lrc.cn

Issued by R3

About this certificate

This digital certificate with serial number 04:67:bd:70:5d:77:31:b4:b5:19:79:7c:53:e4:7a:ce:24:c0 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lrc.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:bd:70:5d:77:31:b4:b5:19:79:7c:53:e4:7a:ce:24:c0
Serial Number (int): 383750035044056781030046235633194695009472
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b1:62:d7:3c:cd:9b:b7:61:06:29:a0:c1:f2:c3:bc:bd:97:fe:3b:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:78:76:b2:a2:86:48:2d:f7:d7:9c:4e:e4:f3:3f:83:85:f7:72:85
Fingerprint (sha256): 5b:b5:e1:bc:06:4e:73:b0:50:0b:e5:8b:a0:82:9a:38:b9:25:1a:cf:f0:e7:cb:94:84:8d:af:f8:ce:c8:9d:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lrc.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lrc.cn

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

en.lrc.cn
lrc.cn
sso.lrc.cn
www.lrc.cn

Other certificates including the domain name lrc.cn

(limited to 100 certificates)
lrc.cn
lrc.cn
lrc.cn
meetings.lrc.cn
lrc.cn
*.lrc.cn
lrc.cn
lrc.cn
lrc.cn

Certificate

The complete raw certificate details for lrc.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383750035044056781030046235633194695009472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 03:15:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 03:15:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lrc.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3127242230718652483007829589415970388510708646245959962140758515026983086843476692802145993205918765693536561605025202401312892853255336555219943968543357016101674762296138778218249054450736653825775749529766634286447937780206615902306706045715433282844975103531467831440878232502633485590561550176849490140687779608391777076525297607813323201365613767564039953881856728347577245670956037596838709518597851148045116566011225503674969983827772602969871451611776382856337537869253028121311324365463353254573214884348352746392244680818732122996656933161029316727739819139147816784254885439252177645447541199091361494944152397692168369598592975089875379070907155323392126108704743408692431394486597291131695423178778701641044692716490825337054338279845685835652420515655987145888363142993579155748981943636953756777338143208059650463927616629090061383747234145168395665720611450786101113962403042808386847120799697258012769784363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b162d73ccd9bb7610629a0c1f2c3bcbd97fe3b40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrc.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001863eaf59c30000040300483046022100970d7c16f41649d25ba36675c40260272bb21a74bbc4fa51ed627dd76ceb83e00221008ab67b6908e708b80acd4821f389681c09790f63299b302ee86742d43e2636b7007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001863eaf59b700000403004730450220760bc22e6bedb0f402749a48d2293f48dc1fe6ca071a0e94459745aacad001d60221009013714a86615a0cbc49e436ca7f3aaef57d409b9be1d2b1f3c99d624c4dff41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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