www.hengqinnewarea.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9f:09:5b:58:c8:ec:1b:3c:40:4c:47:c0:9c:45:b4:9b:e0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.hengqinnewarea.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9f:09:5b:58:c8:ec:1b:3c:40:4c:47:c0:9c:45:b4:9b:e0Serial Number (int): 315454191487456895554761500651775052782560
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f6:0e:f7:db:78:ee:b0:91:e8:9b:4d:5a:12:f1:9a:83:8f:ad:ea:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7a:eb:4f:db:09:e9:81:60:0e:7a:d8:8b:c1:68:49:25:4c:3f:9c:95
Fingerprint (sha256): 93:20:ed:31:07:58:ba:21:05:e0:5c:9f:2c:46:4d:f2:8e:30:df:e7:5d:b2:6b:f0:6e:2c:bd:fb:17:61:35:4a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.hengqinnewarea.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.hengqinnewarea.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.hengqinnewarea.com
Other certificates including the domain name hengqinnewarea.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.hengqinnewarea.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA58JW1jI7Bs8QExHwJxFtJvgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjMyMDEzMjlaFw0x OTA5MjEyMDEzMjlaMCExHzAdBgNVBAMTFnd3dy5oZW5ncWlubmV3YXJlYS5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2ffwpnL468DDh0V/o8G7G gBgsIBpoheiIQXSJAvgQ6Y8TCMt/jrEO1CtElMEl9x4eKW9ZvYoQdGwhgsVYUdrx HWUVhyqD+ox39MCL2clZWGR3+zkKtF2mkdqMxiLsTy8tT77a9X4cb0f27x+TUX05 vJMr2Gc+sq6S6RuqT6XxxhQg9HSDY1zGa0cIBVrFk+XtLShMYSUiRkPSxFlE5AxG WHYELOHX30KZ6gddiIG38nOwo6VoEMlCwoyab9dmuPEZxZ8MeviOUKSlW3vjY7CP 04q7Eb6RJhNgQKmkz+RYwZiwtz6KzE8Sng2Pn+rnFxWLdsL7ymH0P8LPmoiE04qj NSInyP+3BXoyEvWj0PAFSYChsWlaQar56ATVgSbM5n4Sil/VhCZjqbN9ite9U8HA HO4tigXXsRe4U41B5uKwQR2vbasw8BGDJRIsTT7NKIMyGAUA34324foF6UbK8HWh 5w267Bdhmx/6G0rtGcRkuw65VlAO16NxBleVJH7bOYcSp8VdqC1HmdLvoVTtCNRN OA9ofwPA+Yh8plv28RNGm9ndpTK/vkyCOdwhS9cMFBAQgVXaP297YigEkIGGM0zE E3qgeSH2lU6EnxPEKY/VSh+qOylCMjEBAu3ljdlQEnb52As1LErZlnybXBI25geP 8iQWL/E3tWMWsK2PT06FgwIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBT2DvfbeO6wkeibTVoS8ZqDj63qXjAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5oZW5n cWlubmV3YXJlYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4 scdoVEvYjQAAAWuGL9ICAAAEAwBGMEQCIFGz0e60ZTW3YCIElhY2Ty5YBMOFXB8E 0YQq+yq+8XLaAiA+mcio06g6NcckxoFCO9I9nCoNL7phfakoekDYCf2KVAB2AG9T dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABa4Yv05YAAAQDAEcwRQIg TMHuSLfjYmNm1M337Es8CDPeyIRtbkdu1/+kQAtinTgCIQCvRC4TUrB065xK6rmR QBIuvJb5LbJ3aAgLyhmqIfWweTANBgkqhkiG9w0BAQsFAAOCAQEAZKlkwjK8xT7r piQ1k7K/21y7v33APKrTFyMapVFaALBXQ9QksR11A5pVEQ9dD8Zc9+rS0J0pAdlr nnQ24lCObAfHj1k1DGuWFi3sEDzpVt2K37dyN0dYjzc+G42NQXyYUzjfC0pU60nv DqWZToIlEP+5YEokHdlRkmipCYwqxdGR89T/wndkTCVRf+78L71l7eWdYg4psUVk jqlTAUfiSeKc3lHZv1wpiUWVVKTPxCoruLwoKtDYhWpQvgdL1dah58ytiz3ci1DB E4yLx5AkaioWcAKEQPL67oEWwpgA+qVMrE7yx3iQbYI1Ad6eg4FUYi7MqSfG9quN XnUgOL3DWQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtn38KZy+OvAw4dFf6PBu