foods.tuieng.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:8c:95:04:95:fc:8b:30:43:20:b0:f7:76:51:3c:f4:a6 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foods.tuieng.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:8c:95:04:95:fc:8b:30:43:20:b0:f7:76:51:3c:f4:a6
Serial Number (int): 267648806064512235314043477547137265104038
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:1b:66:55:78:28:e9:f4:c0:2a:a3:dc:35:00:11:d6:ca:89:87:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:f9:dc:12:3e:4c:a7:99:2d:e3:39:29:d6:13:18:1a:ea:27:8e:e8
Fingerprint (sha256): 5a:95:26:7a:ab:b8:e0:ab:63:05:d1:16:29:e8:80:5f:0f:4a:07:53:88:82:e5:df:2d:76:00:a3:89:bc:70:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate foods.tuieng.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foods.tuieng.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e-commerce.tuieng.com
foods.tuieng.com
gadgets.tuieng.com
gifts.tuieng.com
jewelry.tuieng.com
sports.tuieng.com
technology.tuieng.com

Other certificates including the domain name tuieng.com

(limited to 100 certificates)
webhosting.tuieng.com
yoga.tuieng.com
law.tuieng.com
tour.tuieng.com
hotels.tuieng.com
arts.tuieng.com
tuieng.com
homefurnishing.tuieng.com
acne.tuieng.com
automotive.tuieng.com
education.tuieng.com
burberrybackpack.us
legal.tuieng.com
law.tuieng.com
miuchua.com
tuieng.com
gaming.tuieng.com
law.tuieng.com
seo.tuieng.com
law.tuieng.com
tuieng.com
burberrybackpack.us
law.tuieng.com
hairstyle.tuieng.com
diet.tuieng.com
tuieng.com
yoga.tuieng.com
movies.tuieng.com
foods.tuieng.com
car.tuieng.com
gardening.tuieng.com
seo.tuieng.com
financial.tuieng.com
tuieng.com
arts.tuieng.com
diet.tuieng.com
tour.tuieng.com
tuieng.com
forex.tuieng.com
car.tuieng.com
acne.tuieng.com
weightloss.tuieng.com
xiongp.com
education.tuieng.com
forex.tuieng.com
seo.tuieng.com
yoga.tuieng.com
ruinun.com
law.tuieng.com
tour.tuieng.com
cooking.tuieng.com
weightloss.tuieng.com
tuieng.com
law.tuieng.com
sports.tuieng.com
yoga.tuieng.com
car.tuieng.com
niangh.com
sales.tuieng.com
niangh.com
clothes.tuieng.com
mortgage.tuieng.com
tuieng.com
law.tuieng.com
health.tuieng.com
arts.tuieng.com
health.tuieng.com
foods.tuieng.com
legal.tuieng.com
accounting.tuieng.com
clothes.tuieng.com
gaming.tuieng.com
marketing.tuieng.com
forex.tuieng.com
travelling.tuieng.com
gaming.tuieng.com
law.tuieng.com
automotive.tuieng.com
tuieng.com
sales.tuieng.com
tour.tuieng.com
computer.tuieng.com
pets.tuieng.com
homeimprovement.tuieng.com
pets.tuieng.com
jewelry.tuieng.com
yoga.tuieng.com
arts.tuieng.com
business.tuieng.com
acne.tuieng.com
weightloss.tuieng.com

Certificate

The complete raw certificate details for foods.tuieng.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslVDqyZO+AK60lDvCNHq
XdXFhCMKRKwD0N871NsohPlyJVXvtH1eQFqzn9wvTU9V4dubp08I40CKf+ylTj6L
vRBSqhKBckMH+chzUn1jxWuxQ3SEbEUtNXbQj9uC3qNuOGiysApZddrbEV4iS1G8
mPoKMZzes0jM1VBgmvfFbIkxvr/n0cNTx5q+KL+uFgVzCYVQ1s7gYj7IHVl3e/+b
8xWGLVZf2zNMEptPQActpOjusv2gL8QE7EBPZFF7SQUMZa+U2b8xtUZ4rUIY3tUV
KT6ptpBWmWAy4EfbqzKfQKRnyxV2udnmBmJZxt9Bj5Qdm9gqmSUQ3mkUBBom3zlK
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267648806064512235314043477547137265104038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 10:32:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 10:32:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foods.tuieng.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22512463692276433773899859378525405281057238090581367554531593728781003081683705050883350975959320329403218826916099633766186953095869777097188592935233529897796005177254613412032502332139249090874259052664476609896194175470589155140117436982107634180403778239004401399608258061433852190057411630741797048163982292479682226729093023887857082785350558793613845183077043403660642100966309465795671854342966571048626419140501443041207404340668499737185037954181623792787384321322851534769327863271844663589672171988277562308601935076317438002060002553790851957927653897204902067346459160214851140727285633472687351876099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e21b66557828e9f4c02aa3dc350011d6ca898760
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-commerce.tuieng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foods.tuieng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgets.tuieng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.tuieng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewelry.tuieng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports.tuieng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology.tuieng.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016615a68ff00000040300483046022100ff8402d20e5259c9207ff229b8d89dd4dda8ed6b0349eeeab07bb30814981df0022100f9d72080cbb81e21511cbd7188b1199e867053729c7848e1d543627236547c03007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016615a691ae00000403004630440220107d55d756ed3f99b2e9ca4756086d5e55c3bde06813a281798905656a0f151402206a287c956180bcb169a8cb961a5fadd369a2f18029de1cdb239b0881e5c01afd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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