finearts.hku.hk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:09:91:c1:19:59:12:dd:ed:98:34:ed:e0:0c:d1:f5:75 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=finearts.hku.hk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:09:91:c1:19:59:12:dd:ed:98:34:ed:e0:0c:d1:f5:75
Serial Number (int): 336892263103248955163796824291260390045045
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:dd:b4:bd:a6:c6:5f:c0:e3:52:64:8c:63:8f:b2:2e:e3:75:24:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:4e:a5:f2:53:dc:64:6e:58:24:6a:5a:00:34:4e:fb:a2:ad:36:ce
Fingerprint (sha256): 02:da:bb:6d:21:d5:50:7f:01:47:d4:ab:83:28:55:19:cb:17:e2:08:2f:60:b4:e8:05:74:1d:9b:ae:30:86:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate finearts.hku.hk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finearts.hku.hk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conference.finearts.hku.hk
finearts.hku.hk

Other certificates including the domain name hku.hk

(limited to 100 certificates)
icmpe.hku.hk
tt.med.hku.hk
www.smarter.hku.hk
matpp.hku.hk
french.hku.hk
onlinesurvey.cetl.hku.hk
hkumockup7.its.hku.hk
itsvpn.hku.hk
apps.saas.hku.hk
mail02.tto.hku.hk
sofea.jmsc.hku.hk
www.oncology.hku.hk
www.hkuspace.hku.hk
swire.hku.hk
kl.biosch.hku.hk
www.bocsoc.hkusu.hku.hk
www.upo.hkusu.hku.hk
rc.ortho.hku.hk
www.shhorms.hku.hk
hkumockup.its.hku.hk
cbh.hku.hk
cms.its.hku.hk
hkupop.hku.hk
*.edu.hku.hk
www.ctc.hku.hk
www.lacrosse.hkusu.hku.hk
community.cs.hku.hk
paed.hku.hk
sis-eportal.hku.hk
www.eti.hku.hk
talent.hku.hk
www.mathsoc.hkusu.hku.hk
www.biosch.hku.hk
www.radiology.hku.hk
gradhse.hku.hk
sctc.nursing.hku.hk
www.icahkusu.hkusu.hku.hk
www.hkuspace.hku.hk
bohr.physics.hku.hk
hkumockup6.its.hku.hk
www.summerals.hku.hk
www.cetl.hku.hk
shs.history.hku.hk
sis-eportal.hku.hk
www.sustainability.hku.hk
qlikprod.hku.hk
hkumockup4.its.hku.hk
www.lingsoc.hkusu.hku.hk
antibody.hku.hk
clc.hku.hk
diastemas.edu.hku.hk
www.sass.hkusu.hku.hk
asiaglobalinstitute.hku.hk
aprmay97.sph.hku.hk
meetingofminds.hku.hk
ug.hku.hk
www.cchkusu.hkusu.hku.hk
hkufeo2.hku.hk
hkumockup20.its.hku.hk
infoday.hku.hk
www.sportsoc.hkusu.hku.hk
ediblespaces.hku.hk
app04.teli.hku.hk
newgrads.alumni.hku.hk
web.cetl.hku.hk
fintechindex.hku.hk
www.ppaa.hkusu.hku.hk
hkumockup11.its.hku.hk
stickers.uvision.hku.hk
www.ramblers.hkusu.hku.hk
panda.sph.hku.hk
role.hku.hk
hkumockup22.its.hku.hk
oyphku.hku.hk
login.alumni.hku.hk
stickers.uvision.hku.hk
*.atlab.hku.hk
easytraining.psychiatry.hku.hk
gingerbread.uvision.hku.hk
blink.psychiatry.hku.hk
amr.hku.hk
eim.cse.hku.hk
www.edusoc.hkusu.hku.hk
foaintranet.ad.arch.hku.hk
learning.hku.hk
www2.jmsc.hku.hk
finearts.hku.hk
pchiu.chemistry.hku.hk
www.buddhistlibsearch.hku.hk
hkumockup6.its.hku.hk
hku-utokyo-summer.hku.hk
www2.cetl.hku.hk
bpyloo.hku.hk
hkumockup14.its.hku.hk
hkumockup29.its.hku.hk
ihss.hku.hk
campus.ageing.hku.hk
fintechindex.hku.hk
apps.edu.hku.hk
matpp.hku.hk

Certificate

The complete raw certificate details for finearts.hku.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336892263103248955163796824291260390045045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 16:02:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 16:02:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finearts.hku.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800885467872305695459826203219917770114247429565575884519685419672883576742620758114131851009805883429252774035684352476368776409913725095548327109579306895653864059154827155829000801949474404062363286751770040711606331124014305820039855845820619910787767919936272411262657006237525906376275705514164212136634955432340471901519271749064500173621557434176510730115743801137574924100402515831514618333612242558569312030277184302333216776551271892002077491480833501176278951857086167550425357573111305266587833946667755011242557838473607932803532814773667809944497295855917367405950797079513255763087913052929619080436298434665170436422782089520912054782343560828852663332817210763983067500917570093312397655381919710580109788428873915407929143166491543188178951398570091375712541064118646385206096401871884731363278760135001452349309258818550490431997147692182835153993008690095209379958514601236668309582591421717214948413197604084630534978358129783130665124196354671748294367793376886616435272492950591056943544790706946610890012708899316166845927458462061819722659230576302427898856433377360845958079735453400443789177973659114447248659806996879878937132423459377234144483311806985756698938371234989725721438501047142142767430896819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38ddb4bda6c65fc0e352648c638fb22ee37524ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.finearts.hku.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finearts.hku.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001679e383d8800000403004730450220061829d8ec17d3ba812bf693cf22b9d69653fb6c11376989f72b36c380c63117022100f109cbdde6b5180a79409d85b5e8ead5b94ddad5e13e43b7e3ae2ed9060c1111007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001679e383b940000040300473045022100c3dc7aff29376bde08357bebaf03432ace103e7a511a85ce78e7b123e958d8bb02202fa3e2e3a054a71320cd6846e729cdf90cb77819105f8ff15b6bb7678c7ae0bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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