guangdonglegal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:88:58:c3:6e:0a:15:44:c6:6f:40:9b:61:21:9d:9a:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=guangdonglegal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:88:58:c3:6e:0a:15:44:c6:6f:40:9b:61:21:9d:9a:8e
Serial Number (int): 302351977719131746329989507746097585298062
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:dd:ad:79:68:ae:20:73:27:d7:f9:57:73:eb:3a:7c:7a:ec:ae:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:c2:1b:32:14:ec:d0:e2:d6:23:0c:41:05:43:18:0f:23:b7:86:f9
Fingerprint (sha256): 40:19:e4:6a:56:6d:fd:25:e0:b7:12:21:da:e2:83:fa:79:c8:d7:bf:87:55:2c:ab:a9:b6:b3:a9:86:92:77:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate guangdonglegal.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for guangdonglegal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

guangdonglegal.com

Other certificates including the domain name guangdonglegal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for guangdonglegal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA3iIWMNuChVExm9Am2EhnZqOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTcwNjAyMjdaFw0y
MDAzMTYwNjAyMjdaMB0xGzAZBgNVBAMTEmd1YW5nZG9uZ2xlZ2FsLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALyVUjOziteKJpR5em7tdylEHuLX
Gjh13pcDU1HQ0+j5/pGg/RrmqftiyngaxvqPA3Zpw6k7PfVIP/R18M7Z607CawsG
0Gy1jyBh1qL+KSZIjfdjWoz1z+u5tP89484c3x3t2EVltY/+VxUlGz30T9xcx06O
XcDB7v/3ueisGmxHJaewH37RuCjMDBxEmeOphi3SV8vLbIaOxFfH87ZD+wIgFwqN
6FRhb5ImhXpUKBl7AjnZfHTB8uLZf/73yFk8ZFFm1lHRcg4pyyyVfs06nvWQw2bj
dNZg+iuEQgAZGA5mC0UKrvhgytcJsEZrd2NbNURiQr4i+OOX86scE7+Hhn8WJCKI
0XpNixDq+szVIpWtVpRlAjQqyLz48UiybGocIbhRAJXsCCCnEg4IPsF9rZ0Dvx71
/d7yfbTEch5WTyzjx2Vu+50zVvm/eVOZ4WPYk5QCHVp6Z415UtU9RdVGLS8us4TK
unMtSZSeLP0HhDX4sXeJWtM5at7m9zE/LRcLJwSxNxzdZFSMtgK/97HjYEwUwJrL
0epat710JKE6dnM9KMlR3NkrOv6uaT0TDLtvTQ1x7qN/6NLVUav1DuzKxbXkPbJi
esrqRnwdKgZ8qawWQwGN6j6kzkdSSZZz+rmf05vWjfBHb7YO34eQ/DiNXLy442y7
s+TNkzrP2WTxVXUvAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FMXdrXloriBzJ9f5V3PrOnx67K79MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISZ3Vhbmdkb25nbGVn
YWwuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A
AAFvEqpLSgAABAMARzBFAiAB3xq5NCDGXRpfJWwFH8O+df63GZvE81m4gCMxNx+A
JAIhAMZoKZjxOgkShbSr6IFsw/bKfqBV3+MIRdCig4XwtRWTAHYAb1N2rDHwMRnY
mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFvEqpMwAAABAMARzBFAiAe1uGynkFg
qOfVF47aHlgQvMXUDfhh4gKGr7zc7ZCKoAIhAK86raHFHU9L9XwX1A6RMsvD36iO
klBym4oQT/BLN4TDMA0GCSqGSIb3DQEBCwUAA4IBAQBN43fHmQdfc9nk8pkdQH8e
xCPr9IfXFCx5KSLEus55n3bk4xhmDamW1OBVrqgCPlk1iNbzP/dVjogDTVqxy5lw
jtY6dhw6IOBs/y0fNG4XXTaz6IBHJBLyt40RdjIlBGIelEJiKIOxVP5jNp4D0yMX
h+ShYogWkcoDQ14JAWhzZzC8axoUyUIUiQAgNe4wHk8WRx436IQK2ZsxePUl7beY
JTdeMtkWUQz4oN7Z/pDonq2THh4tip7xbi7G6zoJUgwdVLHBazHSp5yHrxMzzXki
8aXz407i0uAaksjjcH/M8oj4bsAEecx+OHapb9CnbMeN/mBnPIGIv7DZR9uQfvup
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302351977719131746329989507746097585298062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 06:02:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 06:02:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guangdonglegal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769352682231361712036237337771102026148669397847661344913579972202438539435491258913129770103208311243671554169812983991745830405623620417130153645065583146696430430457248116147329368431925107310463089461508588786731829496154811443847827689573526389168157236006480517793501525038831644986405301382080767464054238360400590037010343571301170004406626996486631528346329499849000862283383443787819670632728950250882573625417134808344663089409751447685935904228498297931803510789983116179735468961283155232896114182126974400958161426273757801747016217372562767694192651312407880337894846657996009459404551055952698080433495380070094995580354195811753539869815461899095771923059075095253404713705664023178438230463774622400961842332128025612508236651327536960787300577828534286542999897555048018366776957640174003273995031856396328670441204027611265644600858789602327590025567453677116055827653276263522283633532034454381802512627991143294176331450064484728313818304295167935179707958064153183245514370844490586495253959313914293233265688811193009862436163134824019569309494775728730092470378403273933214117820492050355563487711449676328207241199560083030942834648737245071466379289522827703761328959079341466001885793657051653410211067183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5ddad7968ae207327d7f95773eb3a7c7aecaefd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guangdonglegal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f12aa4b4a0000040300473045022001df1ab93420c65d1a5f256c051fc3be75feb7199bc4f359b8802331371f8024022100c6682998f13a091285b4abe8816cc3f6ca7ea055dfe30845d0a28385f0b515930076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f12aa4cc0000004030047304502201ed6e1b29e4160a8e7d5178eda1e5810bcc5d40df861e20286afbcdced908aa0022100af3aada1c51d4f4bf57c17d40e9132cbc3dfa88e9250729b8a104ff04b3784c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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