s.vpn.pixnet.tw

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:33:6d:9a:2c:6f:2f:bc:b6:36:13:51:1d:65:06:c7:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s.vpn.pixnet.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:33:6d:9a:2c:6f:2f:bc:b6:36:13:51:1d:65:06:c7:c2
Serial Number (int): 307343337044761572172911544575450906281922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:ac:1d:36:8f:5f:24:ec:d9:52:d4:e5:d6:12:88:f6:7c:0e:50:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:15:ea:3a:38:ae:65:63:fd:77:4a:e4:cb:ad:f1:ff:c4:3a:6e:a8
Fingerprint (sha256): 59:54:8b:cc:3b:85:cd:9b:be:d2:1a:bd:43:43:fe:37:c6:35:78:f5:60:21:8e:04:a2:66:32:70:9a:45:8f:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate s.vpn.pixnet.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s.vpn.pixnet.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s.vpn.pixnet.tw

Other certificates including the domain name pixnet.tw

(limited to 100 certificates)
o.vpn.pixnet.tw
cdnstats.pixnet.tw
s.vpn.pixnet.tw
appmarket.pixnet.tw
*.pixnet.tw
bill.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.streamtopic.pixnet.tw
checklogin.videos.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
checklogin.adexpert.pixnet.tw
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.help2.pixnet.tw
checklogin.adexpert.pixnet.tw
s.vpn.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
appmarket.pixnet.tw
api.i.pixnet.cc
checklogin.streamtopic.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
checklogin.staging-buy.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
buy.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
o.vpn.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
checklogin.www.pixnet.net
checklogin.www.pixnet.net
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.staging-buy.pixnet.tw
appmarket.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
*.pixnet.tw
s.vpn.pixnet.tw
o.vpn.pixnet.tw
checklogin.help.pixnet.tw
bill.pixnet.tw
s.vpn.pixnet.tw
help.pixnet.tw
colostats.pixnet.tw
buy.pixnet.tw
s.vpn.pixnet.tw

Certificate

The complete raw certificate details for s.vpn.pixnet.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISA4czbZosby+8tjYTUR1lBsfCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDIwODAzNDlaFw0x
OTEyMDEwODAzNDlaMBoxGDAWBgNVBAMTD3MudnBuLnBpeG5ldC50dzCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALIaQFloyilYYTmkSESFmosut0d2jeW1
OGhhQ9cHGrNXNg7m3v7T8bGiDi43HM3Qr/3nn0oVTovAz21G2rBke34dY9KESzO6
Ve5uBbf2teWaooj8tOHCJi0vgMyL/CeYHr9LcLUJqI6nagWoRE+WGwpolXDcLJoL
pD33IjSa/Z55VR/MFHnNgd5gB5Tak37OHIjuwF2XO7vv0o2hfGY9koylT3pU/T3y
GZapBGkK12cAikEzntpEZX1FhcePYvyWfy4rDn82Mp2Sfaobv0qwwqmuUNLLR9i6
4AFdUD8cYzrMIILGGNAMOjxdeBzzmSUgtNbYNDnOjwaGLXPusv9y7AUCAwEAAaOC
AmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU76wdNo9fJOzZUtTl1hKI9nwO
UCswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzAaBgNVHREEEzARgg9zLnZwbi5waXhuZXQudHcwTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0ftqDMa0z
EJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWzxN0+7AAAEAwBIMEYCIQCJ/XS9
SCNvBYBI9FmWebFkWDco0nO48yj197eXT1MgmAIhAI4i3E1Ae9ne/EzFxhfm9+KV
Z5v8fJVJ6ab+8al9PTGkAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH
9HgAAAFs8TdP7QAABAMARzBFAiABWSiu7OUjly/paHnECgxLMyoVpwwAaaOVPddW
ucs81QIhAObXSd2sZ2nu+kfeRTFSYYgXgrjOGrATIG7mMViQF1g8MA0GCSqGSIb3
DQEBCwUAA4IBAQCX22zJ8LlcukhZ0fJLM26dSoqOxDI8lF1SlHfPFdebPQBc1qFy
R2dw4x3YZO0B2sLD84q03Ik9jTEUj27tpYrVHG4GG13uk/8zwTXxKeezMvLzDQVR
M5peJsnxas1KkzHP/tteOZqc60EO/zeaDROfwr3uN9Sr5eCMfw/iWcN45g5O9wgL
GhNhz+DtMwwGLxrnts2FXcikkTj0N3JGFAPc2s6RpOM1CNIEUlR8pc9JUs1kGmYj
ZpW1dQp7h+u+vZ89uWaRiBMtfo1ZOt/YNluVLhGYBhveHwBG8I9S3B4j0DTgp76I
Gqma2G0zBvuB837PN2UgSKvcEVUXrsbPhqZv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshpAWWjKKVhhOaRIRIWa
iy63R3aN5bU4aGFD1wcas1c2Dube/tPxsaIOLjcczdCv/eefShVOi8DPbUbasGR7
fh1j0oRLM7pV7m4Ft/a15ZqiiPy04cImLS+AzIv8J5gev0twtQmojqdqBahET5Yb
CmiVcNwsmgukPfciNJr9nnlVH8wUec2B3mAHlNqTfs4ciO7AXZc7u+/SjaF8Zj2S
jKVPelT9PfIZlqkEaQrXZwCKQTOe2kRlfUWFx49i/JZ/LisOfzYynZJ9qhu/SrDC
qa5Q0stH2LrgAV1QPxxjOswggsYY0Aw6PF14HPOZJSC01tg0Oc6PBoYtc+6y/3Ls
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307343337044761572172911544575450906281922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 08:03:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 08:03:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's.vpn.pixnet.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22483363314151887340124975553391708533113526987706698799755545147242361908566260749461342139028996202130469595054494347017541629364275230626239122652388788632701060271847902107871354699380310575926546323866913016504868243702864923265616218882322733467425647366816854332605792868945545113133701859500678502090971243401185393428185705053282580564355051314018163474490207930373049787192002167199949394765283783224854358786823848277578869116846104109005603488417731683667052658949988642307061807935941294620452222648934638719068395884465722440411192000901471912762405653997206403917131427236113168454763882435258508045317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efac1d368f5f24ecd952d4e5d61288f67c0e502b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.vpn.pixnet.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf1374fbb000004030048304602210089fd74bd48236f058048f4599679b164583728d273b8f328f5f7b7974f5320980221008e22dc4d407bd9defc4cc5c617e6f7e295679bfc7c9549e9a6fef1a97d3d31a4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cf1374fed00000403004730450220015928aeece523972fe96879c40a0c4b332a15a70c0069a3953dd756b9cb3cd5022100e6d749ddac6769eefa47de45315261881782b8ce1ab013206ee631589017583c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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