guangdong-hongkong-macau.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:11:57:17:fd:a2:f4:2a:f6:ed:57:8a:f6:92:b9:b2:96:3a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=guangdong-hongkong-macau.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:11:57:17:fd:a2:f4:2a:f6:ed:57:8a:f6:92:b9:b2:96:3aSerial Number (int): 267237425435757886135271767466340900836922
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 84:8e:e0:12:fb:02:e0:cc:1d:78:66:b3:18:9f:8f:b4:fb:6d:f7:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 86:2e:3b:10:2c:85:51:49:e1:09:b7:2a:14:38:25:ab:9d:40:6e:3d
Fingerprint (sha256): 7f:44:b8:96:07:e3:5e:7f:b8:0b:6f:6b:93:f6:a8:7e:61:99:6a:a5:71:4b:f1:d1:3a:a0:7a:c8:f1:aa:cf:5d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate guangdong-hongkong-macau.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for guangdong-hongkong-macau.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
guangdong-hongkong-macau.com
Other certificates including the domain name guangdong-hongkong-macau.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for guangdong-hongkong-macau.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgISAxFXF/2i9Cr27VeK9pK5spY6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTcxMDQ1MzlaFw0y MDAxMTUxMDQ1MzlaMCcxJTAjBgNVBAMTHGd1YW5nZG9uZy1ob25na29uZy1tYWNh dS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC3UJNl/ZlWE8Mz kQzMUHvGPFS4oVXnP4Ba0XMWCUN2gWgO/qAyB89F48Bkp1xVJGLY8L/oZ+//0TAS SqOL8aIqmfvKUSdN2/l9NfI4vgNtDWIsecqkvpvq8IGCUVvKB7VuczXJxpM5amkA 8BVF6B2fz8j6zu7h6ubqOQbPMCw1JFcrjEK2EtAT8uLVFx1W7uGSfZvWYAOckzsA N8o3zZFoVmGaSThyWEUVuHIlAa4O6bOXC2h1ge/r/5eSJPRCTs79bDDvxynQVymK HrxxlHrQbH0yGKZl14Cq9Bb1kqyC5NRcwrWgdoIWeJd8xNVCYrdSo736+eT9DN22 BQPPlG2O65ZCQLTCHTD4Rra+pOXyqFz7C//v7urD3QFdbbxWF91ZIAH8k6GoKMp6 ldVgcqrn/aDtgL53VEN9GeQp58JLlgp8etPw6QjyG/MhuD60+CzaKCpM1IxcE3AG c65TORu7Ju50J/ZrE9etveNysKETNrob0qn6tuYH1xOBk0RkBjMY7zBlJaP8x81Y yNcUG0PP1Lp/yiTmnbieanBTY5xqLPx46bB605BJQzvExTJSOUHNBDjrCM+DrbrI 8gZkKKXycER1exIe+mYhdrSxmnvJVs+LoH1JrU+6MQOf8lqjh+V5+55LEd2KjAPN I0NKRkjxD6VpGKKRZYd9rd6/DHlNfQIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBSEjuAS+wLgzB14ZrMYn4+0+233YDAfBgNVHSMEGDAWgBSoSmpj BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0 dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0 dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHGd1 YW5nZG9uZy1ob25na29uZy1tYWNhdS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQApPFGWVMg5ZbqqUPxY B9S3b79Yeily3KTDDPTlRUf0eAAAAW3ZiaMRAAAEAwBGMEQCIANbb36F1W+tI6OE JMKKmWDmyU02xVU/Wqc3mWCGuQg9AiA5r1tH17pP0twqxXt2BIx5R+7O5uV6Y0aB qiLvy31V2QB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbdmJ o0QAAAQDAEYwRAIgEFVGHwWFzxM51JG1oYmvZe/oIBh0ztkxCERNek+KjWICIDbN 2x4G7T+Uwk5FWmhRMnDCtKhLsVRmAMp/a9TxbfT2MA0GCSqGSIb3DQEBCwUAA4IB AQAdwDV1d5HfwQrbD2NjJhtQTa4NpKIiA//V5mSdKuw7N+4hqjWkdxc7vf861XrE 764LMulQpny0W6ANJl5H+8FrZIcRMWsLe10KfBdfmDI6SSmPkF07K1iPPFJ/V8H1 jeicKuDbNgFYUZQTpp7ZytxXYLPCg2sTDRP+47XdH+Znb1cwJ3FnZzb0QznEaUni nqhjPx0I6TOnHNFjZIgEgsKb9DXnegMV1qvxu+8ZWkTA2OtKqK7CD9ti59MnEakZ WIoU/5KylK3NZDRCcLYNSZAW6rr4pV94hCzLJBDZWbBUHGtwaPn2oANB0GZymEum