external-hard-drive.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:f7:2d:8c:07:15:a7:56:02:cd:8f:40:b5:5f:04:15:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=external-hard-drive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:f7:2d:8c:07:15:a7:56:02:cd:8f:40:b5:5f:04:15:0e
Serial Number (int): 379743394925262538180340268251715079509262
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:d7:d3:d6:4e:a4:3e:b5:64:85:e4:29:44:2a:03:a2:fd:6c:fb:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:b5:c9:3a:cc:04:80:f3:b1:d0:40:d5:91:9d:dc:13:63:1b:54:cb
Fingerprint (sha256): 0a:70:cf:a4:ba:e4:04:be:39:65:07:db:f0:f8:17:91:9e:78:b6:01:87:84:33:2e:e4:47:64:17:1f:20:9b:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate external-hard-drive.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for external-hard-drive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

external-hard-drive.com

Other certificates including the domain name external-hard-drive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for external-hard-drive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISBFv3LYwHFadWAs2PQLVfBBUOMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTgxMDU5MjFaFw0yNDA0MTcxMDU5MjBaMCIxIDAeBgNVBAMT
F2V4dGVybmFsLWhhcmQtZHJpdmUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEAsvky/IVsEt6EYmrRmBZtF9BGgzAA6syejLQJSHgA3r1sILO303nx
d7ndJtf4s10I4vbd2Q3a9mwX6Vw+GJk40pW5r7PtWKl0xa8+OS3jg30eFHsc395w
byAHYnQn4upReOJlb+BZdjE8oWlebuvlvGp3pUc3efekoDWeWhoTTugDwLRLIzN0
vzbh0juQb4MY7Raeeu/+PInSBycPmqyNlbvtXOEk1o/Ox5dpeZ2TTMRMbzftFm97
XgkzA43mDYqajwgDXW9uJryLYXg9h6orC6aQSMcRBIFAJJ/RgLyV5lRMnPLieN3h
v/CW46f84zQ0vQMY+rr5Rev6XTsxEeRrLFSF2GrUie+v6UKVSTTWmoTiI8sZjE2+
ITq9z/K7KMs6OyMPLDEm3s3OO/OXxwiTNMIZ6XT8feM3scYiwdsSDDwROFTlhmtX
nh2yVoKRnGX6y/35THNGm3RJPIwfzWhiNqdBRAmZdGf/df+JHTjnz3xAmVj1Xhjg
ejjxyyPD+ydz0uslFVixrACAKcwjAh//ty9uV+sSyE0Q1JeUNvR/AUBYrj4bTGn3
0BWeWsfP1iMDiWSFh+uMuqZXGGixpyyrJPjS4eo1wHNl8kCWax8D7m3m4/Z7JC8V
VLSz5MXwpfH/lWnhQFUnuzcGMFuQ1kTDO+036lnoPCbYjWWH8weNSbMCAwEAAaOC
AhcwggITMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU8dfT1k6kPrVkheQpRCoDov1s
+z8wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE
STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH
MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIgYDVR0RBBswGYIXZXh0ZXJuYWwt
aGFyZC1kcml2ZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5
AgQCBIHzBIHwAO4AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA
AY0ccKgqAAAEAwBGMEQCIDsKeeTynONR+6nrOPNx8KtmT8F7gpHomqt3KYIhT48a
AiAiEjQZV+DPzs1I9oUfPnaPhyV3qXcHCtva27END0calwB1AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjRxwqCYAAAQDAEYwRAIgMW04ACN49uJp
9t2zcQhL7mxh6j1C0wHoEkyZ7iplqisCIFAuCQasLE75Qg1VdpefdsYL4FyGFIZC
nluZUHS7NubRMA0GCSqGSIb3DQEBCwUAA4IBAQCbO8AQsCcsJmhpvSDwZd7lm7Tr
G1PzQiuxx5mcg4IiUWX65xNNzHVMNj4EQr8IPtzfyTnDmmZOz4Ht4MATEzouRD3z
vliMRSCeh+38F/AwNNfAyAfKRy/AbH/yGnhgze4PjJZ/5C2nGyocUTGIOS67qcq4
0XQHLKDSa0GoidZFgxUNVnQwKN1hoeVsBwZa8D/zpBuEtKCEIkzVzch6EeCoBSGR
nHv5MvNXt3S5mSEZsGBuTTcbPg87plCexg7o+f9KSGkf405iznHo00082gnL2d9K
UNMrnLu9TQR27RlL8yrd85dbl4jqbIgZaZY+CfhqmlYViB3yLHKvgwFvQayh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379743394925262538180340268251715079509262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 10:59:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 10:59:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'external-hard-drive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730147909334030542712145902105115253408123296837827805215475166944582754373945797365338212628559710013729992748852914683260428255656723257752222059209590587412336091270637212000953683262446989936745568760582102082190433393269887089054167047498127354447306842022660773167219648781008767218675158328663841962949359129533685051877199421130159892269149355510031074502545959188146757729313340912878471322172862702618864873203030419610872516565335122354610729413755829248933181034269318209062259263513442824900280102873170118151593820977910034771003843154189858588513430760509088447423482206406257450827198313229952319673520184182546202055196327949485846120770411690277714505069655845261497337520692951282946459140435181303711540865078642073606435151316610615597389447493765043127298299387407292754485222175636560798978169586291389920183285539280030253759010759269202478582484520537853304233936819664295521236791508963004287378959194105709202606596398693827134947090974562225591226757568281549745916769167419587194045511122325417176519278102675874981885456178909923965279229117214836523859986300645832779027504639617304107359434705055823628975695320640324269454555423880930919328061663691846199489672227067710830839822483304779018440362419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1d7d3d64ea43eb56485e429442a03a2fd6cfb3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-hard-drive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1c70a82a000004030046304402203b0a79e4f29ce351fba9eb38f371f0ab664fc17b8291e89aab772982214f8f1a02202212341957e0cfcecd48f6851f3e768f872577a977070adbdadbb10d0f471a97007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d1c70a82600000403004630440220316d38002378f6e269f6ddb371084bee6c61ea3d42d301e8124c99ee2a65aa2b0220502e0906ac2c4ef9420d5576979f76c60be05c861486429e5b995074bb36e6d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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