www.28911.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:c4:80:83:28:32:a2:a6:df:81:2a:c0:2b:a2:ed:58:d1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.28911.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:c4:80:83:28:32:a2:a6:df:81:2a:c0:2b:a2:ed:58:d1
Serial Number (int): 281334431038047362253222035237851747932369
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:44:b2:f5:b0:1c:c8:63:f4:be:8e:ca:46:88:81:49:6f:d8:f2:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:7a:ce:12:c0:26:28:1f:bb:28:f5:8c:fa:1e:39:1b:28:71:a1:e7
Fingerprint (sha256): 72:f5:c4:97:7b:e4:a8:f9:35:e2:0e:9a:bc:a9:fa:b5:b4:93:78:54:df:7b:9d:29:ca:c5:8e:55:86:97:84:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.28911.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.28911.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.28911.com

Other certificates including the domain name 28911.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.28911.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISAzrEgIMoMqKm34EqwCui7VjRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTEwNzEzMTNaFw0y
MDA0MTAwNzEzMTNaMBgxFjAUBgNVBAMTDXd3dy4yODkxMS5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDHF4CxUmhazpFUbNEfByJosIvEh89JPKAZ
rGlOJYEXETt0wmcIUIwHwtOcuyaj3C8lMhlM8otHR6dHcUGMTdy6Tv+CkB6Ynl95
AZi3PzSdXjGhpq7HR7VkV4h+993bQLp6f99k4PGC4qqTdV4h2kdN9fE7g2Txr/Qi
2/ARVJmNUYfjxZIabjDEuIO15GS7U99mrUx3UUHLHiZqUHcULdw0RCNWKQyafsHx
pWgxlChHcD0y0ygs7LCmf+mL/zTTDS6VkYTW2zglovjniZD2+403g0qEaVY2DatB
ZKwSBK5r/ZGfuJx0CZYto1M0iCOjHh/nOfaZODHLn2l8m5zrUpf7YQe0W0SSIBXu
M5shuf7QUOfAbUpOhN0xqQb/c6bcqWafYAxlO89Y8q3hggZPF+nxW9VAmifnNHkM
JyRp7O6USvjjsXPg+x1Rv1NYzjnC5FiTq0yaw6jbYWULw0barR8X3uWudW4JTqAe
FQdI1qsSl82gCxip271l+b0gpiGU3V9jCa2+JcViCSpdfNG+0NhND02oK9+FOuSX
54XFTnqa0Kisyu6lMYRKpqN0a50Cr9AYCyYPBtrpzgkisyrT/oYH3k8v9xfHBIKX
iaQ32kpvGOxodnK/0Hvz8GUAY+sdwAwLBto/P0w5yxx5EsjS47IYH/1vPrU93+Aq
ygTOyo07jQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ7RLL1
sBzIY/S+jspGiIFJb9jyeTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy4yODkxMS5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW+TqhBqAAAE
AwBHMEUCIHbt4x8IEPBvv1EY4MRxOFq6nX1R/9q6gWqB7QHywgg2AiEAns4OM74q
ynvZupV41CiNwkct75YpBfLIUwuluPv83vsAdgBvU3asMfAxGdiZAKRRFf93FRwR
2QLBACkGjbIImjfZEwAAAW+TqhCHAAAEAwBHMEUCIFzjbBd70VfXcJzzG1yStfBu
qDDyJ6yr747WSWSAHf5AAiEAtk780NwCgXa7AM5Ox3AOk9CrGTC74raT5cqPZxfE
xZIwDQYJKoZIhvcNAQELBQADggEBAHdQyHwCMgVNN10X7VN36CCfUXtHSrqCAMEG
EqmOhzvPhSRKe1vuWhRL4i20c2NpVDz7T/GM6VhMB8cM+s+w67AFsISx2JpazlsR
EaTzWbfqZDFkyrfDA6l1I9sOgT/q7OqId7MlqO+T1gxf9gE6ysKumcetXiCCQZDL
Jl6OnUy3KQ5mPuZQuLCjSEA4LqDhsKVb5aGRYGjKyzD75R/7GVB6iSvNypatQvFx
yRpVt7EMUTbMS+WYEvb3AjVUe+YqK+dWY0mWUKOOVucE4BNVvHZ8jF4ln8ZjgXPS
8SYD4VT1W+iDUZttCNGDp8uwsLsFo3przHS4kqvztqDfj7pmdz8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxxeAsVJoWs6RVGzRHwci
aLCLxIfPSTygGaxpTiWBFxE7dMJnCFCMB8LTnLsmo9wvJTIZTPKLR0enR3FBjE3c
