lrc.cn

Issued by R3

About this certificate

This digital certificate with serial number 03:62:d7:96:a6:0f:2d:0d:4a:00:22:f1:7a:14:95:51:87:c2 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lrc.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:d7:96:a6:0f:2d:0d:4a:00:22:f1:7a:14:95:51:87:c2
Serial Number (int): 294971095985237606030927516745988932995010
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:b1:43:11:1e:ec:e7:38:c2:6d:9c:80:04:08:6f:49:cb:9a:b7:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:c3:d0:4a:8a:22:b5:5b:66:70:80:9d:7e:23:0f:59:72:98:49:35
Fingerprint (sha256): 28:cb:a9:6d:2f:28:dd:e3:9d:84:7c:e0:bf:90:ba:54:58:26:ea:14:a9:f8:0d:80:f6:b5:fc:18:d6:f0:e5:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lrc.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lrc.cn

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

en.lrc.cn
lrc.cn
sso.lrc.cn
www.lrc.cn

Other certificates including the domain name lrc.cn

(limited to 100 certificates)
lrc.cn
lrc.cn
lrc.cn
meetings.lrc.cn
lrc.cn
*.lrc.cn
lrc.cn
lrc.cn
lrc.cn

Certificate

The complete raw certificate details for lrc.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294971095985237606030927516745988932995010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 00:42:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-22 00:42:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lrc.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3339768070487874297252761048223648486311514503461893439750978877958732608409364580192236199814324977246247446402704592275834047751026596042929901095718688795323062059995822226674417974071349969975231208880658529814992840836917906116848871186808060047722108033887283360696503023534851592872182033636316877444451585373190647640111305253494212565242209215756070447834102955273655810064681945565295610966954232521046892450320967999279068656689193317913645464459363122571875584988244950329868877831583347357323436666656252278656112308273022811612773941794910162847575606674048888931875412894621512815491655315152026311334666217534254848388284474639258414503123826799136781848578889716805659434813684084859980834004319898439683286543406815996374512527111198941521542067814988119124058170248057217896155103610412053412625348943657647466356551847199855431847877044890257396569302126478761721005323646580322973855333255824049835337601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96b143111eece738c26d9c8004086f49cb9ab759
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrc.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018407a833e50000040300473045022100aad231ddf5b4f7c8771bbd46262730142dcd2744ff911ca386dd38d88840bb4002204fe709abd5bf5b22e0592544626fe0d017b3f08f197e529fcfab4d4714c38f73007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018407a833ce0000040300463044022074b3d8142794fe030863b52f24a2597ac2f5644bbc75ac369fc1662f11f1197702207a1bb8996f5552f296b37f49489727bdd1d341dd375bd196b06746599e6808bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008382e11a6e40cf62860b75f9416be47481a50a2308859599868b74d021f607a423914dd5214715c5044318172512ee7613142cee6be794f8dc0a3d6bb24ca883887b50938b674f81b771c07c19432be8ae4a2c36b13edb8b3bb8cef873cd6dd837a401ec5c2e8fa48cd93dfd3adce60a4b5ecad328aa2fd9d61e3550d93982295ed33032e05c8244a1faeba2f5802d87c27ce183ebf67e1621fd740b47a87936b2ca0a524cf732fd75973adb1f3497ff97ab386e23e6a94516c3de10a7953b67b1cb196318eb9945bd0ac71c96f9d9b28c6e22cf3fd8ea73a5d657c9e7f284fa0ea7407ae9d587dc5d684a496ca15bb716b9c4590f8a1591bc39cd938a7341da