hongminhsg.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:66:54:ec:64:b0:63:04:ab:10:dd:07:50:6f:d3:75:dd was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hongminhsg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:66:54:ec:64:b0:63:04:ab:10:dd:07:50:6f:d3:75:dd
Serial Number (int): 305709587698134990315317809050457088423389
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:40:d7:d8:93:40:df:ab:f4:ad:3d:2e:50:db:36:9c:d9:b7:65:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:ca:b2:7e:59:49:79:1d:c2:54:a5:74:e4:a4:ea:aa:9d:3c:66:0f
Fingerprint (sha256): 0f:ae:fb:84:db:69:fc:32:10:8e:fb:5c:d6:6b:d5:46:29:e1:e1:65:da:57:cf:0a:6f:48:ea:b4:2e:ca:ef:e5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hongminhsg.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hongminhsg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.hongminhsg.com
cpanel.hongminhsg.com
hongminhsg.com
mail.hongminhsg.com
webdisk.hongminhsg.com
webmail.hongminhsg.com
www.hongminhsg.com

Other certificates including the domain name hongminhsg.com

(limited to 100 certificates)
hongminh.com.sg
skykingvn.com
caohavietlaw.com
hongminh.com.sg
hongminhsg.com
hongminhsg.com
caohavietlaw.com
tnncsg.hongminhsg.com
caohavietlaw.com
lhp12a2.hongminhsg.com
tnncsg.hongminhsg.com
caohavietlaw.com
salontd.com
hongminh.com.sg
tokutokuya.sg
tnncpte.hongminhsg.com
cozy-sundays.com
caohavietlaw.com
hongminh.com.sg
tnncsg.hongminhsg.com
lhp12a2.hongminhsg.com
tokutokuya.sg
tnncpte.hongminhsg.com
hongminhsg.com
lhp12a2.hongminhsg.com
hongminhsg.com
salontd.com
skykingvn.hongminhsg.com
salontd.com
hongminh.hongminhsg.com
hongminh.com.sg
lhp12a2.hongminhsg.com
lhp12a2.hongminhsg.com
skykingvn.com
tnncsg.hongminhsg.com
hongminhsg.com
hongminh.hongminhsg.com
tokutokuya.sg
tnncsg.hongminhsg.com
salontd.com
tokutokuya.sg
hongminh.com.sg
hongminh.com.sg
hongminh.com.sg
hongminh.com.sg
tnncpte.hongminhsg.com
tnncpte.hongminhsg.com
salontd.com
lhp12a2.hongminhsg.com
hongminh.com.sg
tokutokuya.sg
cpcalendars.hongminhsg.com
hongminh.com.sg
tnncpte.hongminhsg.com
tnncsg.hongminhsg.com
hongminh.com.sg
skykingvn.com
hongminh.com.sg
skykingvn.hongminhsg.com
www.hongminh.com.sg
cozy-sundays.com
tnncpte.hongminhsg.com
hongminh.com.sg
hongminh.com.sg
hongminh.com.sg
salontd.com
hongminh.com.sg
hongminh.com.sg
tokutokuya.sg
hongminh.com.sg
caohavietlaw.com
hongminhsg.com
hongminh.com.sg
lhp12a2.hongminhsg.com
hongminh.com.sg

Certificate

The complete raw certificate details for hongminhsg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQIbQKluOCsk3q+aU32
2M/sxQhQH4KthsEFHUmmGhm4zjxjOO1bd98OpC+8OKDM8ZnIHXt2hcG8r/oQHtnr
cnMlGWUJvR5J/iNF0y3p2tqGPNmDiLOWIp+dEGAeUaKyK2igORbuaWYGyRq0+aqf
4/Iv1mhjxHvXPL/eVq1wIof+G9U9GDBfZuQoP8cTvF0o8Xc1qPn37sjeZFAzvxfS
i2VaIqxQfBk5/74amY4SqLWoIftS4ck5OhasRzxu1763u6+nnfoXG0dD0OMrWoLm
5czDd5KWPfzcQl1kVe4xUww5hDgGUQQal/seuZMOwPpW/+nB+WTm9JBLfhFHRWLQ
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305709587698134990315317809050457088423389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 20:56:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 20:56:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hongminhsg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24074055481915982616311631753062987871293138020026343953624612188122983476995677030412924532015601251259159975388896745545443659956412691217729659608876185365201163125590107013695980232277939464975135034594631257369624733243137328517467291711429363318159191921405806862244660791444806262477675402637531774781327434141330189702157229726420325775385202027480440022169214252500958965309480318281198892245454426443878351718730362339212412755692229931887000160749382593892031954041352185396663497044530096003380339018491655066208507036257360977157158587147268856472488523710018084897871839955863101399325718856477788262529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3940d7d89340dfabf4ad3d2e50db369cd9b76505
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hongminhsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.hongminhsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongminhsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hongminhsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.hongminhsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.hongminhsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hongminhsg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c44e27a420000040300473045022100cd86c349478e53277685955c0229a26e25ff0baebfd480f64f53705db82945cd022005b0893734f8f948d34877090f0b7d4d8a0a4af7e58c3ecfd3c5ab2a4620748b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c44e27a360000040300473045022100b8d6607c7bbe26d2880b6bbfc4e469fd61e6d5478657a1460cdad03d1ba50b3d02201e2889079932a71b8705cf1a3fb4ffb16363246e6d8be61ed93decc38f50b787
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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