ybbao.cn

Issued by R3

About this certificate

This digital certificate with serial number 04:57:4c:31:bc:79:2a:3a:a3:de:84:a5:f6:00:b5:7a:39:46 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ybbao.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:4c:31:bc:79:2a:3a:a3:de:84:a5:f6:00:b5:7a:39:46
Serial Number (int): 378154989222081037133404207088259313580358
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:b6:82:e7:28:29:60:dd:d5:56:be:36:97:3a:44:92:99:26:7a:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:11:01:92:44:6a:0f:8e:ac:49:3d:12:a9:d2:69:73:8d:59:48:14
Fingerprint (sha256): 94:dd:09:22:66:75:27:0a:e1:d4:18:41:41:fb:d8:67:fb:70:59:b3:ec:2e:1d:53:2e:59:94:ea:6b:25:e4:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ybbao.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ybbao.cn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ybbao.cn
ybbao.cn

Other certificates including the domain name ybbao.cn

(limited to 100 certificates)

Certificate

The complete raw certificate details for ybbao.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378154989222081037133404207088259313580358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-11 14:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 14:13:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ybbao.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887004740074876954058478881280215367751786476064593758229921269414861269635404004076091630504092630204194069662958738346808477368888754130758721377194229125841881157914104181550179737488719774605935113860795721547937761859504081518169766866001473086745224694850269303319590938309151752402582298747774278763949901660292061286962656905930726490054888416123480296202367954383489947708931235018093090965040778753712628627834420433325219106918820871192631423203889972586666469395158503097316545704492475508553595347217655409026212044011011316817135131657211369387003805924449597454181207406888055273240178769116177364703189206747224079103123476462193402690141116446313663435102121958746906562290840502889054091788987844081520386300199693334769696800407374875449968824983874584807553063882268214780894069967371380102046209320844677212456091730960894789932708257795549027880919870126241696409860141510397235053395126942050985841328452877099448027846807501545004147479435235131926812587750241535330657572708794429032832470213976826005869071182070695747852955459191225247113000452511367243201932028105843374342773623096281848055273003697355142770957045696875485517913606123701199674787072565014183250669030005911725026731259721865116812836003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62b682e7282960ddd556be36973a449299267a05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ybbao.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybbao.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018770e1209e0000040300473045022100cedc173471a16c53d22e018528f7258cb8f6cbd6cc0132218944042c31cba0000220197f382cbea362c4288b67cf566548d25b69a3f7796d3105620dcbdd1d6ccd05007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018770e120d50000040300483046022100b931ba9b45ae16ece6de0aca74c55445f7415f5267ba6d2a72f404c90c68c6f3022100d3ed32402102f88e222014987c3a466009fc7870e0d87f6ae45339a452663435
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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