indocina.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:37:f5:0b:07:80:fe:f1:93:ce:bb:1e:1c:2a:6f:8e:39:27 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=indocina.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:37:f5:0b:07:80:fe:f1:93:ce:bb:1e:1c:2a:6f:8e:39:27Serial Number (int): 280378106102362076971328710940590120778023
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 39:dc:5b:6f:54:5c:87:b5:90:7b:81:a9:cf:6d:4f:30:ed:25:83:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 73:e1:26:3d:9c:e8:36:3c:7c:1d:af:03:c6:ec:96:8c:86:52:ae:d2
Fingerprint (sha256): 8a:ae:13:af:cb:c4:46:fd:88:31:43:b3:bd:d1:e4:5d:1e:d0:ac:04:13:a2:40:6c:92:9d:83:78:97:f4:ab:86
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate indocina.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for indocina.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
indocina.com
Other certificates including the domain name indocina.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for indocina.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAzf1CweA/vGTzrseHCpvjjknMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwNzQxMDRaFw0y MDAxMTAwNzQxMDRaMBcxFTATBgNVBAMTDGluZG9jaW5hLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANHLUraDf0m6qyzpQxZ6sa+/xS5X4p3butdP GJdYwey1gmzwer0//oFanu7cAX784bvdH372g3JYbAmjuykf/rp9W7l5by+F4yjz /WST+YhX1/yJ65vAUoh7cDw1c7uWzPKP6q4zvPE54JeQ6NoizQbk7F4PxVNCZjR3 Sj58QTCr2bZOeC6t1UprHWploHDhzRCqhS2GBeCoil4KYeL2/geeJHDgEDQwQKk8 9zFcSjmcfUjbZLrEbDqiVuLy1QpY2czquX8lh9QVAaiuKZR8IQ+V79uemnPn4W8f db70BcF7FKrrNxfoQVYeA4Yx/zDkDPX+wOGJx6GeAkrGJuwMuAWbV5OH3JgkhGYu CO1ZlVg1M3llMEHwEuJphpc4Gx7Uv3+eNmjM32pBYVMJ+sxcACDsfubeVyaLk4RH KRe0NyO4T5Bp/fgDvtuvMafvc7aUsvXusH6Re/Ex0/ymWrzjfugqurLbt5CmX5Dr HgaMPqSSOtMsYI6je1bckufDuIUZgQyB8wtT1uybm6tZPF5vfM+SL7ol42MtLbdN 9ml+RKSPjIGy7rqWbdtrNDKYK4bVZjsRXXe/G0UDcHbJ42suSXanhwbhChNVxi57 XBk5iR3zKhxQVK7vOwHkXtQL4ayWrRW1DujSeu1gU5PYopz3jHH63n6zhCNwbHbo 59L/zWfrAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDncW29U XIe1kHuBqc9tTzDtJYNvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMaW5kb2NpbmEuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADy AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtvyDZhgAABAMA SDBGAiEAmwRUS33oHLnW6RHHvg8irP1hhPMYd8qBJoeoPFTr20QCIQCslhxwKWpr PRgfgtbBQReQo54sqNG0Hrm+9oZF3hyOKQB3APCVpFnyANGCQBAtL5OIjq1L/h1H 45nh0DSmsKiqjrJzAAABbb8g2nMAAAQDAEgwRgIhANd7JKKKygsCvtq+MWwlVRoC jHEWZFxFpYIHiaWvb68LAiEAtMv9laoQx0kvKGrQnndf04s/E5U/ObP/xINhUt75 rYIwDQYJKoZIhvcNAQELBQADggEBAIRyoxgLyhRmOiNXJtVgPc95jVIL3B3YzhAR KRjTaghL/XD/5dorKv4EairmK5tlgtsCgFwbuuagwPcxJrg8l+38V+TYzhkmTk/K Nu85+ZCFCJYLaXyDmd0us4BVwE2WXjKLMmsFExSTMfE6JdoomaW2zxxt3jtkYNUB jjU+ckDwY0MNn+sUlo0QdvG0NAbJL+95ONFN66z+cdOG3GJmgH4pojZSLntxxSTG m0umOyN16SxRG0nnXHrTZmQzMSsP8LNK9XXpDT+WfGKdfeAaGWA8oJM6omskw6NY v7bzo9CIXpyZ0WjzvPHf4JzqrL/L+D5OC5RpJowyPiI/WJrvlyg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0ctStoN/SbqrLOlDFnqx