www.28911.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2e:df:40:e0:ff:5f:cd:d0:30:42:1e:f5:74:31:9b:92:df was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.28911.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2e:df:40:e0:ff:5f:cd:d0:30:42:1e:f5:74:31:9b:92:dfSerial Number (int): 277286601387195474275792771874474040201951
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:81:11:20:a9:c8:f5:51:e2:3f:f6:e4:32:03:92:8a:d5:f1:9a:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9f:70:d4:74:e9:2d:ae:4c:4f:dc:ca:55:90:0e:ab:46:37:15:ee:fd
Fingerprint (sha256): 13:10:0d:a3:de:4e:e0:f5:d7:03:34:e8:04:69:53:ec:76:a8:09:e4:47:cb:9c:bb:fa:4b:ba:fd:66:3f:88:d2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.28911.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.28911.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.28911.com
Other certificates including the domain name 28911.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.28911.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAy7fQOD/X83QMEIe9XQxm5LfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjYxNDQ5MzRaFw0x OTA5MjQxNDQ5MzRaMBgxFjAUBgNVBAMTDXd3dy4yODkxMS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCpPrG9+OO1e3hhfvDCm4LiYXBvlhQDbjV4 5WThmpqoXe2BCfEoQMwFOMIctt90yq2U0tuiC+BYtKcURI+Tx5gdcaTEGh+pd706 puPGUDdmMwi1Ib11jcF5IGQFUKAH44nflWvxNpOspJd6H0fnwqJWiGAYK/duJjzD d1ZSWDH/qrn2b3bdzO21UEWupU4gipeF5keCu77ade6QlTRh9tycjWkCDpSMxbPS T5FkRH8DYjWw6fMrm8cV6sv39v8N1yyqt6qe8tVs9KdUOCV7guwYhMYdMhZQCAOn TW34W5koZuJ4rBnYMnpvRay2McMWh8e+BIJ2geUiTVVCIyHee+0v0bevWjOihAJp b8Rq9ZdatCz/gVW5TSQQpr3L/B2xtnBpFbd18iEGSIcU7CiMIahv+VlZIg6X6jBP F0OE3N8/CvYuT0/jHoijPoVhqo282NrZjMHtODmbnSijwQ1AMADKCdxqn/DIL5Ml GtTY933tHN0s5T2OVOvpXkYhvX44QhcEA5lV5Gp+Jd2JFy9RpOXLGbE+4KFZ20l9 FPcAIHTJQ07roezEdpf+Jrv85u4Nr8YVv5uqJsf8RadGHc7PPflN/4Zjt75vjJVp 0AD+3eWVmRubc3oXeqft7uO0pMLxA/+Y0O84+XIIDb3dTFLE0MjHJxvouGEv1110 iM1rFmaG0wIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQagREg qcj1UeI/9uQyA5KK1fGaizAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy4yODkxMS5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWuUelcNAAAE AwBGMEQCIHncoHZvadKqD9ETyzHHKC88Sb0VywZikM/PvbUAzn3jAiBAb5gdIDw4 sHKZZ3Z8UW3g7U71JrpB4xStQ5I1LBlg3gB3AGPy283oO8wszwtyhCdXazOkjWF3 j711pjixx2hUS9iNAAABa5R6Vt4AAAQDAEgwRgIhAKYZoZQ9o1o4rxtTC5pwzZml Lsx6Qz2K8E7HJJxh4vKWAiEAw8WesHM6uYM1+AN8xwKvdvyFFu91NcQQGTsbZskW AvswDQYJKoZIhvcNAQELBQADggEBAEdW3OGnrfOS4e3jDsh50DM32Wem3J0spL7d EOfbro8pUjT9BJChgeglQvPF4cOhcxASagnSwHJkthqLMHULyEwZ789X03Tw5iBi C1AFRg5QlH+emaXX2JWzeuviXxg7rK+KWlrJ7JuXXF/Z/bCNFFq8Bqi2jcj51mq8 mhIAI1i7BcR4bm+C7tcXY6Gyiw/E3JI0iOU++NKOiTezYRUlr8JCHfw7pNbYW/Tq z+R3agTHibBWrJ1U68FgScMlrXuaIHocOcwP0JdRcG5BCNOO7bg/8NR6IUCkCPPb /NMHYk+VFA9kqghzdThv2fcg6Iidp2dwxtXuF3DPcpm3gv0kNQ4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqT6xvfjjtXt4YX7wwpuC 4mFwb5YUA241eOVk4ZqaqF3tgQnxKEDMBTjCHLbfdMqtlNLbogvgWLSnFESPk8eY HXGkxBofqXe9OqbjxlA3ZjMItSG9dY3BeSBkBVCgB+OJ35Vr8TaTrKSXeh9H58Ki VohgGCv3biY8w3dWUlgx/6q59m923czttVBFrqVOIIqXheZHgru+2nXukJU0Yfbc nI1pAg6UjMWz0k+RZER/A2I1sOnzK5vHFerL9/b/DdcsqreqnvLVbPSnVDgle4Ls GITGHTIWUAgDp01t+FuZKGbieKwZ2DJ6b0WstjHDFofHvgSCdoHlIk1VQiMh3nvt L9G3r1ozooQCaW/EavWXWrQs/4FVuU0kEKa9y/wdsbZwaRW3dfIhBkiHFOwojCGo b/lZWSIOl+owTxdDhNzfPwr2Lk9P4x6Ioz6FYaqNvNja2YzB7Tg5m50oo8ENQDAA ygncap/wyC+TJRrU2Pd97RzdLOU9jlTr6V5GIb1+OEIXBAOZVeRqfiXdiRcvUaTl yxmxPuChWdtJfRT3ACB0yUNO66HsxHaX/ia7/ObuDa/GFb+bqibH/EWnRh3Ozz35 Tf+GY7e+b4yVadAA/t3llZkbm3N6F3qn7e7jtKTC8QP/mNDvOPlyCA293UxSxNDI xycb6LhhL9dddIjNaxZmhtMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277286601387195474275792771874474040201951 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 14:49:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 14:49:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.28911.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690458950813667059031263139129124617069390652411506709465252845051051998913791941557298368278329780228976082035398615286241079199509887015620682818756015418555154212886663785543318699602302611989845457830001000504847810715486462169847268845915660930135932514640032885547220344181694684439471164765216063625755915472550075538833401962316458799994660470215041119480689403226038313354846052615326405433114426873515157017312794324670757092476880733825550999867307949360338176645028116178644378200659238526186904751237617139741714917209357637077574347500085760926378183837061080747201323912621770163909461904804508135022947926264131101112836523068244852380743112379364345362020731124556032801171820777948596031043935719705784754292423206916420989266793152480581837876999964789822375200266992724652672254879392912828368138021870273198053764319150964583123329668683405700605841403616281254875577543143920300421474499161238561201588265993590535839247973239581577070239253293988089311787385443082101761507349956938227491270848456138638921151022529116619489492183662417296723230106305108936729589505779029803182574242142869722906306940986220196021214812167427828923743586363075464178014933438291791813668208949987392595994452740748843113940691 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a811120a9c8f551e23ff6e43203928ad5f19a8b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28911.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b947a570d0000040300463044022079dca0766f69d2aa0fd113cb31c7282f3c49bd15cb066290cfcfbdb500ce7de30220406f981d203c38b0729967767c516de0ed4ef526ba41e314ad4392352c1960de00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b947a56de0000040300483046022100a619a1943da35a38af1b530b9a70cd99a52ecc7a433d8af04ec7249c61e2f296022100c3c59eb0733ab98335f8037cc702af76fc8516ef7535c410193b1b66c91602fb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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