holdur.is

Issued by R3

About this certificate

This digital certificate with serial number 03:46:e2:c1:cb:b0:7d:ff:b0:bc:52:e6:cd:a7:aa:14:0f:60 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:e2:c1:cb:b0:7d:ff:b0:bc:52:e6:cd:a7:aa:14:0f:60
Serial Number (int): 285458035251399821472038239710013256109920
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:e0:a5:e1:f9:40:4c:f3:4d:af:53:38:e7:24:d3:b9:d0:21:63:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 75:bc:d0:86:33:57:8e:1e:af:b8:0f:6d:df:52:5e:6a:79:3b:fb:12
Fingerprint (sha256): 62:ce:7a:82:8e:5c:cd:9e:56:6e:a1:5d:a1:8d:a9:dc:20:ed:b3:6a:a9:99:3d:e4:0e:f2:fa:50:78:95:bf:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holdur.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdur.is
www.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)
holdur.is
holdur.is
bilar.holdur.is
holdur.is
holdur.is
innri.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
nav.holdur.is
nav.holdur.is
webmail.holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
rentway.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
innri.holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
holdur.is
bilar.holdur.is
www.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
innri.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is
holdur.is
bilar.holdur.is
nav.holdur.is
holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
www.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
bilar.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
webmail.holdur.is
webmail.holdur.is
bilar.holdur.is
bilar.holdur.is
innri.holdur.is
rentway.holdur.is
innri.holdur.is
bilar.holdur.is
bilar.holdur.is
www.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is

Certificate

The complete raw certificate details for holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285458035251399821472038239710013256109920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 02:58:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 02:58:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729050524040639798212945060986182562556461899587493972081822021532087581272601928609976684811179974900653293288656344348689998657087432838190308625205410526287981072131935197131020119769202150516282366565253079870337709059130272257782158168819642221677706107955685419294512120844752173923759865748757388772377849770757073202811922547049093686239216323053272249614054564381703049176257668715002881892048166490437681813212076505089903421782217319005577456977404909514504815396770522156329019081432542400484484790831073724510992958403390187838072005454414881246698904482990100470443894048528105714286458434071165520319283413608804678785249543185531871977272572934883027595830487563637272008144375079227794282227482885152807245170550794526508074842684777154681498474653508148313331397468561556750167964526344236864499751090590748954479672082994984317829612104543014521679718326043139148060333800252362595672775853222042462052344244597987378569300103811284831551690817169205639669116486791476719967732279961103152342373198393694581355493922722506744633875587231513878872997559947962230653836944774654818867033904454145368175469302294773760469747236367498553959672699273935395910550142051141221894613612782658611012956306024255981305612209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fe0a5e1f9404cf34daf5338e724d3b9d0216330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001862a06a55e0000040300473045022047d0062b82579164d686c7a041d01ffb8bdb29b40437a145bc4a43eaa0dc545a022100ae61cbef46792a2d6af2217e2af8c2c66a2c5e8f6f376fff147095616b4a4d75007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001862a06a558000004030047304502206a0a1a216df192c4f188d388ce9a71356fcdf65525e191d17d492ca5b978f976022100dd7d28b659666851b16d388544113240fe3dde23d82c0d4fb38a015a553aea9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004904f642fa53630d82c90918c05ad8e275501a0280404310a006eb1dcb38f67385cf7c114113ead9ea4f66cc5b062b63636c8fa3ced88c66c2e1a243b1de3e9366da87b3dd340d5ad5c14507dcaaa2ed0df0aec4fe4d2003f970a50b4a3014daa426d7d3f9b09cd6dff3f84d10fdebbdbc00a7ef71ea56e4ca4823cfb77d753a1c1fad55553698756c253bd2af81dfdb4a47e25254762a68c7f66bff6e4b2517a67baec95269737e895fb023e0ecc56be86a70ada16d3eda4b844a77726d84789893af6d070108c9b3b45346d04173fc4ab7aa920969367ab3ef12249131fa0507e37ba76c67bdce5cc86fcee898e7ead9c5c1a16d5b6cb82bf79a74f82aa8f8