htk.org

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:78:8b:e1:d2:a8:5c:39:13:09:ee:2d:4b:74:c1:76:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=htk.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:78:8b:e1:d2:a8:5c:39:13:09:ee:2d:4b:74:c1:76:a0
Serial Number (int): 368345754677445123635132987847765374629536
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 58:9f:0a:3d:1d:fa:01:45:49:4d:74:98:1c:d8:36:47:13:e5:56:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:82:e7:8a:15:60:05:fd:c9:21:9d:41:46:9e:d1:41:60:2f:bf:ad
Fingerprint (sha256): d9:60:70:01:e9:a7:bb:27:17:c5:bc:c6:20:9c:31:f3:b2:de:75:d8:9f:e1:09:77:d5:67:30:30:50:ba:d5:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate htk.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for htk.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

htk.org

Other certificates including the domain name htk.org

(limited to 100 certificates)
37.vc
547.me
htk.org
htk.org
htk.org
greennewdeal.world
123notary.de
htk.org
www.htk.org
htk.org
www.htk.org
www.htk.org
htk.org
htk.org
htk.org
www.htk.org
htk.org
www.htk.org

Certificate

The complete raw certificate details for htk.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368345754677445123635132987847765374629536
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 20:32:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 20:32:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'htk.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 900172877668227410070805879019101872486244268007666196040323104276022347958409633516999687215998981535458346403953738494020395450607160605912249544807151023079358567969677034395023542066566886321711220143405014939828167778183976737292143787356287544793924195955739384951123306286996680052287322064497513132694588779162191079371182164370777814140998249952090574309768339833332802300626953571717669114816256367415760200820630659806317197827249099409075203123468559411785050080862876623786148962426473323652768851527778019133674499794552020337750903522335672143871304265930716968871217440505026432230472625483266179126140471514571264207187366605761576644394439595438002168944643063381592955369005463832321803001842474194383262018335173044327017974901274002001701368116902829087687413220637613886596780859140532341554610506189258045158455161315656981451806856960678763733789781913038661092330556200668979697910905835625224890985535225423066266211243572031452747691510147073353862166322613198574757137002610606341540219100671545949112453702697421640893215776366018751676677319067851480806558677366390344030106223989849932080836807228005729856863057394464602130750974564992729114751543869028452089951349977006750936333635620309924153493769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							589f0a3d1dfa0145494d74981cd8364713e55609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htk.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c65181c1e000004030047304502201f61047c623ba870d3f335fb205c8f129d52472e099bda3a6123672024779a14022100938c6109dd0742a1f70c8d3928ae6bdad79451ef9b86c231daf573464bd8ac6d00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c65181c99000004030046304402203de62702be1b171c6e56c7e11158a81a91f312fabed5bdfae63d29f8d4589e3e022038d42dece726045447fc41ad9813cc6c3c6312f454ce5199da86fb627feb8043
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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