r7/FLlfindu6108Yl1jB7LWCbPB6vT/+gVqe7twBfvzhu90ffvaDclhsCaO7KR/+ un1buXlvL4XjKPP9ZJP5iFfX/Inrm8BSiHtwPDVzu5bM8o/qrjO88Tngl5Do2iLN BuTsXg/FU0JmNHdKPnxBMKvZtk54Lq3VSmsdamWgcOHNEKqFLYYF4KiKXgph4vb+ B54kcOAQNDBAqTz3MVxKOZx9SNtkusRsOqJW4vLVCljZzOq5fyWH1BUBqK4plHwh D5Xv256ac+fhbx91vvQFwXsUqus3F+hBVh4DhjH/MOQM9f7A4YnHoZ4CSsYm7Ay4 BZtXk4fcmCSEZi4I7VmVWDUzeWUwQfAS4mmGlzgbHtS/f542aMzfakFhUwn6zFwA IOx+5t5XJouThEcpF7Q3I7hPkGn9+AO+268xp+9ztpSy9e6wfpF78THT/KZavON+ 6Cq6stu3kKZfkOseBow+pJI60yxgjqN7VtyS58O4hRmBDIHzC1PW7Jubq1k8Xm98 z5IvuiXjYy0tt032aX5EpI+MgbLuupZt22s0MpgrhtVmOxFdd78bRQNwdsnjay5J dqeHBuEKE1XGLntcGTmJHfMqHFBUru87AeRe1AvhrJatFbUO6NJ67WBTk9iinPeM cfrefrOEI3Bsdujn0v/NZ+sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280378106102362076971328710940590120778023 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 07:41:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 07:41:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indocina.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855885789389457277249496131460826681180766302283521258428048697324618530581617780932893219120822609336729760985409431376649755470231456091576109749130708561060722114397763650562393605107372853114488928845010797602170054264618980123026301528305932098302377279905630859518108174666639314521755281965493431620147643332376046858998756794557813275700189201457770014007391725772950476152941012921771692465742449753957584680374056355655781427178063915592728253608010337577361454291364103104214721736608980780107102123677108275071236976651851568191560375998629036411085555250688010754145314400799887310998783248365057993466972680546671685071959384013948806064102666863355729436183078093619851245893348893534937825793567385439949698413323860938842554085976368092989483497310220257699388550968957216263600056336338930783443211361816663349010270584679089832777895631302822891813999300051374317280219827863210654861265062897311654832989129645402346303179326000424553154947034554909912933200163613330765374269361891068128085752766721284335587987832601802329264152073325993854967571134996636891627173115348276042230903032389824610917304989463540652278724612007842624938230724301796098030723525168591076966975650736749353951860842760864504491108331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 39dc5b6f545c87b5907b81a9cf6d4f30ed25836f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indocina.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbf20d98600000403004830460221009b04544b7de81cb9d6e911c7be0f22acfd6184f31877ca812687a83c54ebdb44022100ac961c70296a6b3d181f82d6c1411790a39e2ca8d1b41eb9bef68645de1c8e29007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbf20da730000040300483046022100d77b24a28aca0b02bedabe316c25551a028c7116645c45a5820789a5af6faf0b022100b4cbfd95aa10c7492f286ad09e775fd38b3f13953f39b3ffc4836152def9ad82 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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