sofea.jmsc.hku.hk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d7:91:43:e9:fb:26:80:54:50:98:36:d3:fc:60:90:55:bc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sofea.jmsc.hku.hk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:91:43:e9:fb:26:80:54:50:98:36:d3:fc:60:90:55:bc
Serial Number (int): 421802943304020712879106473749760881743292
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 45:e6:0c:71:ac:c7:6b:c0:de:ed:31:4a:30:62:96:a1:ba:15:5e:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:a0:30:57:bf:9d:bf:79:21:dc:11:c3:d7:e6:a0:82:f4:c2:e0:d2
Fingerprint (sha256): 00:3f:d5:5d:0b:7b:5d:a0:c7:2e:e0:8c:90:40:2b:f1:d0:75:ff:b8:22:6b:69:da:be:47:b9:ad:32:3d:27:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sofea.jmsc.hku.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sofea.jmsc.hku.hk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sofea.jmsc.hku.hk

Other certificates including the domain name hku.hk

(limited to 100 certificates)
icmpe.hku.hk
tt.med.hku.hk
www.smarter.hku.hk
matpp.hku.hk
french.hku.hk
onlinesurvey.cetl.hku.hk
hkumockup7.its.hku.hk
itsvpn.hku.hk
apps.saas.hku.hk
mail02.tto.hku.hk
sofea.jmsc.hku.hk
www.oncology.hku.hk
www.hkuspace.hku.hk
swire.hku.hk
kl.biosch.hku.hk
www.bocsoc.hkusu.hku.hk
www.upo.hkusu.hku.hk
rc.ortho.hku.hk
www.shhorms.hku.hk
hkumockup.its.hku.hk
cbh.hku.hk
cms.its.hku.hk
hkupop.hku.hk
*.edu.hku.hk
www.ctc.hku.hk
www.lacrosse.hkusu.hku.hk
community.cs.hku.hk
paed.hku.hk
sis-eportal.hku.hk
www.eti.hku.hk
talent.hku.hk
www.mathsoc.hkusu.hku.hk
www.biosch.hku.hk
www.radiology.hku.hk
gradhse.hku.hk
sctc.nursing.hku.hk
www.icahkusu.hkusu.hku.hk
www.hkuspace.hku.hk
bohr.physics.hku.hk
hkumockup6.its.hku.hk
www.summerals.hku.hk
www.cetl.hku.hk
shs.history.hku.hk
sis-eportal.hku.hk
www.sustainability.hku.hk
qlikprod.hku.hk
hkumockup4.its.hku.hk
www.lingsoc.hkusu.hku.hk
antibody.hku.hk
clc.hku.hk
diastemas.edu.hku.hk
www.sass.hkusu.hku.hk
asiaglobalinstitute.hku.hk
aprmay97.sph.hku.hk
meetingofminds.hku.hk
ug.hku.hk
www.cchkusu.hkusu.hku.hk
hkufeo2.hku.hk
hkumockup20.its.hku.hk
infoday.hku.hk
www.sportsoc.hkusu.hku.hk
ediblespaces.hku.hk
app04.teli.hku.hk
newgrads.alumni.hku.hk
web.cetl.hku.hk
fintechindex.hku.hk
www.ppaa.hkusu.hku.hk
hkumockup11.its.hku.hk
stickers.uvision.hku.hk
www.ramblers.hkusu.hku.hk
panda.sph.hku.hk
role.hku.hk
hkumockup22.its.hku.hk
oyphku.hku.hk
login.alumni.hku.hk
stickers.uvision.hku.hk
*.atlab.hku.hk
easytraining.psychiatry.hku.hk
gingerbread.uvision.hku.hk
blink.psychiatry.hku.hk
amr.hku.hk
eim.cse.hku.hk
www.edusoc.hkusu.hku.hk
foaintranet.ad.arch.hku.hk
learning.hku.hk
www2.jmsc.hku.hk
finearts.hku.hk
pchiu.chemistry.hku.hk
www.buddhistlibsearch.hku.hk
hkumockup6.its.hku.hk
hku-utokyo-summer.hku.hk
www2.cetl.hku.hk
bpyloo.hku.hk
hkumockup14.its.hku.hk
hkumockup29.its.hku.hk
ihss.hku.hk
campus.ageing.hku.hk
fintechindex.hku.hk
apps.edu.hku.hk
matpp.hku.hk

Certificate

The complete raw certificate details for sofea.jmsc.hku.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421802943304020712879106473749760881743292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 02:22:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 02:22:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sofea.jmsc.hku.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5131360068877768038445333192505274520570913220674858064084414400285184260042424440062540528693627939425700260649987956658572006126213912521440822685662358176818234631741353472241472897112420208497990097443242860224517987084510578536746946832705929896575631371797238117132365104850048430093554389558851665692199766335118888409446325677188773976455675286728859708206912626167857113014780429105177807694766590612770911051345315722595308780175799505254843678122069781377429678630292801362256096714796353329851780638544142413312422336196251949470054714948749666236795106162551879311214371999644337118697503381890694190354827249331228580341032053616355295694779775615319117294386117816468283102893865276934753439824712427340260733355401544918631034599744581748347588929522498920572249640311074646281434056483001492232394152640342847065320745138087286928723676280739744808865649688202748723584103127372879898715846837971374008692819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45e60c71acc76bc0deed314a306296a1ba155e2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofea.jmsc.hku.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e723ba12b0000040300483046022100ad2ecd0ef915dd3a4864029d38577e7500ee6df7db62f872fe0422cd9802fc92022100deb36ef955da9b03624ecdb2e12b11eba62a2074806e9735303549e3335611b8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e723ba1260000040300473045022100eebabcaf50cfec51c18462f8df9b90cb93ae2a4ef660b903e073d81c507286c6022064dbadf1df1aa79db6da727f5c4b9309d11e10aee607593aba35124a6ec9a2ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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