holdur.is

Issued by R3

About this certificate

This digital certificate with serial number 03:7e:cb:30:72:ab:03:0b:b5:a0:7a:3b:22:fe:6d:8d:70:41 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holdur.is

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:cb:30:72:ab:03:0b:b5:a0:7a:3b:22:fe:6d:8d:70:41
Serial Number (int): 304482520866456187147334271318842971877441
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:55:4e:24:fd:6c:af:d7:45:75:68:f1:6e:18:39:38:a4:c6:c8:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:66:54:98:09:5b:ca:c5:47:d1:d5:8e:9b:9a:e0:67:8a:85:0f:7e
Fingerprint (sha256): fb:e9:84:8a:4b:28:3a:87:a1:a8:1c:a5:eb:c2:e8:7f:0c:21:19:ab:e8:95:41:dc:26:52:b3:4b:75:3c:b8:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holdur.is

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdur.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdur.is
www.holdur.is

Other certificates including the domain name holdur.is

(limited to 100 certificates)
holdur.is
holdur.is
bilar.holdur.is
holdur.is
holdur.is
innri.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
nav.holdur.is
nav.holdur.is
webmail.holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
rentway.holdur.is
holdur.is
bilar.holdur.is
rentway.holdur.is
holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
innri.holdur.is
holdur.is
innri.holdur.is
nav.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
holdur.is
bilar.holdur.is
www.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
www.holdur.is
innri.holdur.is
bilar.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is
holdur.is
bilar.holdur.is
nav.holdur.is
holdur.is
www.holdur.is
bilar.holdur.is
holdur.is
www.holdur.is
holdur.is
bilar.holdur.is
innri.holdur.is
bilar.holdur.is
webmail.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
webmail.holdur.is
webmail.holdur.is
bilar.holdur.is
bilar.holdur.is
innri.holdur.is
rentway.holdur.is
innri.holdur.is
bilar.holdur.is
bilar.holdur.is
www.holdur.is
innri.holdur.is
innri.holdur.is
innri.holdur.is
holdur.is
holdur.is
nav.holdur.is

Certificate

The complete raw certificate details for holdur.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304482520866456187147334271318842971877441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-06 03:01:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 03:01:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdur.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854570929307240982770908110839444507746551510910527123857250010617312074507354304229923850449109881868338815467118744870281120271879134059793744927940628969544966529439518239573298102787997511119920373302701464330901370649370576487067242965473811250885444452766210159592973970100108010219401567307949454543372141723469521485321040379817885457556177930681157192529828748751712217246123770532321737980024743057793046973627791559741735650843503460036138774973009974789521532732106184488715604529965747310277437016276767525065353544640529470334952366457069404836785216739712090673136467998207435949076551289670884970111545746394251579635785194373444253908116922552648696890673995197826728452441681490075283912365401192697393793780433629403110869440199409722129277276377266289663094263889382013007865193376948201071098515582155625692946681532747592891238777335281281711790922941890989497469906445412010873665831203389642996934889152441457439972840338386792407548190677884177369103407671362641679062140479626097948967698226110496898754683739498005431480336466752325776346135405697540728509647761773430160717498282602306540708261169749022369072467942904119567023149404369514285947000070362446628992943792325840720199854378571209919771676401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07554e24fd6cafd7457568f16e183938a4c6c875
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdur.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189c901db3000000403004730450220770e267304d5e4e09208689238779f17ba1989ab308688349b345d4b68ca1657022100bef20431fda3bf279b069893553272150d86eb8a3f48586f7392de198ad71213007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189c901db5f00000403004830460221008be4602698fdb1038142c407d54220a711b62d5920ff5fb3eadc3aa6356f7b8c022100e527b6b7349711f4c2793a15a5ae96ff87bc5e9489b06f544d11debca28aae79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b7d3e0dbbf875afe1a9742a77eefd860db8f995d4eb029260b43c2f331e12449418a4c9f20f22e73c010177dd9279e2eeae68042a96c65ff0a4839492024bd7d2adef637bd7db47319a59095c530f3799795f9539155091fcf7fc56bbb62c7b666943bd8f905d0feb17ec8e60c3d758be7a1c664e13b52bb120bf714e1a3761146ecadfb18a85141ac4cc74b9468c5f177583a2158bdddd4684209dafb55f777469e16a252a2e64f9e3fd06db72e375a0a4d338edb5ac872c91050f1dd549a2e9d7c3e598ba1421a67c7ab4b7574413740479c3adcb06435a139f79f02e88b0f12b5d21038b3bd4a48cdb35609a34da6d4125a0684d06b715a7b52abac07558