sorp.munro.hk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:a5:32:42:fe:10:61:4a:2b:0e:f3:52:97:04:06:53:b7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sorp.munro.hk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:a5:32:42:fe:10:61:4a:2b:0e:f3:52:97:04:06:53:b7
Serial Number (int): 316682184829388265377193380493783135048631
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:50:96:c1:59:cb:4e:a5:8c:47:98:c7:fd:c0:11:64:9b:43:6e:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:71:6a:4e:32:5c:aa:43:36:85:fc:e9:d2:a7:bd:26:83:81:d4:f2
Fingerprint (sha256): 60:d5:37:e0:cb:a9:4c:10:9e:39:4f:c2:0f:9b:77:c9:67:3a:c5:ad:b4:e5:50:26:a6:41:1c:71:29:ef:2d:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate sorp.munro.hk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sorp.munro.hk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sorp.munro.hk

Other certificates including the domain name munro.hk

(limited to 100 certificates)

Certificate

The complete raw certificate details for sorp.munro.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316682184829388265377193380493783135048631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-27 03:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-25 03:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sorp.munro.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779525035271042924853691488552698500746321655997265740568237732886448782385958205665801207618958786092698647715148576773802059153642706384122904437476014421004464039269205939108030313335024493301434591169863801941241471649018304352049567732232975442675998606763753199454368102753954631243036205300271363011692617506483399104157807381931136058695322896872293711400233624166610392294046515118669980999402643041176467982730117997071661356943341935194554563230183632089394683433801230054881757481025142576207129249301111320247665373402073617265192497664490211115625007689194727085715574761416771135885813924475500898133882752884451572296548513500742215909442918778420929510870172091245319766911729250517658192708344292197475179242432342106054402030008412282304469585003837107485334767605027285125477780517617947200037290687018098454476398339228938562163403764000486050721769322968716167434954353633924003542306787240827775041980271296771577154700081814493118282335112709900124488021169313302955233446250418126185356802176052490369837002566485201876710158370116784277671002992540900343143084296678772686100816596949666682610778193921822751973402291740480033865147032996150689883418721187229683610991936656335980679241700326114327240442749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a5096c159cb4ea58c4798c7fdc011649b436e5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorp.munro.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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