hartfordconvention.com

Issued by R3

About this certificate

This digital certificate with serial number 04:64:2d:b5:da:ac:5d:99:e4:ee:e7:25:83:f2:4d:4e:9b:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hartfordconvention.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:2d:b5:da:ac:5d:99:e4:ee:e7:25:83:f2:4d:4e:9b:b4
Serial Number (int): 382538139919898054652102437754796732488628
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:8c:7a:e4:07:b3:4d:e6:95:eb:e2:41:fd:2a:dc:5c:6a:1a:62:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:e7:ea:89:46:7f:30:62:77:cb:df:55:9d:74:5a:2d:e6:50:08:7c
Fingerprint (sha256): b2:c0:38:f2:3f:60:04:63:e2:5b:e2:1b:a2:33:f5:f7:7d:21:ac:0e:fd:dc:e9:90:d5:a8:b7:cf:32:60:4e:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hartfordconvention.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hartfordconvention.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hartfordconvention.com

Other certificates including the domain name hartfordconvention.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hartfordconvention.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382538139919898054652102437754796732488628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 08:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 08:26:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hartfordconvention.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839134159022153799144974003231618481456097955718767167502695365818805387496196765222887029706355108297844652931106256831024602039840115079036277592799063139806029215050670088963367922577077492330681541436208028444374559035075605461928533792291911694770150642212682716257972297093786191234048853111187215439032840274607672220190383106006343218675958268895117543280374267454568558257160590226856031941965535545672940373450231678785266497923650271747710847984896009785725021749086883335935566408070434347395725311075338859251382494022530635712666474892062795449545496959329565538113521766608715735678520860894757416908081258191185683397156940882658182528550460685490968670802014451113298903611060518628237598495925864962555073806575496419893367656527291369548729639037321741898386105463373311664706879747748438605048088347346123137412561859588793853018408265370234009800005923869468274058477595988371685197133829597481376356546374047644913837400697205013347287146369451963124711660384449028820435764958300004846433377661979596292268662593836021050413556129524258045062657111204978881203272201020302504692896444168326263051223731508519829804963746457974291196267431405661384689895236255871388629695746955499562231184128981869552050878617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							858c7ae407b34de695ebe241fd2adc5c6a1a62c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartfordconvention.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d16be031c00000403004630440220423718bde7442f3a75d24f72883dd666790dc73228d47b06b52b5ef01e0868c602205a3b76bc5d3a3b896090f1d9dd92bfb4d3aeaced73cfcb40c2306db03b79dbd1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d16be0323000004030047304502203384b9145c0668c88964b13132ff8a881526d34e5fceeeca5ac28e3dcd356f38022100983e258a9e5c2f1f5bc3263b8cc6ddeaa72f4f5a8eaa9b36d744b1b507f62c23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a7a147a67d7c292e7b09d269cda5eccab4f8e8f5e483b9470bc58c22631f508a0505b1a78bc5f967e7bc74264968cdb579a991c9560e9b028259c73bbd9106c134747184509daa8fd6dbd3737478beaf7d2a94f04a528014846b93723e3dd59f101ff33ada79f930dbc955747390118d899e2be8347745b1ae68381707c71c4a0253ceb0dd871d4c71ab2fbe2a261231294f1a11ed3d559f3415cc5502d5aa088dc2fb173ea3b9f19fc833e21ba6801205ab200c159a33ece2be6f6f3f9928d786a9f3eaf9001292134e99f0415f493aef2e3579487006b2a93e0ff17eb68eed5dd8aed65db46d3d6358f9574cb36c2a4b881a4a009d29610316512702ac6af