www.sahara.is

Issued by R3

About this certificate

This digital certificate with serial number 03:62:c3:8b:47:e9:69:9d:be:69:84:32:cd:89:96:bb:47:d2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sahara.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:c3:8b:47:e9:69:9d:be:69:84:32:cd:89:96:bb:47:d2
Serial Number (int): 294944452400518034647212195415327571134418
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:0e:11:68:f7:52:92:8a:a6:87:ab:8c:ab:c0:d9:26:37:ef:c5:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:6f:0c:d2:6c:fe:79:df:d7:20:16:6c:88:b2:92:73:e5:d9:17:31
Fingerprint (sha256): d5:31:c6:bf:ca:a5:38:9b:cd:18:dd:de:e4:ff:ec:fb:6a:f0:06:42:d3:d5:be:62:a0:47:ef:20:9d:fa:01:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sahara.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sahara.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sahara.is
www.sahara.is

Other certificates including the domain name sahara.is

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sahara.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294944452400518034647212195415327571134418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 07:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 07:13:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sahara.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846113625738385006234565341826722670057960108985534109434126096752347549507728532400628918580089602106588467362410561172705101009605625292339487305826257857519491232052635886004249535910065477478492440545484738976314733584449326376787050474390889379848725173137260103153055502373510730523354686112106964343808280050854141206816188859481188632779547693875250172260832309254083241958662702206612364443263053370149836055400716671588283835222215710468688892960658428538634950974008906590687261529581677485658606590287725775901061382782723420226046027554556169390965336664762033314179524987946746797765757642272013819452252584082367620954653080537104803721621859355741289685788080254506261612295042544291088487243988331313475705535112727469694181111177494832622392708595586399542336786153938570677783708608997108056261812939721098496350611715478389783984524334865294295710618193124256109529311723507794479249639502899014783423755583560545319865512967904553384253282630687843617725204649422789920342663232229289205603756524323193855675057635974673243965847495133541122368280288031497571669503676854332064852226101100895687866031824163349826200291968399792432290229454292403810336334666699863860529722667887846589108565821006971171588214961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							040e1168f752928aa687ab8cabc0d92637efc5c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahara.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sahara.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189f84211440000040300473045022074d7a5486efd01c9f107d44f92daa4defa6c2d573810ef33a51d3648a06f4d06022100bb366fa32929f90e3cc8c71bf6e9928d4f1ca0d4fedf3e830ff93ef48deea3d2007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189f84211410000040300473045022100daa95cdb7acb0d4ac55c2220070e7bbd4e506b4aa5b3ef5fabac231689ff1fc402206363e02c3a7274e86ac55404a5a18900b7a21beab34ede3b19e3c8b6634cab29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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