ybbao.cn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:95:3c:f1:78:48:42:45:55:74:6f:14:b3:93:70:62:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ybbao.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:95:3c:f1:78:48:42:45:55:74:6f:14:b3:93:70:62:97
Serial Number (int): 295903748261069446323388087544617800589975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:f6:c9:f6:1c:8e:a7:c4:41:89:04:9b:85:14:06:96:a2:b9:47:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:46:e5:ba:2c:61:e8:c1:d5:3f:ab:55:e7:a9:2a:fc:21:a1:99:e8
Fingerprint (sha256): 2f:c9:7d:fc:35:14:89:f2:fb:4a:65:c3:58:19:44:07:0a:dc:69:82:4b:b8:e6:fe:05:e8:35:85:88:52:e5:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate ybbao.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ybbao.cn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ybbao.cn

Other certificates including the domain name ybbao.cn

(limited to 100 certificates)

Certificate

The complete raw certificate details for ybbao.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295903748261069446323388087544617800589975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-16 17:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-15 17:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ybbao.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751564825436419706713178505406156700431739599909619458778726544218196926903052183666139780650197440032862263831326513724832157520975991315476283033282343963983512558453792272866767899864889702341657951590805595550324291828376013581022482932768426438984493756166212391500041039578392396706414624408924962663314334225271693438526162580539197601587829337239382855644806157892765309707543461704594059237471524680553285205624968997351472016671334430213148344287877510375837435435494485830599390114733980747708019266759068572885703184223880337879288141251673942692705486588496334742411244960102268747864631525644323302733488886497737772051309177623137896603350970294159166572381878961611262851398003411462501340302388876854937879683589851080854224269754107605816756756956134995298766305074768850732467393303235677593988906331552248715572997066245392916029903840632230692032744698868057781078586204803076563904049222283326806342087497938982451526495225717960469689793630205316076783467030090144320785171066588135577934729009740940432885123823018891532315055307093728605092149381604999857397047002323491257727710557912941459242400525190049706171126941705437751228066352083864694824124845629498369779207093770851197940489144968662401248782753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43f6c9f61c8ea7c44189049b85140696a2b94798
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybbao.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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