uk7/gpAemJ5feQGYtz80nV4xoaaux0e1ZFeIfvfd20C6en/fZODxguKqk3VeIdpH
TfXxO4Nk8a/0ItvwEVSZjVGH48WSGm4wxLiDteRku1PfZq1Md1FByx4malB3FC3c
NEQjVikMmn7B8aVoMZQoR3A9MtMoLOywpn/pi/800w0ulZGE1ts4JaL454mQ9vuN
N4NKhGlWNg2rQWSsEgSua/2Rn7icdAmWLaNTNIgjox4f5zn2mTgxy59pfJuc61KX
+2EHtFtEkiAV7jObIbn+0FDnwG1KToTdMakG/3Om3Klmn2AMZTvPWPKt4YIGTxfp
8VvVQJon5zR5DCckaezulEr447Fz4PsdUb9TWM45wuRYk6tMmsOo22FlC8NG2q0f
F97lrnVuCU6gHhUHSNarEpfNoAsYqdu9Zfm9IKYhlN1fYwmtviXFYgkqXXzRvtDY
TQ9NqCvfhTrkl+eFxU56mtCorMrupTGESqajdGudAq/QGAsmDwba6c4JIrMq0/6G
B95PL/cXxwSCl4mkN9pKbxjsaHZyv9B78/BlAGPrHcAMCwbaPz9MOcsceRLI0uOy
GB/9bz61Pd/gKsoEzsqNO40CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281334431038047362253222035237851747932369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:13:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 07:13:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.28911.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812223711231173208611095621607071924662907185778270559654857551590140262016049269736009950853494360794483778512873777001105436745946023846362276301041079980164700957306275736010112398168094390571897056175867194393296518405352738506435719879578931433970306580612140328357033242928899502392486359684568836208910451866350692747643880874365873612967037766167181347388517366468343126199005567799010655665863107501679078241542890015001958620833547575638375693995330265106935362476641740152604920587049793747369101812889123827914404784461504743942345147314316386941310588559499366560244179517793556988240186985682849540680703620000092804062610064070007078056100110275792849681523987745738059675930840640371418253516938405586467594086280527272554688920581430362336261625501131917865861411898234567547692615981424254018034030699830265993783041189456764636578223345892366886805149505700835224915838702420874894153349952884371461809254865982671929841737284005984168220048651134143149415163751599022336573649118169706584127599648010349047758856539245051732433930015246884370695621897176423193500394149936453315625313945872666564568697678920601745792035744898289220439906972332101150088704984463577666625170314583255354481150592655438651866299277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b44b2f5b01cc863f4be8eca468881496fd8f279
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28911.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f93aa106a0000040300473045022076ede31f0810f06fbf5118e0c471385aba9d7d51ffdaba816a81ed01f2c208360221009ece0e33be2aca7bd9ba9578d4288dc2472def962905f2c8530ba5b8fbfcdefb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f93aa1087000004030047304502205ce36c177bd157d7709cf31b5c92b5f06ea830f227acabef8ed64964801dfe40022100b64efcd0dc028176bb00ce4ec7700e93d0ab1930bbe2b693e5ca8f6717c4c592
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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