5ed067222bcb27a04fa49b76b36007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c000001901d544769000004030047304502201e2629fa7ef5118545a228cd954ac96d096a9185e8ec6d9b098bc8ad54146dc4022100a6cf7ad11b025707b944ce2599314e54885599286ea6f3a0115c198c4debbec9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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