mi.harborfreight.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:d5:52:41:05:42:24:aa:3d:f7:ea:d8:34:ab:a3:bd was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mi.harborfreight.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:d5:52:41:05:42:24:aa:3d:f7:ea:d8:34:ab:a3:bd
Serial Number (int): 13070679501977611303974428992493822909
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:21:f0:44:fd:00:a3:8e:c8:ee:09:cc:27:95:66:52:e9:be:5d:0a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 93:0e:08:54:31:eb:86:32:05:56:dc:7e:0f:b2:6e:e2:e7:56:be:bc
Fingerprint (sha256): 22:39:8c:22:12:97:ec:6b:25:45:48:37:f7:1a:f7:7a:ee:1d:cb:85:13:2d:9e:a9:42:79:6c:37:46:80:7e:a8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate mi.harborfreight.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mi.harborfreight.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mi.harborfreight.com

Other certificates including the domain name harborfreight.com

(limited to 100 certificates)
tls.automattic.com
custserv.harborfreight.com
learning.harborfreight.com
smetrics.harborfreight.com
sv.citedisplay.com
harborfreight.com
VIEW.HARBORFREIGHT.COM
shop.harborfreight.com
tstage.shop.harborfreight.com
origin.harborfreight.com
mstage.stage-shop.harborfreight.com
sv.citedisplay.com
vpn.harborfreight.com
atlas.harborfreight.com
go.harborfreight.com
oc.harborfreight.com
citrix.harborfreight.com
filexfer.harborfreight.com
shop.harborfreight.com
hft.harborfreight.com
shop.harborfreight.com
harborfreight.com
harborfreight.com
xview.harborfreight.com
tls.automattic.com
mstage.shop.harbortest.com
shop.harborfreight.com
secure2.harborfreight.com
SHOP.HARBORFREIGHT.COM
mstage2.harborfreight.com
mi.harborfreight.com
tls.automattic.com
sv.citedisplay.com
m.harborfreight.com
shop.harborfreight.com
stage.harborfreight.com
atlas.harborfreight.com
sv.citedisplay.com
shop.harborfreight.com
mail.harborfreight.com
smetrics.harborfreight.com
tls.automattic.com
FLYER.HARBORFREIGHT.COM
mi.harborfreight.com
tls.automattic.com
mail.harborfreight.com
shop.harborfreight.com
mail.harborfreight.com
filexfer.harborfreight.com
m.harborfreight.com
tstage.shop.harborfreight.com
em2.harborfreight.com
custserv.harborfreight.com
mail.harborfreight.com
shop.harborfreight.com
shop.harborfreight.com
mstage.shop.harbortest.com
sv.citedisplay.com
FLYER.HARBORFREIGHT.COM
smetrics.harborfreight.com
harborfreight.com
vpn.harborfreight.com
insidetrackclub.harborfreight.com
insidetrackclub.harborfreight.com
sv.citedisplay.com
view.harborfreight.com
mi.harborfreight.com
tls.automattic.com
calvpn.harborfreight.com
m2stage2-admin.harborfreight.com
securecitrix.harborfreight.com
jobs.harborfreight.com
FLYER.HARBORFREIGHT.COM
shop.harborfreight.com
tls.automattic.com
*.trevipay.app
insidetrackclub.harborfreight.com
filexfer.harborfreight.com
sv.citedisplay.com
FLYER.HARBORFREIGHT.COM
origin.harborfreight.com
newsroom.harborfreight.com
oc.harborfreight.com
shop.harborfreight.com
shop.harborfreight.com
shop.harborfreight.com
insidetrackclub.harborfreight.com
VIEW.HARBORFREIGHT.COM
mail.harborfreight.com
sv.citedisplay.com
sv.citedisplay.com
smetrics.harborfreight.com
secure2.harborfreight.com
VIEW.HARBORFREIGHT.COM
sv.citedisplay.com
harborfreight.com
em.harborfreight.com
m.harborfreight.com
newsroom.harborfreight.com
VIEW.HARBORFREIGHT.COM

Certificate

The complete raw certificate details for mi.harborfreight.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOaRgKeQUAqiPBG+AQ+K
FrIzNIEELExDr3SCpOR3NJlffdfr1ScQtQ9+E+032Py41D3Op4y9Ro56opHjirZo
/8FLNFqdh1DpgWPQplYU7zjAR42KNwaAD4CNuyEAlr+PeA0kPu2XquR1F2MF4VSL
yFLy8h+8nOt0zHKyfEa1WBwJNUVZOhrJTgyXLJWAUxDzxr+QkqGiTaHRFNY0ovj5
7z4V/jt6SfpKuRpi6TRp2MDM1o9Ehh4n8JjbF0JLZ7nkXjRHvfh3kGzCrlI6RHMd
gYIva0oIF2psqzNPC/ApcqlvnFQjqZmqUdLWB2ddiIK0liVkiGHlcD8zux4Rw4yM
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13070679501977611303974428992493822909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi.harborfreight.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23846498834115582422423311898377563391940859150468906057663914560611041215012989494169297942419810166787200556483175311579148120928123570166087155371885093092667583902248835392678277193081437078401812429268858581689483077610598104425713894507242982362900894255675913429335101319791545459255103268558663594021072565696651193393752806937890642477222056550870048002833209107562361185631839877031992488109214009887186435718934345579107699222370216397167962089509607564351541499071088538362211927665820407499594901679605966694750960571397960876253963984409331673388888886388932932290698719478050475225894011513939715460249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6021f044fd00a38ec8ee09cc27956652e9be5d0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.harborfreight.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c76529b8f0000040300463044022000cac39c91cc9bc8bada62038a823a4fc8d489e62ab885c0a41668476ca426160220501992d70d688099782df2ebc5d3981ff4e5fe3aac54ffd9352dc4c549bb58c60076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c76529bd20000040300473045022100d9ddf1191b5dd3ee61c50d15ebbb3eb3d2416b87a051b0613d3586152e08ed0002201c7827979ad308fb22c2dfe84816ee313078cd853b168988c43f784a2d3c03110075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c76529bbf000004030046304402200351eea6fbd51e99781617149e61f851e30059cf337bd639567b3df6c1431a03022044a03b67e342bc6ce736d24d63ac19f174c765e7c47feb4403339ed79f8218e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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