www.91004.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:53:08:06:8b:ad:3b:18:25:99:27:32:ba:95:bc:88:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.91004.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:53:08:06:8b:ad:3b:18:25:99:27:32:ba:95:bc:88:1c
Serial Number (int): 293093485513713817896783157622710734719004
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:bd:d2:73:78:1c:d4:e2:32:ff:89:c1:fa:8f:5b:bb:d9:05:96:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:9b:b5:e0:6f:07:d9:ac:d6:db:57:aa:7b:96:2b:9c:08:7f:a2:72
Fingerprint (sha256): 74:e1:31:ad:cc:90:99:62:07:e0:1a:83:ad:3e:54:7a:66:f2:03:dd:62:b0:62:d1:e5:f1:4c:fd:79:01:ab:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.91004.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.91004.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.91004.com

Other certificates including the domain name 91004.com

(limited to 100 certificates)
surfindo.org
exoplanet.world
91004.com
hoopladigital.me
91004.com
www.salaricevimenti.com
www.91004.com
www.91004.com
91004.com
www.91004.com
91004.com
www.91004.com
ngambay.bible
www.43841.com
91004.com
91004.com
www.43826.com
42057.com

Certificate

The complete raw certificate details for www.91004.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293093485513713817896783157622710734719004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 04:20:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 04:20:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.91004.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738325611261709572774216275670733288304297488987163481690268886489031983830172243347858806160328356206227364972836943927139245272108992072690380631885057278803773414594844493700954642752941825930090685979581856754074970410474929219861191551001729048545580272029616966476654067247636483374807062520780341517649308273845303295748951657125114581910020528550831484806783094158426136691649211287247183326302518721175296533139573836212107499234736512993574591894784678608840099968865692715849955802252567060167108458875639451452064769838988938515592960288506385333178500532328698390454787446759255441885160622832757847373243994248212334735501882433522474539487990974799283135804522941661752725653921682861276872322487915386546811419238291678732350184922284187475605729983097199777129727432030352996672028480356927667946299275192247810761155709546298687716171627834962775208076520459421165011057939795055020911342504228056930667839415068023726638506198559410843873171049753519173254215166918668341885129337946695077082251888788953429645996184710784751793615590481436315075249851325187715078001662574226750871693566529582389844573483372925283224212936251140359340533777734808590876179664374103158411716320830250199786249878756096074656555687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fbdd273781cd4e232ff89c1fa8f5bbbd90596ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.91004.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afce21b58000004030046304402205fec2c0b558af78c7ce82b43272b21a437191ef528c9d4a5b53eb8e63e4afaa30220417ed667e8a642ec54d4f9902dff0770e1fd28bd7d7fd6f5d24cde2ba95d079700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afce21b7b0000040300463044022071ff67cda3f90325f6d82cf450a3169ce2fb42c352fed19c17d3f27d3022c5c202207f8ca43f0cae204ea1156c8e75eed31516161c700a0ced3ad2ad2c529cbea0e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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