hengqinmall.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:cf:4a:5c:78:cc:64:95:53:a7:04:5e:3e:bd:fc:d6:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hengqinmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:cf:4a:5c:78:cc:64:95:53:a7:04:5e:3e:bd:fc:d6:0a
Serial Number (int): 297682324989547545807351642138304367613450
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:3f:53:94:33:96:6e:d4:2f:1c:c6:ee:b5:aa:87:e0:b8:c0:04:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:fb:c4:ec:35:8f:04:e3:fa:1e:83:b3:dc:4c:60:fd:74:18:f2:0e
Fingerprint (sha256): 8d:fc:cb:cf:b7:ce:4c:51:29:f1:dc:e0:71:0f:aa:e5:19:c3:c1:07:ac:2e:97:12:e1:d3:9b:5f:b7:0b:15:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hengqinmall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hengqinmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hengqinmall.com

Other certificates including the domain name hengqinmall.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hengqinmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297682324989547545807351642138304367613450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 06:32:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 06:32:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hengqinmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 942695586865556790033786480523160994426236686088327158836404158772709759828788782048099019219774709727753933997389847882745892988599551447385738988480773748598098403309503621759666421199187601650679042157030552683469131683923555537146576440935295489350939889642159623539808430343099335015865443463486698453134828025734019782414325979008026160726186738774417609734036222686070586171575594619386030208978131051494454335686064962150578565231386438989093613904493693703828635125382348692367993180841254164364674605318615019417574305352528287240876480397803485393882211413219156140827216420799546376659963767218517199467469542525264922142755613007301615143978061031571579896383864475106118797132441624553261854092036107104124486836144778986826884317257971854704633574732692722650982102810102033921881871788097710430564223316922477079502226845825234997669486971506052998737837454770853657891460922887815560422061573132899926530192151623117451154352956829118191699825277041577659899377424523487518933835345229951685244657793772453081323978621474501926380871995623620420518893182393488436645464713229999208453892676692893575036477338350050569083796167523691962923257016209305351668847228998538497732096854801969032652730123940167477288169681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							283f539433966ed42f1cc6eeb5aa87e0b8c00424
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hengqinmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001712a5b17e80000040300463044022024d7239d9fcc287cff02165e3393e1d56092404db9d0bbcdbed2911baf8b8c1802204f2e0233eef201f9d496a7fbffc22da97795d2fe05c5962c9f221285c1d139c000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712a5b1815000004030046304402206eaee8915a58de0643681a33e68e2a67f39a9edb085122d0421169decfec9a0302202f30739bb85451e80be2a8f2a419cf7c915f8ab7222848bebceb0940fc47406b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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