huapingdao.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f5:fa:3a:33:a5:24:49:33:d6:7d:be:d0:31:f2:00:6f:76 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=huapingdao.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:fa:3a:33:a5:24:49:33:d6:7d:be:d0:31:f2:00:6f:76
Serial Number (int): 345038646890561454034451446243425790226294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:5a:05:2b:5f:34:9b:d2:71:ae:e3:d5:ee:58:50:95:e7:f2:f6:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:a4:6a:dd:2c:17:3c:30:d6:ed:e4:7b:40:f3:03:f8:46:d5:b6:18
Fingerprint (sha256): 59:97:03:7e:3e:d5:d4:95:cf:a9:d0:d5:64:41:57:84:8a:70:ac:0c:17:4f:8d:ae:a0:93:19:4a:de:f0:42:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate huapingdao.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for huapingdao.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

huapingdao.ca
www.huapingdao.ca

Other certificates including the domain name huapingdao.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for huapingdao.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApZtelJc7nEtKNe7XLaAJ
J27MtZ58bUTJ0PCNcWDsO4eGDytuG0VH+wbgcxz34CMLeZh5A8E6qHbnjN/j3rUt
LLGjFSR7D+2mSsp1PJ4pw6f/rrH189EquQ/qH7TXeVgWpA2g78KIkylSjGtva6ae
z3M5E+4FKIiaTzx5hG+TiHGRsYC9n/cwfgCN5nbk/7dF3IiMEJq2ICtyCoi67yQF
go9HQ426BDhURvrf946CiowihgZB0RRfakZJmLKM5D0x61w2FB4H5QetEFn5CRtV
qnxzsnh0+FyC8VyWF6bPu47iMqcVgEv7zzXPpqCxFG0L4hPvsBHQTgCXMNIzLrce
FJBdi33MBdkYRjs8yxqtLKTSqQyI1u3scTYJN7hIZqLV4AlXZtpkQVQHtRlyg42P
iFDobcJg+E4vfP/nP3A1619RXWdl2I+PIQolAE9xH1FFmZXiUUurWeeQNuYLH4K6
XMZmrO/SVGnGPl4/kzHezTc9UozkPODPW5f2MzaSWyi4HkvHEol7WfUqqnpAv/5j
9IUSFTiBqldsexHMXnHL2niKNVBXT+bij3rjRBiVxil996clai9Uz88fXVIeaG0H
9ov8HldcP+4yaYHaE3aHbJADLhK/UUq16XNDbkvpAmcPAes0u3LYyikCs3iLZJJR
wtyN4YPDYMZ2pM8AK4mChrUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345038646890561454034451446243425790226294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 11:58:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-02 11:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'huapingdao.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675617255890068529434553940881310373049715090556622119313130246354908953834523540985802451524777398633325681944516534024146349350984036088180096853833664747821346665465196227291551603240428840719969153935053710795192098261845597981345693901550541386576994851711267870560258240734281879539537347553716879166852833759032687057131031534779982930523520157706623754909766830824072884699206813037936515110430775031357671908902775445211762707531518398466364803148342731772438041435458868975332535290670866232824973656410575560738169457641416664690030984283184064101524476474302268406570644224113968757105587137347472096872793223484194604398925854517220816581629417775253142940416064945866487806864501101191240313000106711260343687111384699248289880230176474922244696402562117621793240608557676387733061654047840528787346833671930572715752038899313462484611798891232913575782781388487801011656276533014644980681631784306443989826851395303318740375760283916861186536723160179308437426952621425948666689581699210897173599894551320460698115698091977293482377946820394007844949578014869703964410402308567687760695882568766707412204933094870912861133464035816641420460627902386028952334346215033929224878107317066552764948999006314534075615053493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							815a052b5f349bd271aee3d5ee585095e7f2f6ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huapingdao.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huapingdao.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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