indocina.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:26:aa:c2:7c:59:a3:44:90:93:00:b7:97:2d:ca:66:42:53 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=indocina.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:26:aa:c2:7c:59:a3:44:90:93:00:b7:97:2d:ca:66:42:53Serial Number (int): 274494566325271019269299283951019174019667
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 09:e7:35:19:b4:38:57:b8:45:81:66:ab:56:74:23:b7:0c:49:97:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7e:a5:58:20:c1:4d:36:79:a2:b2:9b:3b:0d:3f:a3:f9:17:d1:67:0d
Fingerprint (sha256): 4a:ec:08:5c:b5:b6:a1:cf:c5:ac:11:10:1c:7d:93:61:c2:d5:75:d4:06:73:45:94:39:33:44:0a:28:b0:c3:69
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate indocina.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for indocina.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
indocina.com
Other certificates including the domain name indocina.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for indocina.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAyaqwnxZo0SQkwC3ly3KZkJTMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTExNDQ5MjhaFw0y MDAzMTAxNDQ5MjhaMBcxFTATBgNVBAMTDGluZG9jaW5hLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAL9ZV4LEVOLizGPQBjBkjPpHU32Sxuz9LDgb p/+HkiRsQm42xdYOBj11zLqcWlmT20SMEP8TjoMYVN7lejAO8b1lAUCxIlXQjuoj W6m+kcu4gNc6OndGepTG5mPiUL0a+um8vRfCyow+3XW/0pG9cKd5oPWBFEYrXj7y R3A4hiMXX5cM3Y+Rh9yB9PSMbIGwwTvDIVJIGQi6q2MrCmQyTYQS4+eoQ99b1b+6 ak4hBCuX/GDNctRVGTHM2yY2mcI0ojgptQnrS+MgOlNVz3iCY7ZFiZHksD5MtDMq oZ1ZsRphzRmdftejgP2CXLtPkyjmDYvVXBx3MtRrbRIjwXMaoSa9aXR+qH9LoX4/ /Rco32E6UAiyTj5qxw9XcEhLTk6V0x43m50fw2o3qZPr1/1wUvh8odWt0zSjXqN0 XQUvX8qDHCPXoWw7rBD8iiH7m6RjPf0u5DA8Ww68EXfUlXX1V/AUf9aQaBp6VrYZ fk7E92uTcrFJOgoRzXcBMlu8Gc+jKuGjL51aU9tkHtrpIaWIQ9XUEAIx1RTmVHOH x1sJmYZ4XzGcfiCDAYzc4rLBfyuX+zki0FwXtlBuH6gxCe/WIXzQQoWDN/pKfuwN 04YxW/JRRMoSrwJ/D9onBAVRP/iOR39aPrkI6eTsU4Yl2aVJFauZcQCPyixx3jaQ iz9oVEnjAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAnnNRm0 OFe4RYFmq1Z0I7cMSZeLMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMaW5kb2NpbmEuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADy AHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu9aagxgAABAMA SDBGAiEA9hRpIouPp/tnJX+ZUg6VCoJ/YqwVsnlzs4lJhlxU1AACIQC3XGMKMlMu JoX2WokxLFHIGuZsF30O/MkBlJlo2xdBFQB3AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABbvWmoPsAAAQDAEgwRgIhAL5RPBhRKliq6tiXRRz5d4Mj l8ss1wCHUqhbLU3Y4HZ1AiEAsL/xJ4vhkl4vAnU6pMGX1njRRc4g4/v39Qv0mQjW 8LgwDQYJKoZIhvcNAQELBQADggEBAF4q8JLlelK8MJgFiasB1ZbWQztkiJu5FGRl 4zk3shPYL7J6kd6CKRMk7e5qVIWqyl3BQcGKlC78q9tarz41dznAvUQSxx/W52Us AIiiFmfbSP7ukeck7Ar9RTnWVMwD2qrP02UPAWeTYXm0eS3/PoSl0UxKCexnQrGq TxSp5TCdS1tEtKB6LOtQPx1sw6zrP8FUWiw4YSYVRaIYGhW3Kr4YOCt9WOkh1FLT 36WiFYmjWnHWXhv9Y7dZDbpMA7GXN/2XjsrR0SvvZqzN3gz3JREGQu2N7Q7Ym1C4 WcTXO7KqPyzUpJqbin4LfxYnNz3pWl0pk+K6n7SlKthaac7MHZk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv1lXgsRU4uLMY9AGMGSM +kdTfZLG7P0sOBun/4eSJGxCbjbF1g4GPXXMupxaWZPbRIwQ/xOOgxhU3uV6MA7x vWUBQLEiVdCO6iNbqb6Ry7iA1zo6d0Z6lMbmY+JQvRr66by9F8LKjD7ddb/Skb1w p3mg9YEURitePvJHcDiGIxdflwzdj5GH3IH09IxsgbDBO8MhUkgZCLqrYysKZDJN hBLj56hD31vVv7pqTiEEK5f8YM1y1FUZMczbJjaZwjSiOCm1CetL4yA6U1XPeIJj tkWJkeSwPky0MyqhnVmxGmHNGZ1+16OA/YJcu0+TKOYNi9VcHHcy1GttEiPBcxqh Jr1pdH6of0uhfj/9FyjfYTpQCLJOPmrHD1dwSEtOTpXTHjebnR/Dajepk+vX/XBS +Hyh1a3TNKNeo3RdBS9fyoMcI9ehbDusEPyKIfubpGM9/S7kMDxbDrwRd9SVdfVX 8BR/1pBoGnpWthl+TsT3a5NysUk6ChHNdwEyW7wZz6Mq4aMvnVpT22Qe2ukhpYhD 1dQQAjHVFOZUc4fHWwmZhnhfMZx+IIMBjNzissF/K5f7OSLQXBe2UG4fqDEJ79Yh fNBChYM3+kp+7A3ThjFb8lFEyhKvAn8P2icEBVE/+I5Hf1o+uQjp5OxThiXZpUkV q5lxAI/KLHHeNpCLP2hUSeMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274494566325271019269299283951019174019667 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 14:49:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 14:49:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indocina.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780635778335161925651928563997676110651488186313605257355977947882151549708503203131336710581055351437746045384691728907591935221718443788557388772584366065111629742554645065227603489735820581052080369011987676561861299727932113362696637962029183036198071615021215541730251830076215934074198443982096297108217916158262234576893397002863350154219586396148190897300223280042890883098319206993251347168352821562557891730931409440148237591030903816861409500023019853235837355322986116090794688387347054175491434524840270389627870999359030809131886976795668825191608551550480024953761013154677255713246489713006088115494279924879096744262242681155955002867501672869465315750402440787333085097533310964513783034544078615971068232393336815460982178505369777439562674449295643563937522163200192783684773834247860187668980408316817813053323630407012023016396881463215413707548829737715376071682975064894182042988896019964642840820792443478982774880800262144677232230120582931297432021835449269730895887853699686887979793755416561101813399141975718531048355735397517158509261993331447100728023390696564211117801790786308844497544970976698783296122815582132377546508897118678591312925316321545132235104498983555786810341879384371466468249061859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 09e73519b43857b8458166ab567423b70c49978b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indocina.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef5a6a0c60000040300483046022100f61469228b8fa7fb67257f99520e950a827f62ac15b27973b38949865c54d400022100b75c630a32532e2685f65a89312c51c81ae66c177d0efcc901949968db17411500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef5a6a0fb0000040300483046022100be513c18512a58aaead897451cf977832397cb2cd7008752a85b2d4dd8e07675022100b0bff1278be1925e2f02753aa4c197d678d145ce20e3fbf7f50bf49908d6f0b8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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