SpEMicC2f7iAHCUpN0IhsNQ/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt1CTZf2ZVhPDM5EMzFB7 xjxUuKFV5z+AWtFzFglDdoFoDv6gMgfPRePAZKdcVSRi2PC/6Gfv/9EwEkqji/Gi Kpn7ylEnTdv5fTXyOL4DbQ1iLHnKpL6b6vCBglFbyge1bnM1ycaTOWppAPAVRegd n8/I+s7u4erm6jkGzzAsNSRXK4xCthLQE/Li1RcdVu7hkn2b1mADnJM7ADfKN82R aFZhmkk4clhFFbhyJQGuDumzlwtodYHv6/+XkiT0Qk7O/Www78cp0Fcpih68cZR6 0Gx9MhimZdeAqvQW9ZKsguTUXMK1oHaCFniXfMTVQmK3UqO9+vnk/QzdtgUDz5Rt juuWQkC0wh0w+Ea2vqTl8qhc+wv/7+7qw90BXW28VhfdWSAB/JOhqCjKepXVYHKq 5/2g7YC+d1RDfRnkKefCS5YKfHrT8OkI8hvzIbg+tPgs2igqTNSMXBNwBnOuUzkb uybudCf2axPXrb3jcrChEza6G9Kp+rbmB9cTgZNEZAYzGO8wZSWj/MfNWMjXFBtD z9S6f8ok5p24nmpwU2Ocaiz8eOmwetOQSUM7xMUyUjlBzQQ46wjPg626yPIGZCil 8nBEdXsSHvpmIXa0sZp7yVbPi6B9Sa1PujEDn/Jao4flefueSxHdiowDzSNDSkZI 8Q+laRiikWWHfa3evwx5TX0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267237425435757886135271767466340900836922 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 10:45:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 10:45:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guangdong-hongkong-macau.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747858928832521636641835543797601758021378797626199441236888862487667863768924340716455445426258292921826911022664760619669427038201698014036743730178079085759145802926133616421049011389591910291779886306598817959422299522214659353655822009792672301655671481229991499382965477620453448009028147459940183079387105436642093106242045206737581439036435045653434830039561870245589359860436548836329247189870537322749595118584862106712273721855105682952758647915737914552363132779550236561097141713303996044868051567410333028528801741380807532716741903625944281938681896086418734966477232517570744350295850855643237773554664230573826199359845416945006619035928190350012032043070356369317632727078713365411567575987919268189057812185149922941181432814465591737181387288054037913756726016181930454185873715852568002028701621208562864462404013451506896113041201310321645582290509410982370937707125887253902839371485836767313466196010100267593375820889597564067220146858869898555506177976599131562857695148186376120712716844914890768942170729982634214620393255845713322499987948963239847810781188083728767856864857964501720181358585117918102038602604774789299314798492968599342888056398131514947440702780392316501490067329949733200996614098301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 848ee012fb02e0cc1d7866b3189f8fb4fb6df760 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guangdong-hongkong-macau.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd989a31100000403004630440220035b6f7e85d56fad23a38424c28a9960e6c94d36c5553f5aa737996086b9083d022039af5b47d7ba4fd2dc2ac57b76048c7947eecee6e57a634681aa22efcb7d55d90075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd989a344000004030046304402201055461f0585cf1339d491b5a189af65efe8201874ced93108444d7a4f8a8d62022036cddb1e06ed3f94c24e455a68513270c2b4a84bb1546600ca7f6bd4f16df4f6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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