huapingdao.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:9f:a9:6a:e2:00:f8:fc:d0:30:b4:83:73:e1:c7:6b:38 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=huapingdao.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:9f:a9:6a:e2:00:f8:fc:d0:30:b4:83:73:e1:c7:6b:38
Serial Number (int): 302042686376212594824455059456053054237496
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:63:1b:e6:0c:5c:da:d5:cd:8f:d4:68:2e:9b:66:b7:38:48:eb:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:6f:b2:3c:91:5b:33:a6:ee:a0:ff:b8:11:17:b3:7e:1b:17:13:97
Fingerprint (sha256): a8:47:58:6d:76:ba:b5:21:21:fe:f5:d3:a6:ea:83:97:c0:87:f6:fc:e3:34:a0:f4:35:d9:53:9d:78:74:71:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate huapingdao.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for huapingdao.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

huapingdao.ca
www.huapingdao.ca

Other certificates including the domain name huapingdao.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for huapingdao.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA08u6NmykkDibOsqE/BGg
NrxuJMBUM1pDjVMe2GlWWiXlIpnIsm/RhoRPLKQ3unD1f/urmXyOJJJ9AZn3tWed
xJZODeeYJPR6XdVwubVARzJPb5UTdn1LtY3LSI6MEBitbU1HH//xl0HLLuTZKjvU
+k7p686gv4Bi0IEzsaXlCqohi3BAozHuXjx/ZcUsyKtbldguL4BFmo8G2ZdQuzae
ZrAreIgISCkQNPNrxRSa2NW2kaRcr8ZgYoB+TLqGnu3SbAvD1SgMbNxXUeArTtsT
vpglFBEw+O5xd8t6Yt3mrldVnZx7369wsBjytGbxBOTo5qehjxc2jyBS9e0G7L39
w6rgPhYJxQq19UWA6hDYsMX+deuJdDwcdJpHM+mH8k5+Gsp1Q9T6WUvR7XT6Ar5K
uUADZJiWKhMs42ouOUFZK6wWCTjrnv6v4gbn4wiTYiNdu+vl+EobgTsl5JgdH6Mo
eAPpIKo/D1542NxYYxJIlFRK+KyzxPWVvuUuQ8FVpFVQXQ2AJO2XsCXzs2zTNIWM
4Fa4EeSJdZQzVCgKHeK6mwuawGxA/0FS/krIV3yfZt2hjKgvPD+a+e3IWKXr6NJi
j+iPW0zsg/c+SgSL9M0lnmlulbfHITVG/ZfhCwgRrZycPlSMJBatHtWjnt7Rrtyr
Jx1aJVYXgb81o2OUfMBLLWkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302042686376212594824455059456053054237496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 02:59:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 02:59:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'huapingdao.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864051520423116310546636881590070781334065770116834242868953297887308327126463150576135149598610665848877981650412379697691800610384825235705588490926565266611449465809063412707264660050005508516073132813588362130173867572333113198005326090157801592124958740774626099828770458627316445963289959547087901848378411638177382860938448671810418261687391535644047046399447895414395150875051731088451170324662285321164283363317609196974068295481287420547967598440853636758521191928566497534551961298001677032038696023380515496958473862896050927360984639542572426111956346833074377589630281430312647233873404442705953579867656569601696665676982655911756983726650847715487819919970446820980601076133771855367527190149109450883770644814233125008440524317092758827796368736005077306896350827565150941805641433656956091812027530935777076328855315845442913844402708229791362413262839698687741275404234294465523999467798716687977497719454150241840374125697284430380297850559207617515658961334092493361468981071951961361133017643877065871655789220212583333732583578184321486041918981936260608643964508655277379010162372052420912507650298629367340633092684054677716940225378444523919245107473940186723211606839601326188459005330375443564527583178089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc631be60c5cdad5cd8fd4682e9b66b73848ebcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huapingdao.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huapingdao.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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