www.28911.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:96:37:14:32:14:21:b5:94:08:64:18:4e:84:62:b2:cd:19 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.28911.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:96:37:14:32:14:21:b5:94:08:64:18:4e:84:62:b2:cd:19Serial Number (int): 312452425234842326481771458223418104794393
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 51:bd:08:88:c0:10:d8:e3:a5:fe:a2:dd:cb:de:59:3b:93:ea:ec:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3a:08:c3:58:f4:52:e4:12:22:91:b5:89:7d:fc:86:92:83:51:e7:1f
Fingerprint (sha256): 3f:b1:66:65:60:30:c1:a7:84:76:57:f6:2d:57:47:5c:7a:f0:2a:df:1b:85:ab:66:a5:4b:f2:15:b9:16:b0:ad
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.28911.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.28911.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.28911.com
Other certificates including the domain name 28911.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.28911.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA5Y3FDIUIbWUCGQYToRiss0ZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjkyMDE5NDZaFw0x OTExMjcyMDE5NDZaMBgxFjAUBgNVBAMTDXd3dy4yODkxMS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDj4n/fsE+XugG9pz4ic6EUunelMNi6/k1H +inKKsXWfRUF/0dqW3xvxD1WxX4DwrGCkmDsK1BV/sncsvKEtNx5gbxiRNJBfxpf j4dNQWDCP7JAsAYXd5XtGdUuXu01Xuc+CsMrAfqkF1sbczFCXOq/RvyabJWSSYoa VqDFYLJwU0JDkn/vbOeeh5fYRrcVcVCr0OMELENgVFWEF8q280ZLFwZJnS37l9H9 pHxHhz6TBYxuivqcpLctNw1qiT9OTGGqyEqdg6RLF0BZkLH/GcSZvIMGPJ9UWJ5e ti7QL1HmSu8LrSD/kuNmswkUFfE0LOTc+QdCOXsgFHHF6dBzFYT63tS7IgZuBiAD JA33dn6zPT1lj9zvP5HMY6EjlA+NbzB2o0A6fRXZe3fNnNVTzAlCdFxA0J58YYL8 JCG7JKK3GTTUvDxIKLzD2RSDF9GsSNzJdhaziJSWRDnBrAcTT/qsmQsVnIl5DHdO JtE1EJKFqxufmARhfyoePrEOfuvWQRrVzMPVqtrGiJNwcE/KIdEjxKxHPMfVpl+W 609aL/yh77UiAo+6XxBJX7EBtaMbNnto3+4Qnh2JLYz3i48Efsp3XtRAVjEqC7DB BfWJwUBVry5o2XONmpTirtQUfDQKl2qduHafIxhIgBwA9/iOdTcjyG8ORthRllnv Pr/NGWm+gwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRRvQiI wBDY46X+ot3L3lk7k+rsejAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy4yODkxMS5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWzfP6skAAAE AwBHMEUCIGmcvY5Epe1qJ6buknDohFHo5pHmY4lcnjcZFcr8EnUeAiEA/axDxMOn dNVu6K1THyUiOCAdx6YDD27KRZ+nbtCFDlAAdgApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAWzfP6lSAAAEAwBHMEUCID2us6pcdzsCPfj6SpXu3oRs Bpfs1sWTg7HwvFIDymwgAiEA6W7dzg9vBv2QiMG2y+Jfw9L0yQnmdFA28ArEdWz3 NFIwDQYJKoZIhvcNAQELBQADggEBAJVGIFqoJQajEgcoa46cpihXS/UAAwRrl4sP +/k81R8105PO1gBBY9yfICulFFvQGEIN9GwXJ+3cB3TYoUCyhtoQFb+IiN9PtmgZ qC3zpF75VEdc9RaEt4Ao3cfW6hlSU3/Ag6c4YZUVVpZnQ5HZsQ0cnuRRQI+b38Ny xw6equ4NOtVrrrrNbD8lLcBmYV48UyfxkoNnN7d35qjhESKoOfl6ul5BZ6BFrTd/ 5g3KKyO7bPhbkVu2ZVTbrIoar+4X/wE/HN+Hwg3wWFI7BKGoPDfTgMyW1mUqBJ87 uFfY6AWz/Il2p6GLkux/YCJMqt0jajjfsrLYcps8ZUZiOuBHQaA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4+J/37BPl7oBvac+InOh FLp3pTDYuv5NR/opyirF1n0VBf9Halt8b8Q9VsV+A8KxgpJg7CtQVf7J3LLyhLTc eYG8YkTSQX8aX4+HTUFgwj+yQLAGF3eV7RnVLl7tNV7nPgrDKwH6pBdbG3MxQlzq v0b8mmyVkkmKGlagxWCycFNCQ5J/72znnoeX2Ea3FXFQq9DjBCxDYFRVhBfKtvNG SxcGSZ0t+5fR/aR8R4c+kwWMbor6nKS3LTcNaok/TkxhqshKnYOkSxdAWZCx/xnE mbyDBjyfVFieXrYu0C9R5krvC60g/5LjZrMJFBXxNCzk3PkHQjl7IBRxxenQcxWE +t7UuyIGbgYgAyQN93Z+sz09ZY/c7z+RzGOhI5QPjW8wdqNAOn0V2Xt3zZzVU8wJ QnRcQNCefGGC/CQhuySitxk01Lw8SCi8w9kUgxfRrEjcyXYWs4iUlkQ5wawHE0/6 rJkLFZyJeQx3TibRNRCShasbn5gEYX8qHj6xDn7r1kEa1czD1araxoiTcHBPyiHR I8SsRzzH1aZflutPWi/8oe+1IgKPul8QSV+xAbWjGzZ7aN/uEJ4diS2M94uPBH7K d17UQFYxKguwwQX1icFAVa8uaNlzjZqU4q7UFHw0Cpdqnbh2nyMYSIAcAPf4jnU3 I8hvDkbYUZZZ7z6/zRlpvoMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312452425234842326481771458223418104794393 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 20:19:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 20:19:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.28911.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929688724417190688468261341912729692744641003047721842186351410893178128512600675042043573332249624497024733669448484996973579764528125773153315063837435051852838759931118566165227665361228341288184965215629027186182392641947944561270054450322034625995282737872714110501108102144704517999122834776302745083854448637644173755529039041020587877641940972953299869431555221907759435852804947051649577660650148973115603413248482233917480427233744668118541393639779341553413267754315395861908136204359747551000252186421824417806112661543471749226584489745690384247649143481499864867888978978584332235966921026397400603568309167775626492783366302291399316597851077138709389574798646561143042880488748686923227432980378584124924108714407804716132358554487507433167944710527864019007073813514947396673999914528994646613110296105408108832271375781806465428730315655993882763966522433335081220292560326440395801295236217391148420008074261003403856689424571949056699073526866452146265863399860337711892742041941326949247701614344431758157178170228601750207310291695957856491277066706156293296332491188778888326430883754312833640365393790472672323828543972058829756908154038713048249507247349051079385011225156099869505921712708918659865807273603 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51bd0888c010d8e3a5fea2ddcbde593b93eaec7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28911.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdf3fab2400000403004730450220699cbd8e44a5ed6a27a6ee9270e88451e8e691e663895c9e371915cafc12751e022100fdac43c4c3a774d56ee8ad531f252238201dc7a6030f6eca459fa76ed0850e50007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cdf3fa952000004030047304502203daeb3aa5c773b023df8fa4a95eede846c0697ecd6c59383b1f0bc5203ca6c20022100e96eddce0f6f06fd9088c1b6cbe25fc3d2f4c909e6745036f00ac4756cf73452 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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