28951.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:ab:f6:df:02:6d:94:5c:e6:07:cc:2a:ac:c8:76:7e:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=28951.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:ab:f6:df:02:6d:94:5c:e6:07:cc:2a:ac:c8:76:7e:dd
Serial Number (int): 307163274778162625390970957637828493082333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:02:96:49:d9:93:53:03:bc:c7:12:b0:77:c4:a4:cd:8f:54:cb:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:38:3e:8c:d9:dc:86:59:1f:1b:e5:ce:ee:43:4c:2d:52:84:b5:39
Fingerprint (sha256): 2b:cc:d6:d8:cb:46:c0:bf:07:de:14:1c:79:b2:fb:78:f7:d1:83:26:7a:df:1f:1e:92:b2:ba:9f:7f:7f:89:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 28951.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 28951.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

28951.com

Other certificates including the domain name 28951.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for 28951.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307163274778162625390970957637828493082333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 08:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 08:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '28951.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845625287973957889629471084055355654302743607147421010513166029871357010163690897126491749634733033946250808718065358897051382011408061017717381443265398551835720896469332372043369040898385947113043314296874285008072496502370445187195209155050180724375215360169942479629196241319133572293394461745751545270506170749704702745925703497363828464623131378628987427794436169375551925865494490458157252006256895823045960413578830565497254374900405861047253993087871723177208723264303749797932388266533851425669555404570101117140194152411686774142311663038744027782061088185908645646814476821507430480795009736720336245823885765084554877570693752232701220148464073788684519486429747288020099049933233129405429946723022185097478283049057849768812561568637489424795529536133705525341501034752303250540734694910426502083809315098617577319596955618250853761470922506725141975277507489621057318880493502437192418670640776331571884280557072568294149564350625786416118750970785465104446121537817523063918392188154580096938058893627732293567767266250758782333003565170991830308439784097567427501851910255746890075101723359790436949150405736572161888533291723170370090714783355962392846245298208671378274743961624221437384703318669260397975500140677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13029649d9935303bcc712b077c4a4cd8f54cbdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28951.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b69dc4c540000040300483046022100a12503853c7fbdc55aaa20da6784a76fa9c9c4b9a7733cbf3e8d9f21fcdfc67d02210082954ac52abeb04df09d6fedf5bb7759a2999d0cfa93888aba3ac5d9619e08e100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b69dc4ae9000004030047304502203caeb73a194ce3e28f857d01475f4ebd4eb7b51ddb724ef883c284a04925bd7f022100d89845b78fa680f998fbc242fda7c29daee9a5b9aa6ea8c41bad4cb7581491a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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