www.28295.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:96:61:ef:d3:af:9e:3b:0c:fc:bd:62:f9:ef:44:1e:83 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.28295.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:96:61:ef:d3:af:9e:3b:0c:fc:bd:62:f9:ef:44:1e:83
Serial Number (int): 285016233829255897907176521231130589142659
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:03:63:8c:82:55:97:4c:ef:9e:ca:f6:9f:9a:a1:0d:cf:88:e4:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:07:fe:cf:dc:09:10:40:81:8b:23:55:a8:ab:32:e8:8d:d5:92:25
Fingerprint (sha256): 2c:a4:96:21:03:01:36:94:85:cb:1e:ba:b9:28:ce:03:68:68:44:04:50:b9:f5:f4:0d:8f:a1:57:55:3f:54:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.28295.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.28295.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.28295.com

Other certificates including the domain name 28295.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.28295.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISA0WWYe/Tr547DPy9YvnvRB6DMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDgxMDUzMjdaFw0x
OTExMDYxMDUzMjdaMBgxFjAUBgNVBAMTDXd3dy4yODI5NS5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCu2law6YLdOgbaRld4HMgAI86u0txidHby
tU7yr+9lR+WAcy3U+eEELpbUipa54KBHDkj0HFboQh7uItOKFZJ/LtMWWpCKK4Bm
ib8X6Nq4EiarcpzpV6PlkpWYjKWxa3f52bmFt5PuAEX7GyyVQ4UMfCG2Q4k/3rDe
6nmpVNXdikZvEc6Vatb9NVxKJ7b19RGL2l1JliUb5+f3rhkckCaaSS/SNg9Wv2xf
YMvStPHW1XXB4BahFRzyDOKamj6sKKT7fnetzqr47MgmzhSCc9pLrQKfFEi17SLu
fzXU05uJ3TK5kk9cX4IDrEnECP5/9D1zXMi//+v232RkvrKmiu5RodBSs/WkjoWo
1gbKrWGvpsdpkcdsTKmJLFNOd/tObl5/bCObRYn3Qt1GLQoMOSQiklYPdbSz5S6c
9+MTLrbEI4OchatDSxmbxeIxvbtNg3SrnU2FRwHTwEkGtlRcNSWbvGsuYXvqRrPU
OU7XKlgkvzkaGbeZ+kOywodpZ5vd99w7JkW0xV6T57balZd4AkMj4swKEroQeGcz
Fln6an+1YZoLchRLsvJxsmjtCmVFVSBG5qcmUxYFIW6Tx+mOM4SMQWwZwf/4/ZnE
8HAnV4xEMpjwDogpYs3xJNsG88aaUkLF6mkaS++Uds6a0XQJQhd+x10m8eYQBHvk
9OxTZYjvYwIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTFA2OM
glWXTO+eyvafmqENz4jkgDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy4yODI5NS5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWxxE6FDAAAE
AwBIMEYCIQCC3zAiDdsVfYcaYW4tKWyownJ/VvF+qMDBhBngRlMqoAIhAOvWmKSf
fBhjCKlG232WJdR0FRhgtpUtAw0/1poy+BPWAHYAY/Lbzeg7zCzPC3KEJ1drM6SN
YXePvXWmOLHHaFRL2I0AAAFscROhEAAABAMARzBFAiAwJlL1EeuN+Xs1MDJa76JF
PIeb4583ftFCyjecNxeBxwIhAKGJJ8c0K7Fu/ArHm0CbIDZ/05B4b4IUOF/D6suh
IU/vMA0GCSqGSIb3DQEBCwUAA4IBAQB2YJF7+UEyMzCrTZpfzY8c1JqrS1fQgwQA
tLR61aDZV+72QIGQOU218jpV6+PExYt9dHzSnuB9Pypwlj06E9iIvoRaAbg/7n7k
YaPBykurD26XMrbzMGYg55sv/+AyBk4fCs11e3mzRymzGB3kUBWDQM26yqLSwSZw
mFGYYB7qPv/ZXv6fI0W6x06ZRa+G7+1Vcq2yWgHDXWLIX0ZUGxhBTx4OjdpZRwuW
jqj1BW6/kqOgMwK0Fm2FFmIMJrNK6EMshx4F7CL87FBVj9fjkIYJgXMnCMHIerSd
Ulo1YKqCBiWj909xuJ5BYD1RlBXnitPR/BkJr7+4teT+cJ/lXt6T
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285016233829255897907176521231130589142659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 10:53:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 10:53:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.28295.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713337536292981727154568944863935694127512339637397690713452966253504941951354382766119679796496102406030281456775008984830659737984954250418961193956301859807001685047919060030868897242711599826024013964680500745267459596885562166253076564690861284987919106790030750589402641356699813560662313702374830919060442410595538090655886584067770182171340206065555762951038313793498085971609861944717642685531968626790067966716890261601439101779055766698835339574555461964836772263240616628837407080852197554391435191054040810499008006590332189551879231195155121766143033067219648605548667664181983625203383785290953593091904784585981577077244255978207274660834559466200870952371359084290816602739001393603236814267992304931677926209872212354094203456175385020462364408554981465283401838059459934054367261163883934643201014716047571618646312900863875667253195816543240085373464940991768814688064134941536009917395377131117140634903502469720581595678480588808161972127630183058352954759768911295612737297303218123295257099223025636950648380320223251844365042649919349517926695537898644952103304637443752539367583310262493206640455839898791096480291861116764624646170925783209735341585010586070560005989512843640031275601167892496572828151651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c503638c8255974cef9ecaf69f9aa10dcf88e480
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28295.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c7113a143000004030048304602210082df30220ddb157d871a616e2d296ca8c2727f56f17ea8c0c18419e046532aa0022100ebd698a49f7c186308a946db7d9625d474151860b6952d030d3fd69a32f813d600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c7113a11000000403004730450220302652f511eb8df97b3530325aefa2453c879be39f377ed142ca379c371781c7022100a18927c7342bb16efc0ac79b409b20367fd390786f8214385fc3eacba1214fef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007660917bf941323330ab4d9a5fcd8f1cd49aab4b57d0830400b4b47ad5a0d957eef6408190394db5f23a55ebe3c4c58b7d747cd29ee07d3f2a70963d3a13d888be845a01b83fee7ee461a3c1ca4bab0f6e9732b6f3306620e79b2fffe032064e1f0acd757b79b34729b3181de450158340cdbacaa2d2c12670985198601eea3effd95efe9f2345bac74e9945af86efed5572adb25a01c35d62c85f46541b18414f1e0e8dda59470b968ea8f5056ebf92a3a03302b4166d8516620c26b34ae8432c871e05ec22fcec50558fd7e390860981732708c1c87ab49d525a3560aa820625a3f74f71b89e41603d519415e78ad3d1fc1909afbfb8b5e4fe709fe55ede93