projectindy.net
Issued by R3
About this certificate
This digital certificate with serial number 03:8c:7c:65:98:04:ee:53:1e:67:a0:69:88:9b:0c:bd:25:30 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=projectindy.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8c:7c:65:98:04:ee:53:1e:67:a0:69:88:9b:0c:bd:25:30Serial Number (int): 309141740940989096732448735180383498085680
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1c:7f:c8:46:48:a5:27:df:75:3c:eb:2e:84:9a:e6:63:7f:51:64:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c2:36:a0:7a:02:26:79:23:e4:21:b8:54:de:31:b7:6e:0f:d5:fd:1a
Fingerprint (sha256): 22:dd:5a:7b:6c:2d:5e:5f:ed:90:02:66:df:5c:8a:93:94:a0:86:57:0e:58:4a:52:4c:72:90:4d:d7:b2:81:84
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate projectindy.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for projectindy.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
projectindy.net
www.projectindy.net
www.projectindy.net
Other certificates including the domain name projectindy.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for projectindy.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISA4x8ZZgE7lMeZ6BpiJsMvSUwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDgwNTU0MzFaFw0yNDA0MDcwNTU0MzBaMBoxGDAWBgNVBAMT D3Byb2plY3RpbmR5Lm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AKYgbhPFo895h1MzAbtp9v7GvjMyUiJm2uIaQcDMd06cMOeJnABfYL8s7cOyXmyV N3n9SNx3k7gJ1FPxe85PM+o87vJKNE0V02uGV6rnFYJ89y/VgooLF9TxwbZT8X0r K9A1nN8ongi31crm+zvvutfYDvm91wTgkk3BOpR3VM4E5yrkhVeT2WS8ZPlx0Ubl 1nr9/AS5kv04N4FEd2PMdpCyoMxifZhqI8iCoAOedCtTgg3REdz7Nfpu/XzvUkP/ GNHB7CsWBdf4QFhLTTnaFfVDEA9+8XV7IHz50cu5Y0gzbWvnLdde0hhTmDDg4sq9 DojvB3XYsovjYKDJObfcxggs903mwmJYi+pfu7t3UHXNG0gia+oV3tVO3w0s2lab oqx6XzLColYTQaI0hYjaEvLF6D5lqB0dnmi6sGkl4PzQd6C2OpGIbHHU1DfptYqI 5AMeuRPbukJks4sWOqooiBiv84tEtaPBMl/3p64IovArVERNLotKoto2PfUbG7gL ChvBWibF0tswy3woGRdaIjE6gpC6Ox23XVHy7zANHgs7N7dVgqSlcSlgd1+7A3Gr +YB7MNNBZrJJt8kn1eJ31ry+W263V9RkwTRtd9VMYbC/MEgOEj4Rw5db9M8IpL3a 9Nof3SFMhaXGXSF5IFnktD8GObm9weENIFG/ddrCgDuDAgMBAAGjggImMIICIjAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFBx/yEZIpSffdTzrLoSa5mN/UWT7MB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD3Byb2plY3RpbmR5Lm5ldIIT d3d3LnByb2plY3RpbmR5Lm5ldDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h +tQXAAABjOfZ++0AAAQDAEcwRQIhAMXtqkTPhHXSN8pF5RzOKBk4u3YhnOf6FiT6 TxDAFjr2AiAnvjbSh6m5xnXnu3aEGO1presiq2xd+7ytyKkPeHujHwB2AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjOfZ/i0AAAQDAEcwRQIgLfnx AFVA4v7VNkvIVBOC5fvXdv1Q+Sd3O6A8YcZ5d/UCIQDxq7gCRZkeFuBTBCgp+MjP S4Xyf8dZ2IYyOkskkSe/kzANBgkqhkiG9w0BAQsFAAOCAQEAIlbSqyBbQQEfwcEn 4nyhWyN20Ak/VrtRG3wM3Gf/kJLF35cZtiVywckiC0HVYzvz0BSq/jKmc1ZOqtp/ lMrYrx23bL3orRdeQxWvONOgBITryCDkpgVpkrVTqkgb3y+eGeOwH2pOW5YDfrqs /1ftky0+ltYn/pvn0+cHQJPfkJBsYup6G7pTQfJQZRJy3lQ1pH374P4e4ylcy8j0 A7BdDxZnBVp9AqjD0g0YudU78kVDYHMeYxLVu6MJSOc/LbSFZJrt5Rdw06S3HfbH hqme26FZDK5vdokbR6F4o60Ce1KrnGF2ur7G2nuqtLkdiWTOG0JDdFe34yMyqJvF HQZE+w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApiBuE8Wjz3mHUzMBu2n2 /sa+MzJSImba4hpBwMx3Tpww54mcAF9gvyztw7JebJU3ef1I3HeTuAnUU/F7zk8z 6jzu8ko0TRXTa4ZXqucVgnz3L9WCigsX1PHBtlPxfSsr0DWc3yieCLfVyub7O++6 19gO+b3XBOCSTcE6lHdUzgTnKuSFV5PZZLxk+XHRRuXWev38BLmS/Tg3gUR3Y8x2 