cdn.sch.my

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:d8:4c:b1:e0:89:90:e8:b5:20:f9:23:9d:94:4a:f3:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.sch.my

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:d8:4c:b1:e0:89:90:e8:b5:20:f9:23:9d:94:4a:f3:a0
Serial Number (int): 341931007858049190672809782617407872496544
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:25:4b:e3:10:34:69:9c:e0:e8:ea:4c:34:28:0d:a5:1a:0e:6b:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:3c:df:e2:07:8c:ec:29:1f:ae:12:fc:7a:f2:98:15:14:c0:28:62
Fingerprint (sha256): 44:fe:58:35:37:1d:be:49:b7:0c:2b:f3:c5:37:9c:5e:4b:50:e3:f3:ba:fd:a3:0e:40:b9:9c:41:2f:b6:d0:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cdn.sch.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.sch.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.sch.my

Other certificates including the domain name sch.my

(limited to 100 certificates)
sni222288.cloudflaressl.com
x-mans.sch.my
forum.sch.my
sni222288.cloudflaressl.com
elkarte.sch.my
flarum.sch.my
elkarte.sch.my
sni222288.cloudflaressl.com
elkarte.sch.my
flarum.sch.my
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
alumni.sch.my
server1.sch.my
x-mans.sch.my
x-smrag.sch.my
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
domain.sch.my
www.sch.my
sni222288.cloudflaressl.com
server1.sch.my
flarum.sch.my
elkarte.sch.my
x-mans.sch.my
sni222288.cloudflaressl.com
x-mans.sch.my
sch.my
sni222288.cloudflaressl.com
flarum.sch.my
elkarte.sch.my
sni222288.cloudflaressl.com
elkarte.sch.my
sni222288.cloudflaressl.com
sch.my
sch.my
sni222288.cloudflaressl.com
elkarte11.sch.my
x-smrag.sch.my
sni222288.cloudflaressl.com
elkarte11.sch.my
elkarte11.sch.my
sch.my
server2.sch.my
sch.my
flarum.sch.my
flarum.sch.my
x-mans.sch.my
cdn.sch.my
sni222288.cloudflaressl.com
server1.sch.my
sni222288.cloudflaressl.com
forum.sch.my
sni222288.cloudflaressl.com
blog.sch.my
sni222288.cloudflaressl.com
server1.sch.my
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni59159.cloudflaressl.com
x-skda.sch.my
cdn.sch.my
www.sch.my
alumni.sch.my
alumni.sch.my
elkarte11.sch.my
alumni.sch.my
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
x-mans.sch.my
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
www.sch.my
sch.my
sni.cloudflaressl.com
elkarte.sch.my
flarum.sch.my
x-mans.sch.my
elkarte.sch.my
ipupdater.sch.my
x-skda.sch.my
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sni222288.cloudflaressl.com
sch.my
sni222288.cloudflaressl.com
forum.sch.my
sni222288.cloudflaressl.com
hub.sch.my
forum.sch.my
forum.sch.my

Certificate

The complete raw certificate details for cdn.sch.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341931007858049190672809782617407872496544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 12:09:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 12:09:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.sch.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868060770848319471887308924210724751380993846634521548643825386650426755766597773259083469420388108696100216356473328726235627308995007161075676719301380679457954400936629407298458620275275771791677480231694529851862864326441948503664737732206003457210954683525716018724514248869698472443697179174213441095705884051618802132409087602075493964903436395804947068161199952961039127907158995512926275896004674700170561150281824399554345556171323068231350413426120351083298607419697086149347618163461870740584886146250346315127711362871918106816363774347342296970318696490937009068589987757851301314591108309947633696193917846464633807345753978455224095578720948382737180109247589651192381624600945105520871520173460928756598031672910814319680140826477608549454628004052592561947133748939900544034404316539180225077075365250701379265990919754397621931177474703751984210714364464319275541817387286524789216289203857243011327665684361282750657730882630937505252755871119848836818778974593727405150252153535658323714494929891286484319974929535536665956869086116614421060581983545233148148275380403007789388160957998479613298208956330487569241205062919803539424251012335840683241524667687047340840788448047939552269385702746056159487270865691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c254be31034699ce0e8ea4c34280da51a0e6bf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sch.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001631185830e0000040300473045022100c95e16d79a7980817139635a20b0f554313dbd692da4c77772a4e1f28c688960022034dfe13ea72dad567c8ba8fa08cd2475823ba8991943bfa7572ec51018ca676a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001631185833100000403004630440220351fecd67673016ca97742bbca67198bdd7f95ae9a909aebe572f17562baa961022024d2dd224a10a7bc97d5e517ccbee52556c728399a1630fd8a3ff442a614164e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ec404a9a9f82b74bc172b1fa9ab326684791bbab7d0877e3aa72be9d0453ee3d3a1c74f18d07f906056f3b04ee2e01fa442f28211e75531213cd7f27a064b82da0ce39c18b90bfa74207675a48631a5ba8e6cc9ef537497997cb8b724d4c388e34efef087ba3a415b0402c124f4997a3f63ebf17c8dbe450813fce7e2670af18d82fd490843a22d81db8ec67c99e02d994d49e25fd932cb9d74df2cf4886e8df306955ec27ebd20f0ca865564618142ba813a60c5e77cc9503272cb828d43e44285623823937ddbe920b549db4a3941ec5c23c5a6ab74e4b2c509a6b28992f9ea8aa37c1435d8357a76fe892a3bf6201606c3c4fcd363345791df13b246daf6