www.external-hard-drive.com

Issued by R3

About this certificate

This digital certificate with serial number 04:40:d9:f9:81:12:09:8e:b1:a1:eb:47:7c:cb:1b:05:9b:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.external-hard-drive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:40:d9:f9:81:12:09:8e:b1:a1:eb:47:7c:cb:1b:05:9b:c3
Serial Number (int): 370516953184844053832373970180599636663235
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:10:a0:db:01:4d:30:b3:b7:fd:b8:aa:c8:1f:b7:e8:e8:c2:c9:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:83:e4:55:b1:6d:3d:13:0c:02:13:62:4e:3c:f7:d7:16:70:a8:92
Fingerprint (sha256): 12:1e:c9:5c:91:45:07:ec:68:0a:30:78:23:54:63:fe:96:1e:b4:5b:c8:0a:7c:3b:70:b8:bb:f7:85:19:53:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.external-hard-drive.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.external-hard-drive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.external-hard-drive.com

Other certificates including the domain name external-hard-drive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.external-hard-drive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISBEDZ+YESCY6xoetHfMsbBZvDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDIwMjI0MjNaFw0yNDA3MDEwMjI0MjJaMCYxJDAiBgNVBAMT
G3d3dy5leHRlcm5hbC1oYXJkLWRyaXZlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAOQhy0XIVLsM0vfN+/o3DTKhIpF2iqAexHVKhsOac2fR5z9/
RTEGxV1Imp3zXJA0xOI55TtucATEbrnQ/wX7QTE11qbf9vMWQDTCvtHYmi+46ExS
XKvBZ4xv+BPm8YXd+4reixFhI15kja5kjCnfg8x388SF2+TZ2M81CA7IV5V4g4pO
NtG37P2a6bhkTmobixpLj8BE4VRrUD7DCRDVwLhkU9j/Y79xAohJEfh5qeilYmR4
9DoRWJKVUOZRtFvKrFP5f03yizlaGgQg5kEQwmf+puKQEzr3fuV2lyBeZSj1eITR
YLHdTYcuFIfjUI+/NUCAf14ceRTh1v9XZECeMenD5skVZ2uA/LfYamkxzEFQsrt1
ezk2ceg6raK8owHi7X1qcnyXNp/AaiT+E6+G0Q+IlUIvmH95TsSRECZqFfj9p2fl
7Mrszn1uBr4Iewpy+2jTInBQnadfXp32u4NL9O9AalKE8Quvmq6bc+zBW3isBlzf
rXT1sHlqdKRa80yRyHoHGuBMn3wX1hrOT3Pq+fD9Uiwey6eFfDXeiTRfpjm29CfO
3j38VG3/h915ejM9rl/pOtyEZFgMC/HfcnjWjaCQCYobixpFVWCxxlUFWzJncvoj
vcSzbg+5hNt1NOrlSaEhWWtz34E3RrkO0GeCIbXAPz1f6PbR6Mo+Z4W3t3nPAgMB
AAGjggEqMIIBJjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMYQoNsBTTCzt/24qsgf
t+jowsl9MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCYGA1UdEQQfMB2CG3d3dy5l
eHRlcm5hbC1oYXJkLWRyaXZlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/V+Y8jkewYer5Jc
ecrqQtbX2f2t+wQAG8v8n8RrBx+KiK4wnEYSyPVIAHbDovn/ElwkEAcfhQDrSdub
wrPJFOBEsIk9PhQ1hxMqMZ6jkgQz2a6F59c708UJA1fKkSB2oGXt7I6deTLquNlK
1br009JBOXEogT9hH0nyI3l19xzxofGGDSLMr5iRur5N+ILni5rP6y4mWYuAZ/n+
ZLmPJi27ECXEcZdbHgAcajOxFtGJgyuyKbh/SuL/wnZdlTcXi4GYAqQr+ibkNxoj
izISI43a4RPXHqiQ+qhbnsN64EGPlJvoIO8BgwiFqSDDru59rQkk30HgkwNRnYmj
1+y0PA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370516953184844053832373970180599636663235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 02:24:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 02:24:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.external-hard-drive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930697392932397187633752884165296047032932392634937489428734487029596903964685508019734623977229251750954937884961421086685958283724026313562567528333543152349550352467418229600867698091171575057536763460984857513299259642647848446019899219789889447491940894336209180590341886997636084614844292497196509841402395404885247545195646696826626448854181299635413590485814606853512481365206414309240539473043124012195657739168311671950142557919909509417830386018733366135353823820531134868900488551502810342416522364522853405719468872000894049240164762598717186478447729888228211700081588010276396373367512505315479372649380971006620436838597196562169154736538674189282358906951301295270437182364783960873815016490559521527904117591449101104458516476247751123432663922122799132891182684583929482452194321779782363573797237883904507854556234766928835980839779875197751726392265782048427532911572191132388607143007103142041360344010935412917155367573315423087335996819437264826257400201686303021403056835129251320244219513161890246929423346902063341189797530241939666321359721349076529770390015513564093132155742094699104203462310586737211683451618239654267590879059277731940696638123737898723576869567768216417363168420938903387135679101391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c610a0db014d30b3b7fdb8aac81fb7e8e8c2c97d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.external-hard-drive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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