highlandin.com
Issued by R3
About this certificate
This digital certificate with serial number 03:1b:ba:34:66:69:d7:d9:26:66:f9:7c:b5:ba:18:70:9f:0e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=highlandin.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:ba:34:66:69:d7:d9:26:66:f9:7c:b5:ba:18:70:9f:0eSerial Number (int): 270771990185990255048611660549713803910926
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 02:cc:52:44:66:08:26:4f:00:e1:fe:76:7c:00:0e:6e:c9:a5:db:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 16:64:cc:40:f6:82:2d:a1:7e:6d:ae:fb:5c:45:a1:f0:0d:84:7b:02
Fingerprint (sha256): 98:55:fe:b6:6c:ec:79:93:d5:1d:35:43:31:3f:5b:74:d0:36:f2:9e:1e:9a:f1:f8:97:93:26:2e:fd:3c:f7:7d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate highlandin.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for highlandin.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
highlandin.com
Other certificates including the domain name highlandin.com
(limited to 100 certificates)
nutritionphysicians.com
www.westernstatesbiopharm.com
www.greenvillepaversealing.com
kutomba.com
www.axebe.com
corianderoil.com
gettingdivorce.com
www.a5envelope.com
www.chemwarehouse.com
traceyleelorenson.com
nosenada.com
highlandin.com
www.mississippistemcellclinics.com
www.kapchem.com
mississippistemcellclinics.com
gityaf.com
highlandin.com
northcarolinaprp.com
www.westernstatesbiopharm.com
eiixkd.top
www.mannir.com
christmaslightshuntington.com
www.westernstatesbiopharm.com
www.greenvillepaversealing.com
kutomba.com
www.axebe.com
corianderoil.com
gettingdivorce.com
www.a5envelope.com
www.chemwarehouse.com
traceyleelorenson.com
nosenada.com
highlandin.com
www.mississippistemcellclinics.com
www.kapchem.com
mississippistemcellclinics.com
gityaf.com
highlandin.com
northcarolinaprp.com
www.westernstatesbiopharm.com
eiixkd.top
www.mannir.com
christmaslightshuntington.com
Certificate
The complete raw certificate details for highlandin.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAxu6NGZp19kmZvl8tboYcJ8OMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjEyMTUyMDdaFw0yMzEyMjAyMTUyMDZaMBkxFzAVBgNVBAMT DmhpZ2hsYW5kaW4uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA nTokC3Qsw+za1R1pmJFpve3gvSOO8EymB0WusoPtqhP8wPIvCrgsdhMehy2TnfBD Y91Bwwy7bh49uXWyvMGtqdhePk8nRAXdwTGfPyC0hg5n8q1+Tg48jj1HWAJOKyqk BYjhJMMuz+fMA8Pd2tyZqjpB19GnbdwBQBGKkfVUpCSTMiDhLTe5TkjoAmrlRr5S fB0uoiZA1t9lnuvawaODHt/hAberpmvvCKfzC5kFs7NDnhuZAnK2rLVWcldI5Z1C ddJnTZYm3YcCLA7snGcbM3dSLvTGDzS0JprkLEZnNObUAtvR1CpRycCnMuOLM9j1 hmHrARYzRvO49F2rT1hrjW+q6mDEiwPCvqDc7OCve/k9omvbGRr2S6Wr/0TkKu/Q piLYc7zzX/hnJamRi72L5jUAdOfLUMQTeZSuTM2woUS6Xbp7znVnk+sFncgFhlHv hnCcsH08Z/EgxnKlqRUfRfIrfv49UI4ejnJFiX2ooR0TTnwJr0fcrn+H6IQiUTKL MsM0H4OuBKRMzfy5TLGtm+oaGO16tu1qSZqJQL1Rx+wLOe13jNVa9cb95He8G+fZ Mmbgg1+57+Xissj8wUtQzZUAMsYKkrn1+UgDCwnkb2fE2DgoTgfjf+yo5Ak4yA3f snS7AAHfcz2yv3xmXpdshvP1WHYZ3Iy6JmycHCDCIiECAwEAAaOCAhAwggIMMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUAsxSRGYIJk8A4f52fAAObsml2yAwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wGQYDVR0RBBIwEIIOaGlnaGxhbmRpbi5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB6MoxU 2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYq58YVLAAAEAwBHMEUCIQDD D+aGH0PzICpnuwcxnfBnFsHJaNyDW3zglFHCR1/WEwIgF0bcpAxDk31qOHtcqLuj k7O+74jb6J7HAGpgbXQgq84AdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9 bQa9bgAAAYq58YW0AAAEAwBHMEUCIQCidg5cmxXdDvmXNmAzlOqlUDtn4ajbVl2C