portland.us

Issued by R3

About this certificate

This digital certificate with serial number 04:7b:7c:be:b7:c0:c1:b5:a9:8b:9f:c6:df:a1:18:7b:a3:a1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portland.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:7c:be:b7:c0:c1:b5:a9:8b:9f:c6:df:a1:18:7b:a3:a1
Serial Number (int): 390469689393149583672099024007063462978465
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:1f:f0:d4:f3:03:74:7f:a5:dc:67:22:c4:c5:2c:8e:ea:27:85:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f1:0a:03:c2:da:4f:e0:57:fb:36:18:61:f6:d7:c8:e7:5d:dd:1f:30
Fingerprint (sha256): d4:30:2b:6d:b7:24:d5:85:91:88:a8:b8:62:dc:3d:eb:93:fa:91:07:48:03:f8:48:10:35:01:49:64:e7:a3:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate portland.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portland.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portland.us
www.portland.us

Other certificates including the domain name portland.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for portland.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390469689393149583672099024007063462978465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 03:01:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 03:01:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portland.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907737848830526379930291172564567094067223231944819088387642705147732779354357443743150588467276340835336954664052519253097477585045756029974809071383464818215724556667495134212504796652493640523296814081020993832960703383647346484414315933470739164603244019411471587166485874314638800307685922553333672456958678528671265737175699478388232483343011686521298708619379957574228388561646200668730000708526214546342684452713687259090306122534906125520891181491602330259049979434437149606313122794647924046353616542647102815083846102270561603434997134415373821441413386996130246359924628128455077461670969489506409751237162486505833333228801868756416575096916053234500392798460614211268187457730798858816737150482716921789295665615956615183426244906946890841585638206587104323662596639019600197688171170098639963066624506814587326586944683351300672322836801179819200249230192673690021870452008624897385162026659174228127916401824252054824800661467077904550176058406446941470528711471146025726183278434864274239820995709163438999064860025839448215269985115515238502622273599450909158575765264276752834839774664091436176650516921514117613037784181766531160014717530563153660919624864242533071194523901328874738609538553045087232394015879881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f1ff0d4f303747fa5dc6722c4c52c8eea27855f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portland.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portland.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e4fb8de3e0000040300473045022100b3a79df61439855fad30e0e2fe36fcae0dc0227c4f821dee7204d14b8799b73b022015c75febcda80cebdac79cdc0ae225e7e9493b0e4c3568f5913fb99afa483fae00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4fb8e0030000040300473045022100f6390a0230d782d23f70baec5592bafbbcb6369dcb9387ad2e9e2d648df36d370220090ff86ad82aa5249c838b14c94d4208747fef1d64df29ddb8aaf8b7ada4d5b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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