industrial-ia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:e4:b8:16:8b:a3:e9:e0:7d:31:bc:b5:e0:e6:f7:8b:6d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=industrial-ia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:e4:b8:16:8b:a3:e9:e0:7d:31:bc:b5:e0:e6:f7:8b:6d
Serial Number (int): 406601165926537911268830859713136976956269
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:af:66:57:51:be:34:4b:6c:67:23:b2:c9:92:ac:75:dc:5b:dd:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:1e:ba:3e:04:c8:2c:a7:04:62:dd:ab:9b:3a:a1:fd:b2:4b:f9:12
Fingerprint (sha256): 28:b7:34:15:d0:24:ef:61:94:55:d8:32:90:ff:0e:a5:30:65:3f:07:c8:7f:da:cb:46:d1:49:cc:81:2d:e0:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate industrial-ia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for industrial-ia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

industrial-ia.com

Other certificates including the domain name industrial-ia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for industrial-ia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCD4uUkqAvA4cW53RMgL
jCdL1H3QWzM7D+e52QgZWriQit6OR1G9FilwFEKWqq8aPn6jJmQlGHl4Gg7O9Ptk
wqEo7zlcC07j7xgikOoUpUhHt5mi1cWTPNxIaR9W0Xuw5a3nzS1RfWRvZGwW4m7B
9jMV24+pcGoDxTNZ6hZjmeUQSuhFH4aOEp4P4bvLRtfEUaZZm2gHRzzW3hE2zNWU
85/nKXHCgIwgzbl3bwWAiHjsAsSGXMDfhYL3iPCW8754c+i4Dlrtq5ye+M919++Y
SrZ3qjq/wvfyq7v+y8unGV2hTbEM4hBmiwYRzIDUnjKQntE5kXk1nKO8sWW9Mtxm
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406601165926537911268830859713136976956269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 17:31:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 17:31:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'industrial-ia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23244107004467455966288330350319233527358155378300849505383458602498889880203428519611307116068025188739418152364184792829796826728685566512891743790240704538021799760220668144973850291849500114831873297334770429867195992870156172402883316780583530479590860245198511618250608135145277741403349680211441015211007845092933098157992134904193533879325071461537349897366180722522876335933367493717123998564572934389815622017334349236528125309718059045827005246103071399186990790304286069668544329936580823144963481315932927767226503682460055158415184943366940316028895349580028759733027784380886327487682552425274190620241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99af665751be344b6c6723b2c992ac75dc5bddbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrial-ia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188eead57c200000403004830460221008ea6bd6ffe9e56297f37173a749607070af2d740a9d6d39d0303c7f9231d5039022100b2a358171a4bddb1b4d627b7d47b980dcc8e20e1b71da20c78cf370d297bffb4007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188eead57e2000004030047304502204a1f9d33d209c8439325b3216aa3de046474033970d27878dbde5385a35d9375022100ce0618ff6c18cf0f2d173764500ddcd914f5fe0957f1b3d952e376acb673562a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad021418baa3e6cd61ca5dfcf8f82d17a25667ae13441a1df77fb3fc52915980a88f61e8328f3b5f338174e4d79ff828810763d9f0eb2c197c72fe04d48a03d495d84db74fcd8e6d3020a3ec04692ad6a7703e8810e733cec72fb91cf24d1fa3b6c3f4020ef00f81efcdf2946a56c36395237a8a48fa4e70128d1926810441905ee746b4447903d80bccca9656eb5074660229b3d8e82bca519137e1997581dfc7d340d5913f6819ba42ad76cdf583b4ad66face022385c16c8e8aa9d1d30caaa889b1da82e8f9086d3ab8c5484f7e6cf60d4434a5a76205c826ba3feecaf2c4c8101b5bb335969587dbb80c2a6e94e26c92a900837faef71758c1365ad30357