BG55nctj0QIgAM2ar8sOhmUrIdqMaSVTiRSbc2CBJr4Cs52qJ5V0GLswDQYJKoZI hvcNAQELBQADggEBADgCsuS1WcpUEpDmnr4kxShoIVhcOGSEa/c0qzdJKu6Nq4EN QA2hEslfPTa2H8jZvQxXfQccCza0r2S9OnfL8d6KNh/Ni5vfkyQhD02EZRkWz8wJ 2VGzZjucAILm54uWpdnmNiGBTcMfhpIqWrO3mA8kac0jFb5mHYig3qGHR1iZ3m1d eI/7VFVcsiJCKy9ZpQfJS33A2+qYC4QnHRFZubLVlVCqIm+a8yazZciE0jh7EgQZ mZTHfmzIDBu4gKNKtz9cjo0Qtzec8qUk7bAivXjMsyAgbzAtYmhKV2Dl1L289qvn Lg5/Zt/PttP/YB9OdcbsHERz6J2wjiKhAET6M/8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnTokC3Qsw+za1R1pmJFp ve3gvSOO8EymB0WusoPtqhP8wPIvCrgsdhMehy2TnfBDY91Bwwy7bh49uXWyvMGt qdhePk8nRAXdwTGfPyC0hg5n8q1+Tg48jj1HWAJOKyqkBYjhJMMuz+fMA8Pd2tyZ qjpB19GnbdwBQBGKkfVUpCSTMiDhLTe5TkjoAmrlRr5SfB0uoiZA1t9lnuvawaOD Ht/hAberpmvvCKfzC5kFs7NDnhuZAnK2rLVWcldI5Z1CddJnTZYm3YcCLA7snGcb M3dSLvTGDzS0JprkLEZnNObUAtvR1CpRycCnMuOLM9j1hmHrARYzRvO49F2rT1hr jW+q6mDEiwPCvqDc7OCve/k9omvbGRr2S6Wr/0TkKu/QpiLYc7zzX/hnJamRi72L 5jUAdOfLUMQTeZSuTM2woUS6Xbp7znVnk+sFncgFhlHvhnCcsH08Z/EgxnKlqRUf RfIrfv49UI4ejnJFiX2ooR0TTnwJr0fcrn+H6IQiUTKLMsM0H4OuBKRMzfy5TLGt m+oaGO16tu1qSZqJQL1Rx+wLOe13jNVa9cb95He8G+fZMmbgg1+57+Xissj8wUtQ zZUAMsYKkrn1+UgDCwnkb2fE2DgoTgfjf+yo5Ak4yA3fsnS7AAHfcz2yv3xmXpds hvP1WHYZ3Iy6JmycHCDCIiECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270771990185990255048611660549713803910926 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 21:52:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 21:52:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'highlandin.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641430656838912631876967231832275657867684449992158542521615935578387507747541528716451273229838644736172568706705579969786026954267765346907632150486727828265715495035580683036735490054632492993037502782197761125811620487312515964102587079256458637861025579746657467661644093450112009459361999347381431176963195183096639255125100669999091709095101520261661191356286729298004169345086445100735700823812352476762102657636978811495019829767259922607673180796235114074827556367170462155842829027493579552705447636717866012070993831369067591205711439189092911729699813589430555290127845745439886747484808253682690416023946934142690290755311583038406788982566565113904599709367619998517518467281194275485366011673671744837721373770835453506501276087140020736969552448501459210607237500344608060445316961654648588328929191292191017792094013964450355961891075423447931583245920784793763266968683805009972946058102294920406935706288772979318893196290209339322010068914612965193781422420271173254343505536867392765270027652279693084043263260995684281373046856658102081678699622890807126409569665804216735771914913891386503672112186780020889903316077093876856217629218120521948250708011400255644703435511737899210301394458251432389311245460001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 02cc52446608264f00e1fe767c000e6ec9a5db20 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandin.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab9f1854b0000040300473045022100c30fe6861f43f3202a67bb07319df06716c1c968dc835b7ce09451c2475fd61302201746dca40c43937d6a387b5ca8bba393b3beef88dbe89ec7006a606d7420abce007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab9f185b40000040300473045022100a2760e5c9b15dd0ef99736603394eaa5503b67e1a8db565d82046e799dcb63d1022000cd9aafcb0e86652b21da8c69255389149b73608126be02b39daa27957418bb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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