www.28911.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:37:14:32:14:21:b5:94:08:64:18:4e:84:62:b2:cd:19 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.28911.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:37:14:32:14:21:b5:94:08:64:18:4e:84:62:b2:cd:19
Serial Number (int): 312452425234842326481771458223418104794393
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:bd:08:88:c0:10:d8:e3:a5:fe:a2:dd:cb:de:59:3b:93:ea:ec:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:08:c3:58:f4:52:e4:12:22:91:b5:89:7d:fc:86:92:83:51:e7:1f
Fingerprint (sha256): 3f:b1:66:65:60:30:c1:a7:84:76:57:f6:2d:57:47:5c:7a:f0:2a:df:1b:85:ab:66:a5:4b:f2:15:b9:16:b0:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.28911.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.28911.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.28911.com

Other certificates including the domain name 28911.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.28911.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312452425234842326481771458223418104794393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 20:19:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 20:19:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.28911.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929688724417190688468261341912729692744641003047721842186351410893178128512600675042043573332249624497024733669448484996973579764528125773153315063837435051852838759931118566165227665361228341288184965215629027186182392641947944561270054450322034625995282737872714110501108102144704517999122834776302745083854448637644173755529039041020587877641940972953299869431555221907759435852804947051649577660650148973115603413248482233917480427233744668118541393639779341553413267754315395861908136204359747551000252186421824417806112661543471749226584489745690384247649143481499864867888978978584332235966921026397400603568309167775626492783366302291399316597851077138709389574798646561143042880488748686923227432980378584124924108714407804716132358554487507433167944710527864019007073813514947396673999914528994646613110296105408108832271375781806465428730315655993882763966522433335081220292560326440395801295236217391148420008074261003403856689424571949056699073526866452146265863399860337711892742041941326949247701614344431758157178170228601750207310291695957856491277066706156293296332491188778888326430883754312833640365393790472672323828543972058829756908154038713048249507247349051079385011225156099869505921712708918659865807273603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51bd0888c010d8e3a5fea2ddcbde593b93eaec7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28911.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdf3fab2400000403004730450220699cbd8e44a5ed6a27a6ee9270e88451e8e691e663895c9e371915cafc12751e022100fdac43c4c3a774d56ee8ad531f252238201dc7a6030f6eca459fa76ed0850e50007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cdf3fa952000004030047304502203daeb3aa5c773b023df8fa4a95eede846c0697ecd6c59383b1f0bc5203ca6c20022100e96eddce0f6f06fd9088c1b6cbe25fc3d2f4c909e6745036f00ac4756cf73452
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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