kLKgzGJ9mGojyIKgA550K1OCDdER3Ps1+m79fO9SQ/8Y0cHsKxYF1/hAWEtNOdoV 9UMQD37xdXsgfPnRy7ljSDNta+ct117SGFOYMODiyr0OiO8Hddiyi+NgoMk5t9zG CCz3TebCYliL6l+7u3dQdc0bSCJr6hXe1U7fDSzaVpuirHpfMsKiVhNBojSFiNoS 8sXoPmWoHR2eaLqwaSXg/NB3oLY6kYhscdTUN+m1iojkAx65E9u6QmSzixY6qiiI GK/zi0S1o8EyX/enrgii8CtURE0ui0qi2jY99RsbuAsKG8FaJsXS2zDLfCgZF1oi MTqCkLo7HbddUfLvMA0eCzs3t1WCpKVxKWB3X7sDcav5gHsw00Fmskm3ySfV4nfW vL5bbrdX1GTBNG131UxhsL8wSA4SPhHDl1v0zwikvdr02h/dIUyFpcZdIXkgWeS0 PwY5ub3B4Q0gUb912sKAO4MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309141740940989096732448735180383498085680 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 05:54:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 05:54:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projectindy.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677737723154835245543983671284823587913448458804446624305431635560985615000838773573355291146388522235565550410038132839515195159397626337176226538141708724234423321114081035517444347526021104766501722985725580797028561564876001807152950649787939799849483152122308944171926304357201245679445949362773387587639650540710704532735351033240346723757223806474576456681988401223616336138831638532449761546327474737185956008203022448323193204564268377880087842440630279476323356890739491491358750340205245897784260739315179509482836536737328812793122268930218386003116623710651396475083164785398681842692676130587574538872573702153551943768539317438772006785533219683853713616745022354900396495150864018957169647733152704599564396337672939863824313960589986875874988170355132929897681038309214588715759100644661069487727739679238367514660413738254047839510520502305655646479985793015975959762591272541733456929316849531821321181838839285770394600522961496472738607459770247328856747590236538643089122863499143702268344056752897539943364695937478035376463306315992149897684802598878898295162551665012001765802891138948341893119831290861413292553333421754555354520344546793287153553865517273626022635673138509679960348695934329090942848482179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1c7fc84648a527df753ceb2e849ae6637f5164fb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectindy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectindy.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce7d9fbed0000040300473045022100c5edaa44cf8475d237ca45e51cce281938bb76219ce7fa1624fa4f10c0163af6022027be36d287a9b9c675e7bb768418ed69adeb22ab6c5dfbbcadc8a90f787ba31f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ce7d9fe2d000004030047304502202df9f1005540e2fed5364bc8541382e5fbd776fd50f927773ba03c61c67977f5022100f1abb80245991e16e053042829f8c8cf4b85f27fc759d886323a4b249127bf93 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002256d2ab205b41011fc1c127e27ca15b2376d0093f56bb511b7c0cdc67ff9092c5df9719b62572c1c9220b41d5633bf3d014aafe32a673564eaada7f94cad8af1db76cbde8ad175e4315af38d3a00484ebc820e4a6056992b553aa481bdf2f9e19e3b01f6a4e5b96037ebaacff57ed932d3e96d627fe9be7d3e7074093df90906c62ea7a1bba5341f250651272de5435a47dfbe0fe1ee3295ccbc8f403b05d0f1667055a7d02a8c3d20d18b9d53bf2454360731e6312d5bba30948e73f2db485649aede51770d3a4b71df6c786a99edba1590cae6f76891b47a178a3ad027b52ab9c6176babec6da7baab4b91d8964ce1b42437457b7e32332a89bc51d0644fb