conwayliao.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:91:4d:45:e6:3f:da:3f:61:c8:7c:c6:92:ec:7c:c6:ed:44 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=conwayliao.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:91:4d:45:e6:3f:da:3f:61:c8:7c:c6:92:ec:7c:c6:ed:44Serial Number (int): 310780514492988622001899406744321744366916
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4c:a5:ea:a7:9a:2e:f0:83:66:41:cb:98:97:80:1d:c7:84:44:0d:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 92:77:e6:06:8a:b6:f9:1c:bc:86:05:c7:02:91:ca:6b:8a:8f:29:36
Fingerprint (sha256): 58:a2:cf:5e:6f:e7:9c:2a:23:e6:5b:ba:1b:65:0d:ad:ad:1f:d7:14:eb:94:e7:b9:cb:f4:8c:0e:5f:ca:15:0c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate conwayliao.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for conwayliao.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
conwayliao.com
Other certificates including the domain name conwayliao.com
(limited to 100 certificates)
cardion.com
www.pkorn.com
descrow.de
mypicproducts.com
www.test-maker.com
sellingas400.com
canadarealestate.mobi
www.equipmentclothing.com
www.handicappedsinks.com
www.royal-crown.com
www.neoscribe.com
conwayliao.com
blockconversion.com
www.hawaiistemcellcenters.com
flavorsofmexico.com
www.envn.com
tusd-debit-card.com
organicmakeupremover.com
property-ownership.com
mastersinger.com
conwayliao.com
www.pkorn.com
descrow.de
mypicproducts.com
www.test-maker.com
sellingas400.com
canadarealestate.mobi
www.equipmentclothing.com
www.handicappedsinks.com
www.royal-crown.com
www.neoscribe.com
conwayliao.com
blockconversion.com
www.hawaiistemcellcenters.com
flavorsofmexico.com
www.envn.com
tusd-debit-card.com
organicmakeupremover.com
property-ownership.com
mastersinger.com
conwayliao.com
Certificate
The complete raw certificate details for conwayliao.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISA5FNReY/2j9hyHzGkux8xu1EMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDgwODUwMDhaFw0y MDA2MDYwODUwMDhaMBkxFzAVBgNVBAMTDmNvbndheWxpYW8uY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo8kvCN4CnFlWKCiRnCumHLjZOa2R9saX ZoJ2ZCLF/cFTtkbZ3f+d+7fi9Zchk5zJr2Y1HirlN6N0dgtEVIShIuEbPByBjMyy T/TKSr2lqhbt8e0SuJ2uxjgZgkKIiI5TFa7QDl4rQeopcEJAzwhTp09Ol3OXFuHf nO1fxJs7lqMEhpjAL0HwIgspIUTGtRca5TgwvcyX5mHCuGz8nTZr7RomcUhYf1as 7SAByLYC7RZrjQaaGQWWFGWeqAFF/eaZEqbC62MD7NFdYMlljJleV5+gR/KKnhKW v/fMf+lQ6w4b/nXJ0zSvvghnuV9kzKs1rlCdWozhALZFX5Z2Nlf7ZYlG5pWmUVRB Mvez8KJXOpgyU852Wm6ufy26zubVODbkZSxGuZWsvyR/hB94KoVziv3KSYrzsSGT +SOg0aYJheUnWDfimFshVNWBVc9Tu8UTG8APMW+bD5e4keUWTFGXKtQiLXav2o76 +9eQVmeiW98TZFKZt3bE0RJlDy1tKAe7kY5bMESqCPq3cNleE5MPpAe/yEwhZz3A zs/bRgGsloPLdNy0FpmGlUm7GY2X6w6cu1OVOKjWwva5F72UlodyFXXvhzsjTBc9 DF1n89+MhHF5y7+bVGT4ou2kiBWg3iYM+aKkTjcP7SANROmdMttk3FH9DQMi/MCL hhhoBcFW0hUCAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUTKXq p5ou8INmQcuYl4Adx4REDR4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5jb253YXlsaWFvLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcLmNRpQA AAQDAEYwRAIgIQ6cMSOY+/e5xEfd+5giPWYOPgBe/A2fiiY7/NgNZgsCIEnrIuxp WWdres2SpzePc565pRKp36uRZBKfArqsYVgBAHYAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFwuY1GjAAABAMARzBFAiEAzo6ZnnXqlVsmBTJCFwHN qxXeV7y9DY+F0ALOulffqHcCIFg/K0oQHiXAUjewsbWnvdl63crWy8M6HQuHyOMe iTitMA0GCSqGSIb3DQEBCwUAA4IBAQBkIKCZvfHwsoS0KbmnO7aP7n58nO2TVi95 