tw.genelife.asia

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:13:bd:3c:73:62:94:4f:46:2e:77:41:70:ab:ca:0f:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tw.genelife.asia

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:13:bd:3c:73:62:94:4f:46:2e:77:41:70:ab:ca:0f:47
Serial Number (int): 289606532151831132625924747012993601638215
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:67:3c:35:d5:ad:d2:ea:36:00:8e:77:ed:0f:10:70:7d:a6:ef:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:57:97:a3:53:07:04:74:46:a5:e4:9a:a9:b0:40:7c:e2:77:ed:87
Fingerprint (sha256): 5e:ce:ed:1a:ea:d6:77:af:18:81:c4:c8:77:2c:f1:e4:73:f1:cf:85:74:16:1d:57:f9:01:38:4f:dc:ed:30:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tw.genelife.asia

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tw.genelife.asia

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tw.genelife.asia

Other certificates including the domain name genelife.asia

(limited to 100 certificates)
twblog.genelife.asia
www.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
tw.genelife.asia
www.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
shop.genelife.asia
sgshop.genelife.asia
sgshop.genelife.asia
twblog.genelife.asia
sgshop.genelife.asia
www.genelife.asia
sgshop.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
tw.genelife.asia
www.genelife.asia
twblog.genelife.asia
www.genelife.asia
tw.genelife.asia
*.genelife.asia
tw.genelife.asia
sgshop.genelife.asia
*.genelife.asia
tw.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
tw.genelife.asia
twblog.genelife.asia
shop.genelife.asia
sgshop.genelife.asia
tw.genelife.asia
*.genelife.asia
genelife.asia
*.genelife.asia
tw.genelife.asia
tw.genelife.asia
www.genelife.asia
www.genelife.asia
twblog.genelife.asia
sgshop.genelife.asia
genelife.asia
tw.genelife.asia
twblog.genelife.asia
twblog.genelife.asia
genelife.asia
tw.genelife.asia
*.genelife.asia
sgshop.genelife.asia

Certificate

The complete raw certificate details for tw.genelife.asia in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289606532151831132625924747012993601638215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 20:09:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 20:09:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tw.genelife.asia'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681250518685961800709382860817501925399486742072713613628866840402027248534086006761336727337425594364561696637606347989228847924421702770172915685325379078028741423477794567693800279972154915305974546363205741221616762206200767016164286322092886611698025829128468176258167896607433094210372340426060363793102788629568504326152770599464214460311285913935039257896320826567511937681139986111146450574417515781953865496830117516790396840515821089747543188654621189701879971189460057073012165773513467909832098985899753651589160396874882119185456268106954517687088332098038821753687608235783367929466057089430873652881808647279160717698793007562949413146124930422531636154339191217175749492502388439775370968825329766239168582552633423491168934717213089434266618895462646471881984437636240255208408068083889826570654060976248498388222884680089886909744628414651774809984233520688114192555022568949827002889654638699900399769533745694008013446229985341388410937164603541099646233493130027174421180171316493936916939918590214265782702412071749840115631855238237888528014693779940223719552502472608169020429092035276959669266163279419437767253834797878341897385354429305245189616802715151718000162172746232414222920314536544556146385617699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e673c35d5add2ea36008e77ed0f10707da6ef1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.genelife.asia'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167dce70522000004030047304502206b015bdf6eba61ea0144b18f1970036f61eb591e492ac7c06038774a03b0a015022100b45a357e8c098e64cb471ef75fc56f7ecb2f334a3e5859242b8ab5e6e98f251800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167dce7051b00000403004630440220436284d0d05ce91861dc60bac2166560df30a0aaaee491f22c97fead2181360b022033c40bd1f052fe50344757d3f6dbb5a7c87689a5c69abfd774d3c409ec9d6b51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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