xoAYLCAaaIXoiEF0iQL4EOmPEwjLf46xDtQrRJTBJfceHilvWb2KEHRsIYLFWFHa 8R1lFYcqg/qMd/TAi9nJWVhkd/s5CrRdppHajMYi7E8vLU++2vV+HG9H9u8fk1F9 ObyTK9hnPrKukukbqk+l8cYUIPR0g2NcxmtHCAVaxZPl7S0oTGElIkZD0sRZROQM Rlh2BCzh199CmeoHXYiBt/JzsKOlaBDJQsKMmm/XZrjxGcWfDHr4jlCkpVt742Ow j9OKuxG+kSYTYECppM/kWMGYsLc+isxPEp4Nj5/q5xcVi3bC+8ph9D/Cz5qIhNOK ozUiJ8j/twV6MhL1o9DwBUmAobFpWkGq+egE1YEmzOZ+Eopf1YQmY6mzfYrXvVPB wBzuLYoF17EXuFONQebisEEdr22rMPARgyUSLE0+zSiDMhgFAN+N9uH6BelGyvB1 oecNuuwXYZsf+htK7RnEZLsOuVZQDtejcQZXlSR+2zmHEqfFXagtR5nS76FU7QjU TTgPaH8DwPmIfKZb9vETRpvZ3aUyv75MgjncIUvXDBQQEIFV2j9ve2IoBJCBhjNM xBN6oHkh9pVOhJ8TxCmP1UofqjspQjIxAQLt5Y3ZUBJ2+dgLNSxK2ZZ8m1wSNuYH j/IkFi/xN7VjFrCtj09OhYMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315454191487456895554761500651775052782560 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 20:13:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 20:13:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hengqinnewarea.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744502931311358738425546262134047803632352753246099299800902869187785563978116096241516225084286717408801534091015604298011302978080696647463875913108788161120670340877924981912076263562462379556838094821483557413884729993379204451892161238372355893230305198260691056093330258110318030826146496012425353202389536730036771881415297706960025301886850750040250557080896691455287498320728613574331255220473819970628228697730901812870669829609367907637271938888062039905392152681170687300863147262822619740771273009095298766853357406876326657411950976952003956241423521164176079063949776323075368409780845273059570427772685413773837154231334435286539446307026287179850535358111344681600662452611287868880026533070333131271219832300801523815631848382639685190096315710445675395847469621217815270590822649687800939103885488040788970970376264629437288729780070200862100630919688358801064153599517820709573644550923539997657865445854232083483907925370950321983144219186829063845130756426032519482454481270257918884074302420961723089909568155172645471137782985094553255358406554690671360262415104040731636107111237011039419846154092840572525996232543833016129855492930736565154585324326041625271208120865719352688456331028052328679160698275203 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f60ef7db78eeb091e89b4d5a12f19a838fadea5e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hengqinnewarea.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b862fd2020000040300463044022051b3d1eeb46535b76022049616364f2e5804c3855c1f04d1842afb2abef172da02203e99c8a8d3a83a35c724c681423bd23d9c2a0d2fba617da9287a40d809fd8a540076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b862fd396000004030047304502204cc1ee48b7e3626366d4cdf7ec4b3c0833dec8846d6e476ed7ffa4400b629d38022100af442e1352b074eb9c4aeab99140122ebc96f92db27768080bca19aa21f5b079 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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