www.michem.asia

Issued by R3

About this certificate

This digital certificate with serial number 04:ca:81:df:e9:bf:12:a7:f1:e3:b2:62:d5:e1:d2:41:d6:5d was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.michem.asia

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ca:81:df:e9:bf:12:a7:f1:e3:b2:62:d5:e1:d2:41:d6:5d
Serial Number (int): 417358814879666054074405966584959979345501
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:50:08:56:98:c3:4f:11:85:05:8c:1a:8b:30:28:bd:2f:e1:da:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:ae:2e:d8:0a:63:10:13:08:f1:bc:8d:3e:56:ed:23:db:bb:ed:eb
Fingerprint (sha256): 46:a9:ce:fe:e2:f6:10:7f:2d:95:2d:e3:c7:b0:c6:68:c8:e2:b7:fc:18:65:30:ac:98:73:70:86:b5:42:68:f1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.michem.asia

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.michem.asia

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digiprime.com
expandingpaper.com
ftp.michem.com
host.michelman.com
licomer.com
michelman.asia
michelman.be
michelman.com
michelman.com.br
michelman.de
michelman.eu
michelman.net
michelmaninc.com
michem.asia
michem.com
michem.eu
michem.net
michemprime.com
mktweb20.michelman.net
performanceadditives.com
rustban.com
www.digiprime.com
www.expandingpaper.com
www.licomer.com
www.michelman.asia
www.michelman.be
www.michelman.com
www.michelman.com.br
www.michelman.de
www.michelman.eu
www.michelman.net
www.michelmaninc.com
www.michem.asia
www.michem.com
www.michem.eu
www.michem.net
www.michemprime.com
www.performanceadditives.com
www.rustban.com

Other certificates including the domain name michem.asia

(limited to 100 certificates)
www.licomer.com
www.performanceadditives.com
www.expandingpaper.com
www.michem.com
www.expandingpaper.com
www.michemprime.com
www.michelman.de
www.michem.com
www.michem.asia
www.michelman.de
www.michemprime.com
www.performanceadditives.com
www.licomer.com
www.performanceadditives.com
www.performanceadditives.com
www.michelmaninc.com
www.michem.net
www.michemprime.com
www.michem.com
www.michem.com

Certificate

The complete raw certificate details for www.michem.asia in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u0JiR+RzLOrX1JM516n
qkExzm20ThrBujbOwz0OoPMlAi459qVeTTiPM12EPzw3Vp953iakPE5xnTn7M+3F
RkNzTzhWuP0JHCt3qXgiTGSfiNNMtaoVyaeVQFvPwzzSTzFvG1eWUAwRBnRbQbqE
o3/Jd5HLDxu1LP+BN0s7JLpMqNYtfTN6Zdl0cOWbKOtnXwHG3ncGvnYgQB29DmvJ
lCNostW9qPoPBp0o2QrBMPfbJx9BkKVQIuThRmK+G+T8rpOYE+c48GFQmYDQRsEk
z4Vz5bPVN6MmoY1tv1b0oL770YCjPO+nugXdKYPS1lGxI4FcjLaX0/mYDVqeQg2o
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417358814879666054074405966584959979345501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 17:55:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 17:55:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.michem.asia'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27636837906332376059666436296722070498676298630944794873835940920693227112082155652209522025386867139075350722519704259369212897901491009010394866748789185843387608779428073563616287882878867808632158460458701832629091126978311473014325003994392895068617326472056892714969240780431880942703836415656545490632753046032008466572792004226235176911529698475234483528694192304148384029079376276027628874858728663878559238908797334829990359833939404004363324201065736541113149606125302458074548906593825035039363708434226374725227755600030589911252661989633359058847425444989534783755065475130569838435926975316559464867863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e250085698c34f1185058c1a8b3028bd2fe1dab1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expandingpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michelmaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michemprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktweb20.michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performanceadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rustban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digiprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expandingpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michelmaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michemprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.performanceadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rustban.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b10a555560000040300473045022100a88a7c7befa7a82b8b3881a7838af9143c3d440cb81ca5810481c390832e00b802200877031ecb13623da979783cd5f71469f6bc0bf0c66efbb7d818f690ec23f79e00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b10a5558f0000040300463044022038621e02f8e6743b246e0b7e16159c66cfaf4fdadb9dfabde231b83cd91644cb02206a36a93bc469a56af6e758e9f392888e99a1f882321f898c52bfff308a99baaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096c9a9199da448e1971a66c612fb07c8912ab6d4b26c188fde812cc11bc17df698252b572a83e707a7000a1a6b3e83e8feb7acf09c29486038954bd680b5615181428fa13d672a239ae66b9aa94e8c1be83b41879fb5c7b0a54eac6988dbf744c0b5dd1c7685c4c37053284922cf56549a0e2dd5452d390b8ecb044cb83b0153385c92d67ed7f257ab9400c41840c9b1dc5003a6542ee2256070a2ec626ef814ff835c52af62b4a03da2e1e5503890a444706cd56564f621902986db8cc86f9bea3b31f0b43ad48718d0ee38c4316c3a605397a305494f1f54eb319bfbfa13f6d459d9cd9160399ddcabc3779c7ec551c350c87374c599fbe2e339a5aea777b2