highlandin.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1b:ba:34:66:69:d7:d9:26:66:f9:7c:b5:ba:18:70:9f:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=highlandin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:ba:34:66:69:d7:d9:26:66:f9:7c:b5:ba:18:70:9f:0e
Serial Number (int): 270771990185990255048611660549713803910926
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:cc:52:44:66:08:26:4f:00:e1:fe:76:7c:00:0e:6e:c9:a5:db:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:64:cc:40:f6:82:2d:a1:7e:6d:ae:fb:5c:45:a1:f0:0d:84:7b:02
Fingerprint (sha256): 98:55:fe:b6:6c:ec:79:93:d5:1d:35:43:31:3f:5b:74:d0:36:f2:9e:1e:9a:f1:f8:97:93:26:2e:fd:3c:f7:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate highlandin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for highlandin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

highlandin.com

Other certificates including the domain name highlandin.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for highlandin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270771990185990255048611660549713803910926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 21:52:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 21:52:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'highlandin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641430656838912631876967231832275657867684449992158542521615935578387507747541528716451273229838644736172568706705579969786026954267765346907632150486727828265715495035580683036735490054632492993037502782197761125811620487312515964102587079256458637861025579746657467661644093450112009459361999347381431176963195183096639255125100669999091709095101520261661191356286729298004169345086445100735700823812352476762102657636978811495019829767259922607673180796235114074827556367170462155842829027493579552705447636717866012070993831369067591205711439189092911729699813589430555290127845745439886747484808253682690416023946934142690290755311583038406788982566565113904599709367619998517518467281194275485366011673671744837721373770835453506501276087140020736969552448501459210607237500344608060445316961654648588328929191292191017792094013964450355961891075423447931583245920784793763266968683805009972946058102294920406935706288772979318893196290209339322010068914612965193781422420271173254343505536867392765270027652279693084043263260995684281373046856658102081678699622890807126409569665804216735771914913891386503672112186780020889903316077093876856217629218120521948250708011400255644703435511737899210301394458251432389311245460001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02cc52446608264f00e1fe767c000e6ec9a5db20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab9f1854b0000040300473045022100c30fe6861f43f3202a67bb07319df06716c1c968dc835b7ce09451c2475fd61302201746dca40c43937d6a387b5ca8bba393b3beef88dbe89ec7006a606d7420abce007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab9f185b40000040300473045022100a2760e5c9b15dd0ef99736603394eaa5503b67e1a8db565d82046e799dcb63d1022000cd9aafcb0e86652b21da8c69255389149b73608126be02b39daa27957418bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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