holdur.is

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:27:7a:98:36:f6:d5:cf:1e:90:49:da:e3:2b:66:1f:61 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9e:27:7a:98:36:f6:d5:cf:1e:90:49:da:e3:2b:66:1f:61
Serial Number (int): 315153948208122342457632284508786367274849
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:a4:65:93:0d:35:84:62:08:b1:07:29:71:90:e8:10:c7:ae:41:a9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:e1:42:ac:cf:ca:e1:71:21:9f:de:cb:a6:38:d9:1c:32:8d:e8:c2
Fingerprint (sha256): 3c:17:ea:83:e2:5c:28:f8:23:cc:c2:86:d1:87:ee:cc:bc:13:48:43:14:4b:72:b6:ee:98:61:c7:74:31:9b:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holdur.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISA54nepg29tXPHpBJ2uMrZh9hMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTEwNzQ3NTlaFw0yNDA4MDkwNzQ3NThaMBQxEjAQBgNVBAMT
CWhvbGR1ci5pczCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL9HEC6b
zGA3TFX79Wi4lDmOt4qyIRjIgEMF+pcGqSqqanvdCP3wROCVR9U/GIBWgxXTCKEM
eqZlYcwBz8wxHMHl1jc7svbOZhsPNr/Ad8EvkRxGuEmtsgO16Z59ugemrSinU/c/
By/TCTSgcX3KGutwajgy0XMQPDgrnOWOI0CY4M9A2XgLCx6tfHdi3wCryHMFZ0X+
MiaRzqrmDk2d+d22jOlAq2OvgR0/1xzJOlt30ePcip2HTAkQtvNu7GVJ7D++L747
/PPzAORnlVym+cmOUBl4bE+ZhTt2VoKlc3VlKvyHruCs+cNQipqTfPxKatwS9pc8
iHvVknP95QKuQxYdK7GWb9ks0fiOvd/vIaDsfS15ALIRDU7T861JOcPENxg7rzHg
Lctqsebl0LO7EezclpUOMibcgDOBCigDHIHwNJdacAMao5tOKweFwxLrzSG5JYX9
AFUmYMUfs8atMPG4Tf13DK5ftvr3fRd6q8sQkAojXTinS8IJ9KyB4h3RaYq8hVty
gmy42lWeBqXQVNqNlGIbe4ilKBfvd+gjwQ8VJ4L0hEJ+PeuQhSvjDmwHuhmQrRIS
yrqIcOfn5fQL3CVqWdrPL6WeFKpwAMT1zKjSqrQlocuulZQEzT8IhzeBnS7+rh8w
0zTvy8i2Lx/kp1ZqbezuCKjaYNLK3Rdc8NrXAgMBAAGjggIKMIICBjAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFE6kZZMNNYRiCLEHKXGQ6BDHrkGpMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMBQGA1UdEQQNMAuCCWhvbGR1ci5pczATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ABmYEHEJ8NZSLjCA0p4/
ZLuDbijM+Q9Sju7fzko/FrTKAAABj2bWbcwAAAQDAEYwRAIgAXX+BpRTTjwTGrQg
enj95ANnLjTgXBLbQsQgMSeSSG8CIEcwbM5H5KIMa448SP9NtcgW04MRtr+ZOeLt
IMnMbNRAAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGPZtZt
uQAABAMARzBFAiEAhPy4dJoGnIApgPxadLcz/yX4u/+WtJ+wyS1LOPH9b2kCIE5F
xpuL+YTKxsJs0mI32+vqJOK6GnCOiRaz8/kWo8xFMA0GCSqGSIb3DQEBCwUAA4IB
AQCYGh/hZfcSg4J2lujpQrHB+zrbPtwAUBIjPVkez4DGvypxz5J20Aqxyu+NmDkB
eFAFwPQjrbKftP4yRNU3qUP7cOmL9JHp/enMpaDoSF6w0gKcDAjgtapT+MFBxbtQ
i7nmo2N354XLTR8FXrRgj4w/R4Twk3grXDN3OkYxmjwUCpJIYq8uA2Xphn2eephe
FnK7L9BITYTLVbv/6kSLdPHeuCe+YGLxAVTZgMpqqfjlF1TjlZXvo/NSsgKjexnN
KgIJ1yZRb1HcGuh/F1mV1apcqhrGPf4c/bi+HH83VIO6qsfRqjcbBSsW2oV3IFhi
/TrTSXv/zmdmBTbb3hb4TRWe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315153948208122342457632284508786367274849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 07:47:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-09 07:47:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780344488116798159423246495788701488731458314333920277226332010615563232583108871380169453181259730110782019205539681568117728030833611960488610399499431861216913699644551798736715814788601085354798840991886984634133257064420861086047721434345249343054105403729909948604338965027212531578958582763420699102583065233837478404077112481336044305319670532040188932235758366909764585215617860303671139618053619091299163542051488914497355002083261779439411713858785486870264902280691093217425425155760761277520573241764032156178285918476859204479800784732369723459666462654483758644418130704435504580902028455892918609549873503494753349358185751870326783110543219192067558835930032260538209511253844377473670106736963225823314662716013405584268033222225338775016147475869806363267413801582910206616910204578459337052272341841130141689672959903228798943644511156273758932669007198970767888963327111382045122999513770764547974481253144593603831831674275233122753214143658636912188512956496331669651028017071583104160512601948560591835835879141998999498860485518007505784473608226745091992274456275379700261354367367851866840379153939701784580389196100582768562228331757578951257342757920124411910139987186603244265470253249630116403446078167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ea465930d35846208b107297190e810c7ae41a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f66d66dcc000004030046304402200175fe0694534e3c131ab4207a78fde403672e34e05c12db42c420312792486f022047306cce47e4a20c6b8e3c48ff4db5c816d38311b6bf9939e2ed20c9cc6cd44000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f66d66db9000004030047304502210084fcb8749a069c802980fc5a74b733ff25f8bbff96b49fb0c92d4b38f1fd6f6902204e45c69b8bf984cac6c26cd26237dbebea24e2ba1a708e8916b3f3f916a3cc45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00981a1fe165f71283827696e8e942b1c1fb3adb3edc005012233d591ecf80c6bf2a71cf9276d00ab1caef8d983901785005c0f423adb29fb4fe3244d537a943fb70e98bf491e9fde9cca5a0e8485eb0d2029c0c08e0b5aa53f8c141c5bb508bb9e6a36377e785cb4d1f055eb4608f8c3f4784f093782b5c33773a46319a3c140a924862af2e0365e9867d9e7a985e1672bb2fd0484d84cb55bbffea448b74f1deb827be6062f10154d980ca6aa9f8e51754e39595efa3f352b202a37b19cd2a0209d726516f51dc1ae87f175995d5aa5caa1ac63dfe1cfdb8be1c7f375483baaac7d1aa371b052b16da8577205862fd3ad3497bffce67660536dbde16f84d159e