www.hengqinnewarea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:09:5b:58:c8:ec:1b:3c:40:4c:47:c0:9c:45:b4:9b:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hengqinnewarea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:09:5b:58:c8:ec:1b:3c:40:4c:47:c0:9c:45:b4:9b:e0
Serial Number (int): 315454191487456895554761500651775052782560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:0e:f7:db:78:ee:b0:91:e8:9b:4d:5a:12:f1:9a:83:8f:ad:ea:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:eb:4f:db:09:e9:81:60:0e:7a:d8:8b:c1:68:49:25:4c:3f:9c:95
Fingerprint (sha256): 93:20:ed:31:07:58:ba:21:05:e0:5c:9f:2c:46:4d:f2:8e:30:df:e7:5d:b2:6b:f0:6e:2c:bd:fb:17:61:35:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hengqinnewarea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hengqinnewarea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hengqinnewarea.com

Other certificates including the domain name hengqinnewarea.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hengqinnewarea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315454191487456895554761500651775052782560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 20:13:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 20:13:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hengqinnewarea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744502931311358738425546262134047803632352753246099299800902869187785563978116096241516225084286717408801534091015604298011302978080696647463875913108788161120670340877924981912076263562462379556838094821483557413884729993379204451892161238372355893230305198260691056093330258110318030826146496012425353202389536730036771881415297706960025301886850750040250557080896691455287498320728613574331255220473819970628228697730901812870669829609367907637271938888062039905392152681170687300863147262822619740771273009095298766853357406876326657411950976952003956241423521164176079063949776323075368409780845273059570427772685413773837154231334435286539446307026287179850535358111344681600662452611287868880026533070333131271219832300801523815631848382639685190096315710445675395847469621217815270590822649687800939103885488040788970970376264629437288729780070200862100630919688358801064153599517820709573644550923539997657865445854232083483907925370950321983144219186829063845130756426032519482454481270257918884074302420961723089909568155172645471137782985094553255358406554690671360262415104040731636107111237011039419846154092840572525996232543833016129855492930736565154585324326041625271208120865719352688456331028052328679160698275203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f60ef7db78eeb091e89b4d5a12f19a838fadea5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hengqinnewarea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b862fd2020000040300463044022051b3d1eeb46535b76022049616364f2e5804c3855c1f04d1842afb2abef172da02203e99c8a8d3a83a35c724c681423bd23d9c2a0d2fba617da9287a40d809fd8a540076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b862fd396000004030047304502204cc1ee48b7e3626366d4cdf7ec4b3c0833dec8846d6e476ed7ffa4400b629d38022100af442e1352b074eb9c4aeab99140122ebc96f92db27768080bca19aa21f5b079
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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