liese-sifone.campaign.com.tw

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:f0:d1:a9:ff:ae:d6:a5:68:c9:3c:d6:d9:10:06:79:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liese-sifone.campaign.com.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:f0:d1:a9:ff:ae:d6:a5:68:c9:3c:d6:d9:10:06:79:10
Serial Number (int): 271525149793004283310008289755645272815888
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:92:22:1b:5b:7e:a8:dc:17:05:fd:dc:18:51:78:55:8a:30:af:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:4a:df:94:f6:98:14:07:dd:f9:76:18:54:ae:1f:69:86:d0:33:bf
Fingerprint (sha256): 0f:c5:02:04:0b:74:d7:a5:fb:1d:f0:d2:5c:e6:b6:48:40:84:06:09:61:db:fa:82:e7:81:8f:d4:38:ab:ed:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate liese-sifone.campaign.com.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liese-sifone.campaign.com.tw

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liese-sifone.campaign.com.tw

Other certificates including the domain name campaign.com.tw

(limited to 100 certificates)
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
sni.cloudflaressl.com
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
dbs-bank-booth.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
dbs-bank-booth.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
sni.cloudflaressl.com
nodelinebot.campaign.com.tw
curelcleansingoil.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
dbs-bank-booth.campaign.com.tw
upj.campaign.com.tw
upj.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
sni.cloudflaressl.com
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
order.campaign.com.tw
curelcleansingoil.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw

Certificate

The complete raw certificate details for liese-sifone.campaign.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271525149793004283310008289755645272815888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 13:09:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 13:09:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liese-sifone.campaign.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798597646086141200523850782591267810048915736014553544050556331455557157795922435674511694044812214183129861154228882843938303401989792468554376086537646602196699565516333056149890803390700394022251875617108342310473910227610724474629835652859787926736804381399415749646764856080768194567008677659235652024409182705134313915325472200665800022411240301056749154040872443991719432042864252335394787343551587865109450985764118412251438345576757586930402379770533566554464045475903584592043334590012926646841541989018528639908544656333203666579742663542214892136350800203130587128884263261752940465894316988370332631827077164529897787448794311236690654148664127867258288930012898344694147861544185382252054743651563098244327779803367800408535161911295235240916599150316330041126244364094376667953164859123256128267470577896821262401590115800069446322705265092619153141997770868985238863581678112563990769702768981773175809057536007586934879425587297464711858238500483334014921099104397057210571556612353047125232697952727351579988248514516789210615529439718086428632548261186012735964921539707045718274698620823380954129961943309780212268909652721521128868157650757781596543689762444321785671109957831023836954645340806547679944252778363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f92221b5b7ea8dc1705fddc185178558a30afb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liese-sifone.campaign.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016894caf6640000040300473045022052270d857374d808451e258e99f0b18d4545755b86cefca45342803511df7ad002210088438f1f6bf3be4edf1e9ba5a52f475a9f94879d75e55599b551e94d4b60568d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016894caf6a4000004030047304502207d2c4fc8a4f53f2cbf19d7cd76f8035d1d36ac5bbd77024e5f019d02bf754861022100bba902523a9906928ce548b5976bce3590f7556d17e4af7d09d46b67701d407d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d3c335a44a7d050a91fed7da559500f430322c197f44dcadb939fcb861b73c7f41569bd88660c1e176e13c1b4d38d74b2f2f7560db141727a5f5c3bbada9c1fba853dc0ccbb33da922f2758ef6a50dcd096734dd2557f1d089b40645b29d4d6fa5fc8375fbf62280b9c4ad908f3d98b24b1176cd8a06f44d865b45cc7716cfd09aa3b4134903c4603d7c949f460b37989ec9d7524754ba47bfad602835b0a79e2e66f1f6e5137d63e09ebd9a8f704a4558d2071b080628d870ed8439f35e6fc93f8b2f25db9d023686dcbf61080112352069fd5914da895d17148029259e30c218e9013ab288b295543011582d0259e0eef64cbf037fb1f972f20bbfa994f16