hxtwings.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:d2:2a:e4:39:17:4d:7e:ca:da:87:2c:03:32:98:d0:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hxtwings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:d2:2a:e4:39:17:4d:7e:ca:da:87:2c:03:32:98:d0:c3
Serial Number (int): 299387561108000406917544568609340374175939
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:05:ec:83:34:c4:9f:b8:3b:ff:86:43:e2:e7:33:5a:1e:29:f0:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:dc:43:de:7b:60:9f:8d:7c:f0:a4:fb:d9:44:59:b7:96:f5:34:5f
Fingerprint (sha256): a2:40:96:c6:a5:5b:20:1f:40:9f:28:f0:84:26:8f:02:d5:b8:93:d6:99:7d:b3:0a:6e:96:84:71:07:34:2d:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hxtwings.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hxtwings.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hxtwings.com

Other certificates including the domain name hxtwings.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hxtwings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299387561108000406917544568609340374175939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 08:35:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 08:35:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hxtwings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789813457199583238340766551000598369212170517466734274540970746922602805318848464925475550792667900799886685741489074954638027150900891836445391369937283905010806354883313927037075384702450917217374707942230187117318244258087467024758454228950788968987905167077050481448589638611602645768077199095564989061705940350390322943751852232457720185461696098833195889803478105144002135702126281085621600967430670455307642652946288312482470208929394714644730934654902634953451921811588062753798936918432541746422333030587663459118421854483906315082248975465582878889997066557074090321619181603099855556846689004358808360524578162396865801822261160002706445488771333554319065540575853377198926095005464398267940434513022325360858079107063363353258622573063966964421961923126934303393154865639594956824940771249132520775734680767677165656779436540488684119316748894811500603084016261284665707915784474770240515073979936655277845244193007945533801991106004147673846058513779150087234041996224948173989666023905444270703561262008207468826251236445209770600183622179955520044640199253884058932517189174233760532945930693439936873234641210755133608393590610596735519730411197413563974886161444858932138325346676544017443275020601708853596694556029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d05ec8334c49fb83bff8643e2e7335a1e29f0b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hxtwings.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fadb577af00000403004730450220715a9d07b1321115b56a6a72da1c8c2464a51b66deb29fef42dd0f50162bed13022100e5d0b770062113b5c9b97a7a45fa05ec994c32f293994b6836743eea7d17587800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fadb577dd0000040300483046022100ab1108cd2d9b09a371ee539695b0aea50cbe9bbf63f815fcdfd16675ec5ec2c3022100b0487d350a55083b94bbbde473f2ee0eb26b4e2d047c247abc9eb13a92f491f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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