hengqinmall.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:ca:f2:6b:36:e0:a8:9b:64:91:dd:46:74:ba:43:50:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hengqinmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:ca:f2:6b:36:e0:a8:9b:64:91:dd:46:74:ba:43:50:ec
Serial Number (int): 343954953355701843374679702944615627968748
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:af:90:8a:b2:0c:01:80:e2:a2:83:05:e6:e0:0b:d2:09:e9:cf:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:e2:3d:5b:07:76:df:83:37:8f:3d:c5:6a:6b:cd:ca:e9:58:d1:95
Fingerprint (sha256): 4b:b5:83:a7:3e:a9:8e:27:d2:46:fe:8e:a5:f2:ad:71:76:38:0c:3b:5c:ba:38:fc:dc:cf:53:a5:82:6e:6f:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hengqinmall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hengqinmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hengqinmall.com

Other certificates including the domain name hengqinmall.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hengqinmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343954953355701843374679702944615627968748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 04:08:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 04:08:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hengqinmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751856310325594605052200617376902537215376763129769667432896662212655546404750367126108100173793964176159573282450166096531850459274093710458223441570696160230126074032267063291035029659757557734775656147210180507148268707009691429358763774515570990159641501179449392800530969607694209026119758680233861037379515781665777171338123551230812650738346468347173016845805249041231933888041233493364071206562455804221725652775234380414241128137944391998426234696924648847683878004817734447970340253433440820029324281725916725980177678666339143510576882445230497617635745111572700885902515091700895987595379310385661392139738249441466439580124725966881762005071460985528319744460948408822605858726966649643579826634235438481624511731291892234897589226686579836287765509490033835482699524567216528168157607907203994012633204095462155970235450766032237487529765027066138068499440757118919255969881575058571784008928865654806613280663151956940983387236967065069182190172711154640056719689556339708688504046021141073185801518200374414547512264149095152682999418914113787572181752044777713995256145434002075206353642188876949677715993049579143472577218525031293939899978334229588303640889577059470657531949396558853640986577304353116182825338039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98af908ab20c0180e2a28305e6e00bd209e9cffb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hengqinmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f9d4e0c920000040300483046022100a3c8e65603acbd0b6aea9be6fdf2bd588f2aedb672f1c7beee90ee5850b18aec022100bf9f1fb1483c48b9923f924c8664ed9352e75c56b32003edbc02ffaf340841e500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9d4e0ca60000040300473045022100d506650ad2de877f275b4cad3b1bb5d44c1711ba22b64cd5b01349cba057f3460220305f6beadd2fe041e3a6067d7e7b4bdd97325a2a54ebd8eba0e1c09ca7e7b2b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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