carcodereader.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b7:6b:bf:56:3e:d2:cd:fb:4b:86:12:ff:2f:be:40:4a:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=carcodereader.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:6b:bf:56:3e:d2:cd:fb:4b:86:12:ff:2f:be:40:4a:30
Serial Number (int): 323751751815326057762637711272077149882928
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:88:0a:c2:95:64:94:fa:25:ef:63:ba:d3:36:6e:f3:70:e9:a5:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:25:cf:b8:c2:44:11:e7:ed:92:07:45:c6:cf:21:7b:31:91:af:33
Fingerprint (sha256): 9f:95:17:9f:67:f6:1e:e9:91:70:07:1c:b8:9b:c4:f2:32:dc:81:e1:49:07:2e:06:84:bb:65:01:ec:ad:5d:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate carcodereader.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carcodereader.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carcodereader.com

Other certificates including the domain name carcodereader.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for carcodereader.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323751751815326057762637711272077149882928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 10:15:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 10:15:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carcodereader.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971578193077967428758281586414137681225348977987157224633670271067150282875320942542042488310779792326775964897820882611352492684455032085566409609725109678670403983462140741644560331124848084986082768924366912839277906933352414962503146155776942176464347132218486859180560941446737118201466751332598344002143482711208255287791629997559334106987997897028821771661536982204470766279349548746812324919849907426114491334833635347858751951866926020163030363814921180719624567454495887525622005162495165938076290727879829931835807430940075639982636317565562817192513481652727772791370021942537737594823002263586141498598486163239601413970496572541983224286516073704183167370482051787640657260092353707002623491229375544282095796315733068449902896736803030031189475099540016661276654718929370552576433928955207957959422313546838815303666133733558592859749430410124193764678514967291339751652279203652696018789574761953817144647527242287644874254969138837210012107158725534273951391234699975909095941051328671368033456065719265241681248867566754835941034022072840397238097567688645311512521228655407663955536477238952461957571457892420409586471711766120721885686714346909951556133778583472985076103232152489379077075071552322257272239518273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de880ac2956494fa25ef63bad3366ef370e9a511
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcodereader.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac1c06346000004030046304402204d28d2842f442f84b92bdddbd7e7498765681de4bd14f802e972176475860853022072fa5a3614b7ffc99904416ece265dcdef65de79fe5122f01e48783d4b7ed40d007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac1c0633300000403004630440220029d84b9ebec607c9d8e996f9634dd32b039bb67213f1ad61e1a2c2cbcfcb73502200e931759bdca3b30f043a7aa29905ace16c0de44e063ef17c63a5176ef813909
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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