projectindy.net

Issued by R3

About this certificate

This digital certificate with serial number 03:8c:7c:65:98:04:ee:53:1e:67:a0:69:88:9b:0c:bd:25:30 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=projectindy.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:7c:65:98:04:ee:53:1e:67:a0:69:88:9b:0c:bd:25:30
Serial Number (int): 309141740940989096732448735180383498085680
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:7f:c8:46:48:a5:27:df:75:3c:eb:2e:84:9a:e6:63:7f:51:64:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:36:a0:7a:02:26:79:23:e4:21:b8:54:de:31:b7:6e:0f:d5:fd:1a
Fingerprint (sha256): 22:dd:5a:7b:6c:2d:5e:5f:ed:90:02:66:df:5c:8a:93:94:a0:86:57:0e:58:4a:52:4c:72:90:4d:d7:b2:81:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate projectindy.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for projectindy.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

projectindy.net
www.projectindy.net

Other certificates including the domain name projectindy.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for projectindy.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309141740940989096732448735180383498085680
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 05:54:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 05:54:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projectindy.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677737723154835245543983671284823587913448458804446624305431635560985615000838773573355291146388522235565550410038132839515195159397626337176226538141708724234423321114081035517444347526021104766501722985725580797028561564876001807152950649787939799849483152122308944171926304357201245679445949362773387587639650540710704532735351033240346723757223806474576456681988401223616336138831638532449761546327474737185956008203022448323193204564268377880087842440630279476323356890739491491358750340205245897784260739315179509482836536737328812793122268930218386003116623710651396475083164785398681842692676130587574538872573702153551943768539317438772006785533219683853713616745022354900396495150864018957169647733152704599564396337672939863824313960589986875874988170355132929897681038309214588715759100644661069487727739679238367514660413738254047839510520502305655646479985793015975959762591272541733456929316849531821321181838839285770394600522961496472738607459770247328856747590236538643089122863499143702268344056752897539943364695937478035376463306315992149897684802598878898295162551665012001765802891138948341893119831290861413292553333421754555354520344546793287153553865517273626022635673138509679960348695934329090942848482179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c7fc84648a527df753ceb2e849ae6637f5164fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectindy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectindy.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce7d9fbed0000040300473045022100c5edaa44cf8475d237ca45e51cce281938bb76219ce7fa1624fa4f10c0163af6022027be36d287a9b9c675e7bb768418ed69adeb22ab6c5dfbbcadc8a90f787ba31f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ce7d9fe2d000004030047304502202df9f1005540e2fed5364bc8541382e5fbd776fd50f927773ba03c61c67977f5022100f1abb80245991e16e053042829f8c8cf4b85f27fc759d886323a4b249127bf93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002256d2ab205b41011fc1c127e27ca15b2376d0093f56bb511b7c0cdc67ff9092c5df9719b62572c1c9220b41d5633bf3d014aafe32a673564eaada7f94cad8af1db76cbde8ad175e4315af38d3a00484ebc820e4a6056992b553aa481bdf2f9e19e3b01f6a4e5b96037ebaacff57ed932d3e96d627fe9be7d3e7074093df90906c62ea7a1bba5341f250651272de5435a47dfbe0fe1ee3295ccbc8f403b05d0f1667055a7d02a8c3d20d18b9d53bf2454360731e6312d5bba30948e73f2db485649aede51770d3a4b71df6c786a99edba1590cae6f76891b47a178a3ad027b52ab9c6176babec6da7baab4b91d8964ce1b42437457b7e32332a89bc51d0644fb