www.28951.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4a:2a:76:22:e8:c9:73:4e:3a:2f:5b:cc:e7:42:79:bd:71 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.28951.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4a:2a:76:22:e8:c9:73:4e:3a:2f:5b:cc:e7:42:79:bd:71Serial Number (int): 286574193922327665922810922096268737625457
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d3:25:2f:b3:9d:2d:80:06:80:46:70:91:dd:77:dc:19:54:8a:f3:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): eb:1b:3c:64:46:d9:c1:65:c9:5c:00:4d:6d:7f:1d:c5:f9:b7:5f:e9
Fingerprint (sha256): 90:4f:da:db:da:5f:ef:71:c0:3a:19:f2:30:64:41:52:9b:15:64:60:64:73:be:ac:c4:da:82:66:3a:25:f2:5f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.28951.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.28951.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.28951.com
Other certificates including the domain name 28951.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.28951.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA0oqdiLoyXNOOi9bzOdCeb1xMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjQwMjA4MDlaFw0x OTA2MjIwMjA4MDlaMBgxFjAUBgNVBAMTDXd3dy4yODk1MS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQChVbP5s15QljSCes+dTATnXJ41Y2Xf8LQX 5XElb9QlhjbcV7eQYYOHD74F9i8YJf3Lug31XOdsPzaiNVwsHj7yOagg0DcRfU2m 3mSUhRLCdw09bcpbdpRceskqgaXm5fIc3GeA07oAeQvaXkshuCkInxakcH3HM8a2 w39vJZ592n7AeVuyisIh/gVZ4bEMTT5FXtcNYdy0vTFNNLA0ltNcpQ6ALdIaiQZA 247ocvr95rYeWvrJ0TYQFakTY9NdzUtVAQKRaQZK2mfhGcEuCQwDk0mMIGWKr24p VW2EhF6dEy7fSYxqwXGSm0y9ver5bZsxj2iGRoLlbV+wyJM+53oLDGRUT4HoUxWK /zrA0W2mpsdk29/xPiKI+08N0llNT5AgYUpgaPqLoH46cXVHS4s67kYJVakT+QzS qvl7+zw7raR//2XN43KRCbvgkMhHfEKZQTfQjgWAOUI69hA/Jy8caR6jnKTKjwPc ABvc1W9+m25LK6wLVKrzlL3mDjwqrMCqvUWsxwmyjWXtz0wRPvxjRPSdMRsgHIZR pXMFswQbIKCWCZ1oTX5Q1KzCeNNiIrN5WIuEde6E9qJJIK3gBbTPstm5dx1AsV60 VF9iKPCufRwubpzhMr0UYvgGSwT4bgSf7iKGhJ9D3EWq9LvKBd+5Ax3yac7KVH0U cbZKD79Z4wIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTTJS+z nS2ABoBGcJHdd9wZVIrzOjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy4yODk1MS5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWmtq3liAAAE AwBHMEUCICRrMttFLEfXB1yvGIUbaq2JytGHy5QF63jxP73fJx/dAiEA23gDYsZb DmNDAagUKOvHgkcBm/tqa4FXwBOC96SA4B8AdgApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAWmtq3mLAAAEAwBHMEUCIQDrWHiHoLc9VTTSxZrO1+W9 6HiAsEqW2I1p04Wrj3OOJwIgCid8hEbCtlYnr1roYuVCgo9H9jQ9xWw8Bnfjw4O3 BW4wDQYJKoZIhvcNAQELBQADggEBAC+P3e6Mg4VaV73xqpFvUJHTqs+LBQEN5z6K 5IhTb/nBkcAkqUkyn8kZN+jExIU2C/cC5LFtDSZ1UWc9ZkNv5nkzb3ieNqYfrD2p 9j8vEVP3/QyKwDnOJ3UebDuLTaUOQfvhB7KVXo+DSkjUlPZE2PwSGwau3Zo6VkdS oFTtSo72I+8kWtyIJt76vfZweTZwy04Z40ODFxEGkFkz17ShKVph5JkoCYd8r8aE 2lEbl1BN5FcSAPDL044tkJ+qGiY5xymYyxEfYslVpM3vKo5utvn/Z7uK4TVSxcHX X1MKSO4W17XPy/a/Omko7Tnd1HONY/dUOpfDRzHBTWP5PgYkVHc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoVWz+bNeUJY0gnrPnUwE 51yeNWNl3/C0F+VxJW/UJYY23Fe3kGGDhw++BfYvGCX9y7oN9VznbD82ojVcLB4+ 8jmoINA3EX1Npt5klIUSwncNPW3KW3aUXHrJKoGl5uXyHNxngNO6AHkL2l5LIbgp CJ8WpHB9xzPGtsN/byWefdp+wHlbsorCIf4FWeGxDE0+RV7XDWHctL0xTTSwNJbT XKUOgC3SGokGQNuO6HL6/ea2Hlr6ydE2EBWpE2PTXc1LVQECkWkGStpn4RnBLgkM A5NJjCBliq9uKVVthIRenRMu30mMasFxkptMvb3q+W2bMY9ohkaC5W1fsMiTPud6 CwxkVE+B6FMViv86wNFtpqbHZNvf8T4iiPtPDdJZTU+QIGFKYGj6i6B+OnF1R0uL Ou5GCVWpE/kM0qr5e/s8O62kf/9lzeNykQm74JDIR3xCmUE30I4FgDlCOvYQPycv HGkeo5ykyo8D3AAb3NVvfptuSyusC1Sq85S95g48KqzAqr1FrMcJso1l7c9MET78 Y0T0nTEbIByGUaVzBbMEGyCglgmdaE1+UNSswnjTYiKzeViLhHXuhPaiSSCt4AW0 z7LZuXcdQLFetFRfYijwrn0cLm6c4TK9FGL4BksE+G4En+4ihoSfQ9xFqvS7ygXf uQMd8mnOylR9FHG2Sg+/WeMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286574193922327665922810922096268737625457 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 02:08:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 02:08:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.28951.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 658188467816007211386014844588881979425193375448966119496724933698051800910917584034856312083224963537435004811278757907501260832111635916833475290860635674899779556588936039458492354132295866126528875544100434564351411005504982705330654698554095913085964359414918041681317634328124112817527131552012310653380905079228129786992853398830121661840876171510331911376376518065320371893397543935830440378273581258430990314707887797801085874486862638871322841408286654432653519886043629684047769554443181178825088213605382300965522741257151379586272446212346568693435545782184881429280660693493010847856613241957896256476685317352644986779657211479422297488720765585774626814744235283173100036414981048560728762188425494755515897535061651430567414613659282289961940635570893330479406412552507950979001460106431414212155219477566441085837840718188866176684659037063500182287201279776345521495910564545359568370658814552457251673995766280279552917523017438963835984724350263412754146908441118114605977747058242192556267501086248218467152629812714003548663943444175939275161354073009753635514132270096542810919819242505539812520782391639439495495058211976482392114009865095822861656777664294315890313981960830128768790535111316133564892797411 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d3252fb39d2d800680467091dd77dc19548af33a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.28951.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169adab796200000403004730450220246b32db452c47d7075caf18851b6aad89cad187cb9405eb78f13fbddf271fdd022100db780362c65b0e634301a81428ebc78247019bfb6a6b8157c01382f7a480e01f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169adab798b0000040300473045022100eb587887a0b73d5534d2c59aced7e5bde87880b04a96d88d69d385ab8f738e2702200a277c8446c2b65627af5ae862e542828f47f6343dc56c3c0677e3c383b7056e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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