28295.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:14:ab:4c:66:a2:8f:00:d2:0f:ee:30:51:e4:43:31:eb:e8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=28295.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:14:ab:4c:66:a2:8f:00:d2:0f:ee:30:51:e4:43:31:eb:e8Serial Number (int): 268370199817224977718481994130815573945320
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: da:7b:51:9c:a6:09:73:1a:b2:5e:ae:f0:a6:fe:39:7c:6c:24:19:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4b:ae:fe:ce:95:2a:14:f7:c0:08:6a:f8:ea:d5:a1:9f:82:ae:60:79
Fingerprint (sha256): 3b:90:55:41:0b:b6:ab:93:c7:46:78:f9:11:13:21:e0:35:3e:46:49:92:29:96:9f:19:42:3f:f9:89:a7:a4:67
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate 28295.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 28295.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
28295.com
Other certificates including the domain name 28295.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for 28295.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAxSrTGaijwDSD+4wUeRDMevoMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjQyMTI1MTBaFw0x OTA5MjIyMTI1MTBaMBQxEjAQBgNVBAMTCTI4Mjk1LmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANIv3EagvVore3jeg06QtUxq7K4XbkzIGoxKijqd WT9m/C01fWb58RFw8j+e3dKd4/uF6d8d6NAqp4IQ14fJNGsqAHqTWz48nIgu2p4b /FR80yoGhnMlSixjrEGHXIIzzjoNydMSQQxpgaWT8xMmMZTSzUhVUHcnVN/9B3QA 9q71PmspPGlC0FxIuiz3Zp0/LaIWN7/K7DMAz4Noz4VkwavSXnPz8qMMKUx0D22x wAbgCell2T81nc2Y8lIjTlk7NKPBsr5XhduAw+kwWveA+bQt+p82bfDKvPX5O5Ol hbWo2byo4sVWMoXuwg97WRFdkyICwyj4wqdw89qPgpsGRTU9HC9nzbdbOYIBDfZX Oyyg2kE7x3Ch3gtjR/NduDAzjB/DBJQi8LT8rEHYzHCGji93QncCNYsvIge47/di b0NbeR/Wa0YEnaLYpStkZnCY7P90Ru5v6r+WOmoDkyN9m6oT27T01xmTFLJinAqT IktWPIvUS1WxrM1ajekQT8ywX+cAzA0DMtm8NxUbcIq0SJmqADuagR20h5dnw4xq qIvMOSAFxHzzYUsJyzsHX/igeTIXc7vzz84Jjm8laZ2eBnjwiyzzR6lDx9EbS7EO iZExWbsAAJqzrirDS06yKPtneRfJgpjw8Jj/T00oNez0l0RGZI95EhWVASvFWSgO o9b1AgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNp7UZymCXMa sl6u8Kb+OXxsJBliMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJMjgyOTUuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFri5fP2wAABAMARzBFAiEA +jYlDXevDqDfwYTecCIBd76HKeIPJIrz0dzW0GCOtQ4CIGmzRey79ac5O0oG4MmA al4b2Jh4r2c1VXhoeT/FnM2gAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH aFRL2I0AAAFri5fP+AAABAMARjBEAiAcca4nREvv1J1qIx0aTEvvrXOk6yXpEsRt IzEjistzEgIgKkDmPYMlaFS0x9rr3I3VIGFlkJu2laJ18No25dwUdXowDQYJKoZI hvcNAQELBQADggEBAHxb4ZfDxHfkavfMT0FkZWzkL+v/tL878vt5HIsfUOG6rTGY ucf6LEi1+g+bc3XTLwTEMpdoazMRusyyOWKvKeNkB1KD9wnk67UV4CRLMY71eQHm 5JNHpVCiYi+v2lQgfR8VFJfoeuNClWvZJNL1qmkQ1mW+VuTUICus4z+KI2tRzUbV GnwHmmXR+GSt5GzuY45Ev/9YxkwnSxMFNqw2+a3hrKbUXjvOPtLSFYcUOuLdnLHQ 8ma3pFZe5MT63t8SDNJxYKJuXAfGZCz1tF1wRNXmOQyuMImWCrh14fDU8fEhPJYj GU8pHGx9VZRWddkmEgWBIUDAlvy4F8LWXFNe/xc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0i/cRqC9Wit7eN6DTpC1 TGrsrhduTMgajEqKOp1ZP2b8LTV9ZvnxEXDyP57d0p3j+4Xp3x3o0CqnghDXh8k0 ayoAepNbPjyciC7anhv8VHzTKgaGcyVKLGOsQYdcgjPOOg3J0xJBDGmBpZPzEyYx lNLNSFVQdydU3/0HdAD2rvU+ayk8aULQXEi6LPdmnT8tohY3v8rsMwDPg2jPhWTB q9Jec/PyowwpTHQPbbHABuAJ6WXZPzWdzZjyUiNOWTs0o8GyvleF24DD6TBa94D5 tC36nzZt8Mq89fk7k6WFtajZvKjixVYyhe7CD3tZEV2TIgLDKPjCp3Dz2o+CmwZF NT0cL2fNt1s5ggEN9lc7LKDaQTvHcKHeC2NH8124MDOMH8MElCLwtPysQdjMcIaO L3dCdwI1iy8iB7jv92JvQ1t5H9ZrRgSdotilK2RmcJjs/3RG7m/qv5Y6agOTI32b qhPbtPTXGZMUsmKcCpMiS1Y8i9RLVbGszVqN6RBPzLBf5wDMDQMy2bw3FRtwirRI maoAO5qBHbSHl2fDjGqoi8w5IAXEfPNhSwnLOwdf+KB5Mhdzu/PPzgmObyVpnZ4G ePCLLPNHqUPH0RtLsQ6JkTFZuwAAmrOuKsNLTrIo+2d5F8mCmPDwmP9PTSg17PSX REZkj3kSFZUBK8VZKA6j1vUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268370199817224977718481994130815573945320 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 21:25:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 21:25:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '28295.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857487963705844859367212668377411562848142235056788457395048619672026632122177506581031819390861069519903979110289201121856710082781191064528167740245061715454637354261292781960855043640152916401799178861546429097621477809323706882094526038334845306052115869143693882239623742004180857233059827963716161738574533779848422226371626799128815596061740905088812667524730021570276074009904145905285880354943021171695283008477340332597205039438175553109421769374868020464054151358989639667358472008819360366466630448099440604832628334843033021416022962157668360997482666307183239922342288090939985186779167877265247488320733128567931701526017751815669679112334087554181976043805673550595206977593731019980638963315283790235802207899143923391141394669488050480200973512079839925099859855692855753033897303599959342116419111573308250220957324508062075718439818425236722199122457361423392725725185500393763250209829737285292071871966926667464632638259931575177066977850592560433718213314076209841679828988483536583006544153571828955629202725618050557428406512685513294977007083190023729948085900615654147619734316411624778892218022154547091163002501225037863813617785344504636070211502625235875562982990963159833969073880464135845134366660341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da7b519ca609731ab25eaef0a6fe397c6c241962 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28295.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b8b97cfdb0000040300473045022100fa36250d77af0ea0dfc184de70220177be8729e20f248af3d1dcd6d0608eb50e022069b345ecbbf5a7393b4a06e0c9806a5e1bd89878af6735557868793fc59ccda000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b8b97cff8000004030046304402201c71ae27444befd49d6a231d1a4c4befad73a4eb25e912c46d2331238acb731202202a40e63d83256854b4c7daebdc8dd5206165909bb695a275f0da36e5dc14757a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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