HboVN6DyQvgsiARNhDnvmCdM/SMS2ZwnRQPDUwsmIYZEWy3WQZ5zQBjXNQaDvDS2 TgxnlWjdwkgsr6B2mSfKs7DeBBgRNCdCzf6+8hds8C9IvcgC+wni+gDR8wubwhDj g7v+PYksQxcsMBKoVggQggItsP5hMesG75H5J4fYj+ICsJ76463XScQA6Cwc9Eqp Y5XZhvOSnZvyio7Nq2f3MOCef815PDfqCCPcaYyrFr5GjbYsTBQavLctCwESl0k0 NQEbe2KTwF+MkVjVeVNO9LYmvUr/A7d62vOPPjGQlJ+ptMij7yPm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo8kvCN4CnFlWKCiRnCum HLjZOa2R9saXZoJ2ZCLF/cFTtkbZ3f+d+7fi9Zchk5zJr2Y1HirlN6N0dgtEVISh IuEbPByBjMyyT/TKSr2lqhbt8e0SuJ2uxjgZgkKIiI5TFa7QDl4rQeopcEJAzwhT p09Ol3OXFuHfnO1fxJs7lqMEhpjAL0HwIgspIUTGtRca5TgwvcyX5mHCuGz8nTZr 7RomcUhYf1as7SAByLYC7RZrjQaaGQWWFGWeqAFF/eaZEqbC62MD7NFdYMlljJle V5+gR/KKnhKWv/fMf+lQ6w4b/nXJ0zSvvghnuV9kzKs1rlCdWozhALZFX5Z2Nlf7 ZYlG5pWmUVRBMvez8KJXOpgyU852Wm6ufy26zubVODbkZSxGuZWsvyR/hB94KoVz iv3KSYrzsSGT+SOg0aYJheUnWDfimFshVNWBVc9Tu8UTG8APMW+bD5e4keUWTFGX KtQiLXav2o76+9eQVmeiW98TZFKZt3bE0RJlDy1tKAe7kY5bMESqCPq3cNleE5MP pAe/yEwhZz3Azs/bRgGsloPLdNy0FpmGlUm7GY2X6w6cu1OVOKjWwva5F72Ulody FXXvhzsjTBc9DF1n89+MhHF5y7+bVGT4ou2kiBWg3iYM+aKkTjcP7SANROmdMttk 3FH9DQMi/MCLhhhoBcFW0hUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310780514492988622001899406744321744366916 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 08:50:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 08:50:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conwayliao.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668188069051397330410611573198192096355294931026588195686612804396850746686665755340583189120570991540850881985447025270274324265958778371566308089622730288493401422711817149194688262915496742047172599449165619152687993640379663744742736838678101963653518192449967895651964575709941770453750396182455782372434143886258540481407417457609144542701362642844792694102944113045446614471935681186935499604168288198114279661655872720641828272759897334673688173152676527280926358286001231507039077066328815256343960491743671973268964186849195779270084624910951723990370900750934912955645962202693762497096947910300846860837364667401929133778065506310962348822427875543809938581060369047293804932165682726148935329276596003954831845646148293428225648002858140769761845192422373643864198139479595358806939807773376985844536281428494444005161274853081856588701429924264230656737511096068138404998524524169030437351366514845442113448866179056941040209090837150475778421461031339265028355529204092529852021934338649160804907592485179955291009412627292380380581868585516273816447951579930704010854801930473179099821127301869599086831301936600264842039898612930917196457793553451516610549219211942927719855192747569391091384383903332252075200795157 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ca5eaa79a2ef0836641cb9897801dc784440d1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conwayliao.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170b98d469400000403004630440220210e9c312398fbf7b9c447ddfb98223d660e3e005efc0d9f8a263bfcd80d660b022049eb22ec6959676b7acd92a7378f739eb9a512a9dfab9164129f02baac615801007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b98d468c0000040300473045022100ce8e999e75ea955b260532421701cdab15de57bcbd0d8f85d002ceba57dfa8770220583f2b4a101e25c05237b0b1b5a7bdd97addcad6cbc33a1d0b87c8e31e8938ad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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