shawneepottery.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:ea:bd:9a:52:40:69:94:74:f3:e7:e2:a1:d9:ff:8d:23 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shawneepottery.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:ea:bd:9a:52:40:69:94:74:f3:e7:e2:a1:d9:ff:8d:23
Serial Number (int): 328344225536912335142808588313658822462755
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:a8:90:a2:ca:8b:2f:c1:e0:e4:83:6a:9c:27:09:f7:0d:5e:db:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:bd:f1:4d:bd:01:32:70:23:2e:92:6e:11:aa:a9:c7:16:3d:90:02
Fingerprint (sha256): 6a:6c:9f:56:80:f6:2e:bb:a9:e7:e9:4c:ed:be:0f:a1:ab:25:66:7d:82:ce:e5:d0:01:bd:51:b6:8f:41:10:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shawneepottery.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shawneepottery.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shawneepottery.com

Other certificates including the domain name shawneepottery.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for shawneepottery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328344225536912335142808588313658822462755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 02:03:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 02:03:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shawneepottery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834623784023272208739478854819344049809695137585351238446706425202983632229566784736820101340304046486994327238970495970943284453661894798836275385522523484299001876272768970072477188979306976064532081265507634135327049214154192017254639446177367033380506609514354468043669351142540653295518210753133676979930824067397428921824312079382042899067891601578457613364073172020764579620236411415805498267456130245688302365922110542121194272089530543514379075804770438104581380164268784816785374689313279166512128467920287991685363404231238803863830775937472933872668746894163889578091290851554711384584296017675548355126865153624615168319650531264102221645991917608606120644596372410914258440954444742942456035093298671223805553252413916294052970279201567822465829323705018384090572449717836251240278098390193454687570073339141497713886991853684192088389807893502850220161755226815744677029390655842678195031958756236932793750590987163591723028554581122326915553848750784010723079554751865343949031448625981653237136011615157522063892962227490155988151841655097460028560837956930343224975905650577124004491111698924496160335702525115604595782061134485839618566893919295931106954747582708110725972355653139164164127303902177675248101780073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4a890a2ca8b2fc1e0e4836a9c2709f70d5edb90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawneepottery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018beaaedb27000004030047304502203c7290c22b0744411f28b3819292343ed75c96026f01eec4945b6fd05d2d54a8022100cb75144ac394dac7bb0b1ccd2f993aee841ca82531a433ebb62461f27cde3cd8007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018beaaedb6e0000040300483046022100dfb468494746e3a0e77073ba0deba9c25567bb3169c85899f86b1551c357bb68022100cb67ab6dc8bb34dca486bb2c49b3ec8fcc9ef7cc30dd9d1a70399d9efb3a8e72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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