external-hard-drives.com

Issued by R3

About this certificate

This digital certificate with serial number 03:83:a9:b3:81:54:b7:c4:61:2a:57:11:56:73:d0:9c:30:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=external-hard-drives.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:a9:b3:81:54:b7:c4:61:2a:57:11:56:73:d0:9c:30:1a
Serial Number (int): 306139419437491884857612248075400627630106
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:14:b9:dd:2d:94:4e:b9:4b:6c:38:a3:d4:4b:00:d4:c4:50:e7:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:05:14:b0:ca:ba:4a:6e:4f:4d:a2:c4:ac:d3:71:7d:fb:fa:ba:04
Fingerprint (sha256): 5a:7b:56:a9:36:33:c6:fe:b2:2d:f9:dc:4d:47:35:89:21:07:43:e2:13:0c:79:85:b3:bf:f1:6e:42:f0:95:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate external-hard-drives.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for external-hard-drives.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

external-hard-drives.com

Other certificates including the domain name external-hard-drives.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for external-hard-drives.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA39zoeUMoXc1OOXCkGLnQ
UMz9H6OwBVr9K/IW4oDVsyCW9JTXFiPaR0kRvPPE3wb4nuHxKRB/UwDSvAXLQOYk
FfmeUkf0zHsQKA4VrMGaGdmtK7xytPhoenjLueN0xT/gM9I69oYda/qBGI3bISBF
3qKaQNIz8ZFm3szxkk3SFgNb6CFvuOqTYjWJZSQuzuPdvPjUkxxgwkEut54uL1Hw
eU1GHhTu4Kz09EVvuATONJV9fY8vZ1KC07JJ3YkAku9kHOsh4yhpjhDTHEtZEFhU
C3Xgf0Md+uPdNWw1w5dBH6P2gVgJo15jh/+Yvs6CRa3BE40P09mj6eE/80E7CauJ
cdC5FlwuQJxMb2R79BGqVgtLAfYqRcWm6axS4jK6HfM8rPO8q0U+VKcR0yS4/pOz
QY6TlaoD8vT/HHFItcED/89oQOJODL7f3CWUbHCAelTAtzhtxkJ6waHKvBf4yyH9
kcoTn7Xv37MudiLNl8fA0AF15G3nB2jtzkDkLdVUzElYABybMMo3MJ+7oHU45nKg
X+v7JBzYUS2y9lNjg/FSq67GwOuKmqxkA5rfU81OTsObUqISumZ+fYIKKzq5mgQV
PHA22F6kB4sN/F2P2GKY2tfqUEil2m4VJF3pendz8kxaFmC7FvZ/RHPvjuWxgu/P
tkLViB335qa44EFT2Je0UE8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306139419437491884857612248075400627630106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 22:02:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 22:02:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'external-hard-drives.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913281042875649802732188280325979992540666127625229849032103510008241014361882384093822627550705942997431930153412707912340810491787483003359645934553832740816396860716880159258882867547562659917415581195306602977519168637025302742256055317958489312014084368754454263268163032552215378967625604238909286164013932823343273675297494649692707600841129125475309895203189466926107430051260550003633524066867080137471968473771370610879559544750188506535076118502657279256463384758784912438529679765919239323490117222381577241326568109699981729106786335886121734347617553914561126257004782026540457090196913582818494898771168846873992582196980319469371776408048401444578811307050258654096148328836848955016445929590459096324844311462423405457370807486520386296505256014471765805846956807427990255223124041216754194627661668451124726855941133027280938970195084879698054219913444932840041229265314871193715598647562324579417330509623666686500741528366720513457089445222725060492053828750046232677436257074835929710819583682451781455389518598070996384354236089584218131355437556156324686959870859050015881322099654231898383383677323913052743568966854438296813699154841878959364408003064386451523901645110544262990629560534329067186355384373327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3514b9dd2d944eb94b6c38a3d44b00d4c450e71d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-hard-drives.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018beef8b0890000040300483046022100cb64e21655c0d59d762836bd3c89b4cea62765f8d5babe1b1ae69a180f0ea7310221008fb64970fa2ccdfd7e1c228b83c610a65d39393773a5cb5279f4c0b7e1b3cad400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018beef8b14e0000040300473045022027f2b47ba43759def213738576537aaa64811c5996d1ccbc20ce74e6d7f67c2c022100c1a1d4131b8a4a4faba33be39c3fafc86401df243b2dd1e011dd3ee314b44827
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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