cospic.com.my

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:d8:44:ed:ed:eb:cd:f8:32:fb:de:91:0e:03:22:d7:de was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cospic.com.my

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:d8:44:ed:ed:eb:cd:f8:32:fb:de:91:0e:03:22:d7:de
Serial Number (int): 264006305512784359941456232792086123042782
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:e9:87:fd:b6:48:57:8f:c2:86:97:e5:a9:07:ce:30:89:f7:a9:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:0b:86:a5:42:2c:7f:8c:44:87:10:59:b7:c1:0f:1e:0a:7b:8f:a5
Fingerprint (sha256): 2b:9e:98:31:ac:12:b5:c1:7c:a1:da:62:d5:d5:ec:97:d1:12:cf:b2:47:3e:97:47:3d:f3:37:d7:7a:88:91:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cospic.com.my

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cospic.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cospic.com.my
cospic.multistore2.sitegiant.info
cutiekidzfashion.multistore2.sitegiant.info
discovercoffee.co
discovercoffee.multistore2.sitegiant.info
dotcom.multistore2.sitegiant.info
dotcom.my
shop.cutiekidzfashion.com.my
wahaha.com.my
wahaha.multistore2.sitegiant.info
webdisk.cospic.com.my
webdisk.discovercoffee.co
webdisk.dotcom.my
webdisk.wahaha.com.my
www.cospic.com.my
www.cospic.multistore2.sitegiant.info
www.cutiekidzfashion.multistore2.sitegiant.info
www.discovercoffee.co
www.discovercoffee.multistore2.sitegiant.info
www.dotcom.multistore2.sitegiant.info
www.dotcom.my
www.shop.cutiekidzfashion.com.my
www.wahaha.com.my
www.wahaha.multistore2.sitegiant.info

Other certificates including the domain name cospic.com.my

(limited to 100 certificates)

Certificate

The complete raw certificate details for cospic.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27OPAPF4lAQWQxe2VHt7
17v7/ttRXoclWtz1iFcBAgHLPRoPf+CNm56swDVda36wf31H0PIhX+q1laLwQ/WC
wFdJ51zNExbbDyHP7sjyVm/nvPp8ZdeY8PZTNAbXFr4s/RtsZw+rGXYbdT3tKNPU
+/GNklt7mm5B5cQ6qB4LQetivLGzDN66ZipWuNKus9Iu1uPKmK/d0Oitx3DTyCaA
O9HVG9V05bK6IuyoV+3lcTphWw+uXxmtWddW4nZEKMERtfC3gxq9k5FUldjGFlZ/
qEWu6H4Y7gCdq9EVKUcGH9YQdmmGfT0K3CCodeHCtahSqBRhsMJ6gwgVQ4Wi1esm
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264006305512784359941456232792086123042782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 20:31:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-14 20:31:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cospic.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27734732437309068771213514854228774416974712900985731074171362632340114786194408220685085373348649630685034764738147144399011269950736572446057368731885587872608536077032484845794243653864996801516329004887168013842005141755341722676566336704464712622763698292585682070324901624540549107956761137534677884850214267155747748430845314762388091813941125857422889182389679917936527942839729020649059581817906738995937962560780926573612379673102349117365091134822640712200839922238457441463822039368292110884111928134132818868111614298312976958728098900564738731894365012830109039416337102524952231051519298260727235290691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78e987fdb648578fc28697e5a907ce3089f7a98c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (702 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cospic.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cospic.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutiekidzfashion.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovercoffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovercoffee.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcom.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcom.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cutiekidzfashion.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahaha.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahaha.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cospic.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.discovercoffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.dotcom.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.wahaha.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cospic.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cospic.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutiekidzfashion.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovercoffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovercoffee.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcom.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcom.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.cutiekidzfashion.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahaha.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahaha.multistore2.sitegiant.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001671e6f346d000004030048304602210094544cbe4df2e951a24fc09a5c5b1a2c55f31bc7972907f4d34a4537dd66b9ba022100e5d9baf0c8536010fa685231a7db9fa27005259a022be926e0568ebca0ce72ab00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001671e6f3473000004030048304602210087005ea17e568107a576b9d0edaeba210fd80ea1e691bde28d90090f835f761402210086a17e77ae3db1ab983cd39bd3a5f605796c5c1b9c3c258b1c76f9d94e24914a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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