www.hengqinmall.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:a2:2b:86:a1:cd:f5:32:ba:c2:02:a8:8c:7e:4a:67:53 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hengqinmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:a2:2b:86:a1:cd:f5:32:ba:c2:02:a8:8c:7e:4a:67:53
Serial Number (int): 276865125241467406072244974344570676078419
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:76:5a:96:b2:ca:35:ea:90:6d:1a:20:f7:b8:d3:e8:df:ea:9b:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:df:ca:5b:7e:51:b2:6b:bf:05:62:9c:e6:4a:d6:c0:b6:6d:19:79
Fingerprint (sha256): 91:2f:b0:2d:a2:c9:8b:52:b0:24:73:3f:32:74:da:9c:77:8d:bc:7b:e5:df:fb:98:29:e7:d1:f6:73:ac:63:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hengqinmall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hengqinmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hengqinmall.com

Other certificates including the domain name hengqinmall.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hengqinmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276865125241467406072244974344570676078419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 11:52:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 11:52:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hengqinmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 911545929024554609453979697498122948036371880979751127974555765043467971735103134599181546043739459923936494034794316353493061962159885931835704853966412810284379577638337422995842315481320589897973494575393299669736337426422571642017793733626429262259906532973084313796474462927494653233047654740765252951558900492127525819475194799174654984000696449518169071801423374561490692593483981668875716596281183936344010223082969281670020368725895197360064387741694869952821711145191374246445188786252214877835990895557371577777784630250573893110920505309741003989074140785269690656787039690808020648207873044205608471063090607470693849487276257029265159720469704226157881035337521533110182608949105700086112274461765784205268366187492816143413799564265187916151591405291735290045896460646594526965431328607470774522289181071954971653018849413865965109519578784783913597781471633968749622358515937001719646048780226757391313315447000382477207845486387678373104248215858912463492936608738912753263556992482467149700892783527759024326242981388932636535979922782742864184356771511756266835017577506152486692988592818129020735949280567536136369115782261021272655052120777002182163636949886723860484291187639176022032425939494621974932834024557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff765a96b2ca35ea906d1a20f7b8d3e8dfea9ba1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hengqinmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cd322db0e000004030047304502200d29b3a757b1bb2d384498ca398800cffac6e2b02cc39bd77e32cf41bce5e46b022100993bb19ecfe14d606bc22e54fa699c226d0dd7044ec2f0cc0832558ca168128000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd322daff0000040300473045022100ef8ab06519131283e15e24eeaf8260fab7cddc26775f77a02f662646f84022970220509f6015213e6d606ef087f4f550aa9b51209c79a1b272373de0069c7cc4800b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007d4ef52c2866424d145c32c387ec4f2faeb62532a9598c731f5b6fe5109dd20809dcdc125bd750dcab3ba68a16c2e2c79bb09a805429e9f753ea452a17218bd3dd9054434ff0cc8858b61596a547b4aa883b5f3bcd1e765340dac7447e208e69b703e9f22c6d922532374ce93e48d363b0b544cf4340f5afa51bd2175e0bbb7c5fccb6d20ae74684111e5e614a962a31ef57795079c1c31439e17bfced4787594bdca78bc6d2d9b4b50a11812a2a5b4a4f062aa4bcf36e5ce2ab3d3c48710a1c5464a99692e6b62e0d4baa0bdf09f773f40dae26ebda544b61200ae3057d857bbd7870c33ae72344f7d3c8433acf3b3705b66e365f2d141c1378595d0581f6db