chinaqua.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:f0:27:60:27:93:a7:f9:bc:bd:66:a2:a1:a1:0d:c5:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chinaqua.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:f0:27:60:27:93:a7:f9:bc:bd:66:a2:a1:a1:0d:c5:06
Serial Number (int): 346726668694328136128512949877558140060934
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:d8:30:6b:f6:d4:7e:ad:5a:bd:cf:0f:2e:cf:10:e4:ed:36:85:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:9f:1f:ea:8e:fe:00:23:c6:40:aa:b8:df:ea:03:93:02:d1:c1:74
Fingerprint (sha256): 71:b7:4e:7d:b7:68:3e:fd:41:3c:58:ac:03:b4:d1:0e:84:f8:b5:bc:69:b6:87:dc:7e:2f:2b:ce:91:8d:6c:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chinaqua.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chinaqua.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chinaqua.com

Other certificates including the domain name chinaqua.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chinaqua.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346726668694328136128512949877558140060934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 05:04:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 05:04:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chinaqua.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 592777267827724571762694268130517026005994982407368481792238982319477791719700517167295324714419321575302052956232004262936289523101022853527756562713595396439658715276533781193624253564319841908312064823099852261144411965196693108435261484247044958785047006496241082540083957877171873181490673671520428005876110484283639144151955072404660160688823111245364161168470336508724083958968563993530737445147379903406475906300571737745426819709062996251743875587470566256669092423637191570295493018667152376730794724260302555653638648258989950060195977319811319357986735633056584947508155186237107791729296363470327231742144390057219533493952816766577611378983104515522898447710515159796161535379459522722384166019179690283193211538791620499192984842639086308847459988961301598521709385636720042478881713649000059152883538514690325761353582024146602688222748632370891577185587569407603997551583466492228114414555597103553148557764366229756437744594936594157169890633377308276248732285875288329948150955962242022726028902990460600831285888935405291723094938888277894630334613404823127325636101913532555193480013679141948943231529148927822705169342047108574859453321091720030052072309862347371512112986655130133328888233676187768019959659229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ded8306bf6d47ead5abdcf0f2ecf10e4ed3685fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaqua.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001703d25cb0c00000403004630440220324cb389c9a6f37fc17e7523f2ccd4139ae5b3ca9e7a259acec785434a35571902204d1154384feadb7e94af99cda085f5b70d39ef0f5496d569888e2fa042cbd513007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703d25caff0000040300483046022100b0ae250cb180ceb263c4dcf1e9c0754dbf5dbcd6630cd59bf50d0e55f226a9d5022100c331b956953259ff640cb436b0e1dfe090d7a2b872ea6c8f1288c46bf02c328d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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