tulsalegacy.org

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:c2:12:3b:7b:c8:7a:df:90:cd:17:ec:4e:10:48:b7:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tulsalegacy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9e:c2:12:3b:7b:c8:7a:df:90:cd:17:ec:4e:10:48:b7:d8
Serial Number (int): 315359436667784020624701704502911001212888
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:77:3a:09:90:90:6c:f7:a9:1c:e2:61:f3:7f:f4:1c:5a:d3:71:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:12:9b:25:d3:4a:45:41:46:b3:b0:fa:3f:2e:95:88:00:82:06:86
Fingerprint (sha256): b1:48:27:56:fc:88:ee:2b:bc:37:83:b1:b8:c4:9b:8b:be:3d:fe:22:81:a8:ae:f3:ad:aa:c5:13:8f:cc:74:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tulsalegacy.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tulsalegacy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tulsalegacy.org
www.tulsalegacy.org

Other certificates including the domain name tulsalegacy.org

(limited to 100 certificates)
admin.tulsalegacy.org
www.lighthousecs.org
careerprograms.comoxvalleyschools.ca
tulsalegacy.org
tulsalegacy.org
admin.andersononline.org
lighthousecs.org
tulsalegacy.org
www.athlosprep.org
www.tulsalegacy.org
tulsalegacy.org
admin.monessenschooldistrict.com
richgrove.org
admin.rmcacs.org
tulsalegacy.org
tulsalegacy.org
admin.andersononline.org

Certificate

The complete raw certificate details for tulsalegacy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z8xdmGD3F+GKTiQBwBJ
m3OVfn/q1SWc2KG+GHVyfCB8fjZ2sbQfsbU/KTDX1nfIu3SsdtyAYei6NzJZRcpt
d9oC7Hu2tBa5Z3cma8V9Iu3EP0rr/Pm9dGcVoS7wCpQk1bLTrTndYZGPWFflQiF/
IxH3tip2kaaQc6/FhXF8eWceciuFyC76qMsSfbjpO2yTEOZ2T8FPiGSHbI5Pwird
mYR+5mAoG2jX4NWaBnW/tYLX10rcza6Rq7CqZu7xygVhRoUR0tGdmX93czBkLCwr
2xDYmEBa4NwU8UIGnJDLg4eIKdBjzRdE0kc1RgFpQLXRT1xpOLEUexc5e8krNCys
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315359436667784020624701704502911001212888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 08:29:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 08:29:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tulsalegacy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26967260056679304448967657806809345393216737380234552786036002279775586963386391591468437958974397764571939969529100134698562474097268456100129344407144757355225980466857808747912444444197763364538967963472913134940584484143159431008174779566386105415534779282219966307330934309178787146678691610915438322463161620073584409821795249726442431778218953217019476180637445724709568686560129400572328896761997983316924738143063148478054929144330761844116576778032266016538887977302857371376670839721122359531209826522568985147516513467724567110681062377326263848218756849410311777144748851389640769408672535112737570467027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0773a0990906cf7a91ce261f37ff41c5ad371ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulsalegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulsalegacy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2cd849f100000403004830460221008c5ff9f76b1b0470c7872eabe6358637b155d265c4b8887665da5489953cd9ae022100d5f657e973a726329b4a1b1569f6fcf04a6e4ec94b9da89c3dd4aa4b2f6059e4007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e2cd84be9000004030046304402200690080bce1bf4c049a9bccbf52c94b82b3c1699a8215b878af4d6a72ecc4aa5022065ba7967d8f5856955059faf97b7e7721643fe2dae993e1db05591c1b10166a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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