www.centerforgreatlakesliteracy.org.cgll.org

Issued by R3

About this certificate

This digital certificate with serial number 03:b8:11:95:b6:17:10:22:e6:9c:7c:cc:fb:89:80:22:37:3d was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.centerforgreatlakesliteracy.org.cgll.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b8:11:95:b6:17:10:22:e6:9c:7c:cc:fb:89:80:22:37:3d
Serial Number (int): 323972187530119472031386723355204958435133
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:79:e8:8e:63:06:3e:94:6d:f0:69:64:b3:25:89:36:e2:f2:99:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:dc:1c:b2:2e:11:04:3f:2c:3a:2d:41:01:2b:7e:d3:e6:14:e6:63
Fingerprint (sha256): ae:9b:d3:2f:ab:db:de:a4:86:91:f0:84:c8:a7:4c:17:e2:ad:1e:7e:54:cb:15:60:16:5c:bd:f9:7b:e5:22:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.centerforgreatlakesliteracy.org.cgll.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.centerforgreatlakesliteracy.org.cgll.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.centerforgreatlakesliteracy.org
centerforgreatlakesliteracy.org
centerforgreatlakesliteracy.org.cgll.org
www.centerforgreatlakesliteracy.org.cgll.org

Other certificates including the domain name cgll.org

(limited to 100 certificates)
rivers2lake.org
rivers2lake.org
cgll.org
rivers2lake.org
cgll.org
sni.cloudflaressl.com
sni.cloudflaressl.com
cgll.org
cgll.org
cgll.org
www.cgll.org
cgll.org
cgll.org
cgll.org
cgll.org
cgll.org
cgll.org
cgll.org
rivers2lake.org
centerforgreatlakesliteracy.org.cgll.org
cgll.org
cgll.org
centerforgreatlakesliteracy.org.cgll.org
rivers2lake.org
test.cgll.org
rivers2lake.org
www.centerforgreatlakesliteracy.org.cgll.org
cgll.org
cgll.org
rivers2lake.org
test.cgll.org
cgll.org
test.cgll.org
rivers2lake.org
cgll.org
cgll.org
rivers2lake.cgll.org
*.cgll.org
test.cgll.org
cgll.org

Certificate

The complete raw certificate details for www.centerforgreatlakesliteracy.org.cgll.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj4oVltoRmHVlsmYze/d
SJ+/Ehnd/gX5u9mTITPC+L7WD3tPCssajigvQo8iNSakWwni0ycPV+WoKwGO6tPK
ol5hG3BUfkly2ckrqwzA0SvI+BXDAfBkVWE4FinGOs5E/46E6KIw7YLUgPQMOSj6
essL6zgAektAJ+L27ZbQoLEN1bA3nJnCvlxlTCknKhvLXTyDTMzW/Jg3tmeUNZKe
qpW/ZWl+4UlIVn8cOyqYLE9St/gnvd+5VJPXt4CWfLr6ms/VjtPw/GYKN2eO9UJr
kDBclgw7xBZEdaI8VY9L9p7B0pDCjyxmKMEf8wgMzQ2+nc6JhVrktpTxryNIvQiU
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323972187530119472031386723355204958435133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 10:28:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 10:28:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.centerforgreatlakesliteracy.org.cgll.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24015928982565928242751249341820176810555002603119978361644204066736390890538115438851622868532148755129585530221687989459701455883039889003378086011642964340435253219226852974883430753699693922956279641792922764082179582874675339533320747110969329355701029416832550643201022549844074319364909255079290846273848440464956914736699770688275430097727411532056022148278982081114498773675217233676358855555743186038431159736428083342489836276098689223969629194650962576619635241568746946864916016364619800676252813246588528726280419406142562923789554457903169935247288778892015781286777855876710056957807427436052285527149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc79e88e63063e946df06964b3258936e2f299cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerforgreatlakesliteracy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerforgreatlakesliteracy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerforgreatlakesliteracy.org.cgll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centerforgreatlakesliteracy.org.cgll.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea8de6b8e0000040300483046022100f45c6bc3d81d18732896990e640813d5c0650f9737a53786f2ee473906e4c15d022100e7b66153a463dbce66747933ad04961708d364b339c1776e138f8c5a7bf2c5c60076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea8de6ba30000040300473045022100e9e9a432fa81f02455e93ab83f37a2f3f2567a66929a246fa3d96d2fd5e1fd32022079da8d634816d692bc3bc40975c1117775b6f70070f1dcdc79772322d8b88749
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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