chawilai.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:62:ec:63:c1:bd:4b:d1:1d:2f:0b:a3:a9:0a:2c:12:80 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chawilai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:62:ec:63:c1:bd:4b:d1:1d:2f:0b:a3:a9:0a:2c:12:80
Serial Number (int): 404727226017949539483391349447906887996032
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2c:1c:f0:e3:21:b8:84:9c:75:43:12:93:dd:b9:bc:b6:73:16:7f:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:b5:4f:87:65:42:3e:da:1c:d8:1b:fd:58:a7:eb:57:15:26:2a:ae
Fingerprint (sha256): 77:d5:f3:68:7f:0f:cf:bf:a4:d5:ea:df:0a:c9:91:dd:9e:75:48:50:b0:a3:4d:c2:df:1a:b8:42:32:3c:e2:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chawilai.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chawilai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chawilai.com
chawilai.com

Other certificates including the domain name chawilai.com

(limited to 100 certificates)
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
chawilai.com
www.chawilai.com
www.chawilai.com
chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
admin.impressionsapp.co
www.chawilai.com
www.chawilai.com
chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
sni206867.cloudflaressl.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com
www.chawilai.com

Certificate

The complete raw certificate details for chawilai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnbiLZMSJeDHbaf2P39x
FG4uUjLU9AxlIrjCJEmkFQsEbB9v+h9KA7UASfkbKNTMTbYsTSJFCpWqzvpHVJws
m8RzJLHn1cL9zy6jjMB9G8F3JwEK7H+qsKHjPfzSWvnm9NK+DS6rROl3NebrSCme
SJSIyeBfWXK+y0MCDcx13IYIpl2epMsIyXl+auGjR5Rb1GGa3WgOy36SW3NCEbJd
cRnZTnRcZiS5jyYw2aFUL6EPuZpB4olqG8gfKhS6/MAGedD7n3Bc5rbfzldymnBi
OX2XV/SnulBQC5V1Tn7ZjvvzV/6ttLEuDaLJ+S/yxt7lODELxXWN2TNtvMr8Bo7R
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404727226017949539483391349447906887996032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 17:32:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 17:32:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chawilai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22529041926642737197728445080449930660850462854979217120379179275263295135349042356568873714009398473874645003820965689935516947681269888889981221035532206447555159003105416192818377541114689967006772639166073285347280875194348715735724518477803216121934050883547663221699549318083455048674700990983514881019490050881208824118977599393206028839232987166187192115079273188041777983247208369078883200831613302763884154583929932657757982647659807811700515655590557197841883900120109300935786467474216696384122816330380902788192634668148767407140573838964754809136546613838786143115618935298088359020069685843027286741363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c1cf0e321b8849c75431293ddb9bcb673167fed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chawilai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chawilai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b440f3b090000040300473045022031ded2edd5b4690634ba9ae134eb92ce4a0d479fc544b54bbdfe064ea1c9ea3b022100a80e202dbd8c0f4f06ad5898a09b4594b69efc578f261813f06501e1d77d3bb60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b440f3af10000040300473045022006f3fa97b57c07c95a61680e1dd32c2c200b580bb47c56bb81a8732268c26e35022100c4521f54824862fea16e9550a57c51a5f76b0ed738e76db9c15e1e5e96019609
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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