external-hard-drive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ae:46:a5:eb:33:77:19:17:8d:2e:20:6f:57:29:1a:f4:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=external-hard-drive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:46:a5:eb:33:77:19:17:8d:2e:20:6f:57:29:1a:f4:78
Serial Number (int): 320639897098654387137063859299962039497848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:8b:f8:8c:05:97:dc:8e:0e:47:24:fd:52:1e:0f:c9:d8:96:37:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:f8:40:54:b4:38:77:bb:ed:f2:7d:59:9d:16:d7:fe:f7:2d:fe:1e
Fingerprint (sha256): 2c:b2:50:8b:b8:46:2c:28:7e:ca:ff:22:d4:ee:5c:ea:67:dc:45:1c:49:26:8b:48:3a:73:af:3e:c8:5a:58:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate external-hard-drive.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for external-hard-drive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

external-hard-drive.com

Other certificates including the domain name external-hard-drive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for external-hard-drive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgISA65GpeszdxkXjS4gb1cpGvR4MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjIwODM0MDdaFw0yMzEyMjEwODM0MDZaMCIxIDAeBgNVBAMT
F2V4dGVybmFsLWhhcmQtZHJpdmUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEAsiSPMr9TBzCcDiTJOJsn2ME4xfgBSTi1B0r1NlTFkwipWQD7alfg
D8q3/eQ88yzZCeEgqhoy5lNoKn7g/Ct7oqujbHfqoBGQXYTNpBnnysX13e/vNQ5/
6kGrvqPloVplhxByYx49iHymfKwUQjgu3kjiHL+MODTAmLDoVBZLFq2tmMXt005c
IERvTWtf03HDnSdOGuoEp1MEOWcV5kofl3WB3tRzlR6R0iblzfcbDk7l3x95xf4d
YmLkH+GjAXMzXWN3BXAjBispMzUEkrlI0PRDEr7ehg3jvzplFkdhJOzagLyfo6pZ
0nV/Qjj6ZhMlTydCzSQucHAIAGzo3oHmgLV+P+9l6to02Zk44KeLC8d7aljuK4JK
VSgMYafQZc4uiTsh2HR1Uzk8xEGuLBiELSdkW1WOMsnkNE+LRAVumDUzM+zC4LNr
3WRiF/hrRH+G6qwcIEpm3LHlWbAbyEbcSbN9EAwCZ0W7len3/bApYHWYYpHTn/aD
mMyH3SzDjIsJcksDmDneFwTDNa4Fmgi/ZOD9XfTmXwAPtM/45TuKPxdRiiLyTYbf
gSFM8kMBrT2KvnO/a1fuxwvrjCW+oGdc6xa/9a390SXUASctUa1pS0Z6QFer8qKB
Yz8Aoh4PLvnuMjg/BgXLm0ie66gvVQew3HqrmL1G9Eif+CTAHLjHHnECAwEAAaOC
AhgwggIUMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtIv4jAWX3I4ORyT9Uh4PydiW
N7owHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE
STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH
MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIgYDVR0RBBswGYIXZXh0ZXJuYWwt
aGFyZC1kcml2ZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAA
AYq8PUqcAAAEAwBGMEQCIFD5Yo4zJKpsHQTc1LY3LHE32H0XvpdUwUC0OVHLROs/
AiBZODM/rRxbHTvprM2GYS7ZoVcCIEMr5UWjYSPNbKgVywB2AOg+0No+9QY1MudX
KLyJa8kD08vREWvs62nhd31tBr1uAAABirw9SpUAAAQDAEcwRQIgeaLwh0mlIJOL
DSrg90RT6HUMrp6xAiFL2IKb3nx1aAMCIQD80YpkWkmdYoDNN6J1fa563hr+a2W4
53XYZTXN2Ks13DANBgkqhkiG9w0BAQsFAAOCAQEAurZwmHtuMeytU07AODJWd6Ad
DerwtlOo+8wvQpVxs+16BZoERsE/Pp8KXTTXMpB6RQZ/gnxNieJcHj7M7fUUXDlt
1Caz6X8T2Okr+vsEq8RiEsqwTv/hZMQ+zSTk/pec3ShOvqRS3CeE4v57J6RBoX2n
0IEsmLhE8KtZ+OPqKdeXMWu0emjlzx60fcFd3VWhPR81H4oElCRs3vmI7bMsQN71
1hSdHidyRJ4zC25SR9q7PLkZYNUWUugzWLoaUsCxQSeSp4qouGsMEJZIFcfg25rT
Q4ttTEph7+lUPbY1GpEZsojYfCh6egnGtg5Vr540H3rnDZ+I73GFQOGDpJNb/Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320639897098654387137063859299962039497848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 08:34:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 08:34:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'external-hard-drive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726759258205911822757316806952083315255823908767031455583141763428239276110486448450427204150123055146505278698704883344332444372620243911697031521587956865197196938314865295114061280890135728713537918164379455081827822232273647429645281379888927831176623002362946301614517219464867159037655799287318274270406211876793547247036178008209601391704658716059375842367187977305511400333092816922700374637836504983636592967281057426647400272170331903647530834712890215585517952457394170791224692888551565918312153302072986711241912891547889380168520762215684905909823477323794831142241679205088312088372064329350452019236937076562289161624845681344399333704278357431248974647493896277115807946279758132152183946659978505752240049468384969692269930066791560494468445932925932035462186270768009103469077198948055738525270850402055305662406577460317299230903309494174547873885534515969173805137137582825774494106131622642672641148683524799219401754567009681302652557994170314779824633617934390819469578418585555333125057529337479217748393966856548295899730396136986268036623720018177034191714340089669529479063520403597800635681708775156362800081007257433999224673090085542585633729137355191632220274575476710572505050077381960369833735822961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b48bf88c0597dc8e0e4724fd521e0fc9d89637ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-hard-drive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abc3d4a9c0000040300463044022050f9628e3324aa6c1d04dcd4b6372c7137d87d17be9754c140b43951cb44eb3f02205938333fad1c5b1d3be9accd86612ed9a1570220432be545a36123cd6ca815cb007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abc3d4a950000040300473045022079a2f08749a520938b0d2ae0f74453e8750cae9eb102214bd8829bde7c756803022100fcd18a645a499d6280cd37a2757dae7ade1afe6b65b8e775d86535cdd8ab35dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bab670987b6e31ecad534ec038325677a01d0deaf0b653a8fbcc2f429571b3ed7a059a0446c13f3e9f0a5d34d732907a45067f827c4d89e25c1e3eccedf5145c396dd426b3e97f13d8e92bfafb04abc46212cab04effe164c43ecd24e4fe979cdd284ebea452dc2784e2fe7b27a441a17da7d0812c98b844f0ab59f8e3ea29d797316bb47a68e5cf1eb47dc15ddd55a13d1f351f8a0494246cdef988edb32c40def5d6149d1e2772449e330b6e5247dabb3cb91960d51652e83358ba1a52c0b1412792a78aa8b86b0c10964815c7e0db9ad3438b6d4c4a61efe9543db6351a9119b288d87c287a7a09c6b60e55af9e341f7ae70d9f88ef718540e183a4935bfd