hallpottery.com

Issued by R3

About this certificate

This digital certificate with serial number 03:41:0d:75:13:57:2a:72:f9:ee:06:b7:99:82:c4:a8:2a:11 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hallpottery.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:0d:75:13:57:2a:72:f9:ee:06:b7:99:82:c4:a8:2a:11
Serial Number (int): 283473099500091162522510066885121960061457
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:fd:7a:c2:49:53:55:f9:80:2c:a6:32:c8:e6:9a:67:e9:13:ee:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:01:78:4f:8a:b9:1d:82:b8:48:85:49:eb:78:d9:c4:74:f2:a0:dc
Fingerprint (sha256): d4:a6:5c:01:69:48:18:2a:31:b8:3e:e8:58:91:c5:4d:69:fd:36:db:db:f2:72:9e:a9:df:af:d5:08:70:75:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hallpottery.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hallpottery.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hallpottery.com

Other certificates including the domain name hallpottery.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hallpottery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283473099500091162522510066885121960061457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 06:53:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 06:53:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hallpottery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877633198625873036739172903185365995685602662256436470414904917965732490626670600466321997456266437553278782016272186262708449537261522753948020022837725796038550697154472636558544057415580663605422297910960765603776609585148433734797112154780013849173154534392221077029758598139839083828963049379698566314195748415450455269337629240539287108179561988690197382386342375623434084611382820323215547995519297599718748430814791134779503356106797253894763193543361384993776516962030874113814666691958610933398331098391892087081643883711495268658356692787846228584191075178849832176890613143130539874715019421891572632710350095823042218502006006143421958364583662311229944066693141547823860505482293759159680648095390805479755965105549566740341351584610512716254624954455809780806338400255264766075952860484554845753421221529142290830387168975138815538514322888030147139155945145830089625188119765563941348859366235247837397772040072211447690752637094763243313864870734520438458765355444494112531475649082798901672145589587534118948143768564132999824231191379135725133038617749965611043460504609387055103574509818013062290773129861744175414879656795328097852480204482790513576284681502480769378140373258154447800360997993686829499974627531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8efd7ac2495355f9802ca632c8e69a67e913ee68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallpottery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ac1078edc0000040300483046022100f3314541763120d37a109c75e2ebc856bc78598b742b2bdd70acaebb54e0ebd9022100ac71dc4bd68cd8eb4e63284f879bd9ddd54c4b9542726dfe9bfbf7748a91f8f5007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac1078f360000040300473045022017cc95e4533ec90c1e22998ba7036ee74ddbc9642cfa68ba9a297497e0083ac3022100ab3c75760a4dff3499563616db0d0d3620a1151bac50f684d63cbf7fcf4e9237
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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