liese-sifone.campaign.com.tw

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:d6:64:bc:51:bd:6b:33:1c:f4:09:36:f5:3c:f5:88:a3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liese-sifone.campaign.com.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:d6:64:bc:51:bd:6b:33:1c:f4:09:36:f5:3c:f5:88:a3
Serial Number (int): 307559955169960366900454706408953325389987
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:59:0b:02:e2:62:d9:12:34:a7:07:fa:68:e9:c8:10:42:c4:d3:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:fa:45:20:5a:89:e8:3e:64:63:db:f6:57:96:99:8d:e7:6f:29:6c
Fingerprint (sha256): aa:c0:b3:f4:1f:1b:44:4a:88:fa:9c:d9:34:30:0f:30:19:d9:ec:9d:c5:2d:6b:12:ce:42:b6:f4:3b:6a:48:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate liese-sifone.campaign.com.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liese-sifone.campaign.com.tw

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liese-sifone.campaign.com.tw

Other certificates including the domain name campaign.com.tw

(limited to 100 certificates)
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
sni.cloudflaressl.com
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
dbs-bank-booth.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
dbs-bank-booth.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
sni.cloudflaressl.com
nodelinebot.campaign.com.tw
curelcleansingoil.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
dbs-bank-booth.campaign.com.tw
upj.campaign.com.tw
upj.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
sni.cloudflaressl.com
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
order.campaign.com.tw
curelcleansingoil.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
yourls.campaign.com.tw
yourls.campaign.com.tw
liese-sifone.campaign.com.tw
upj.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw
liese-sifone.campaign.com.tw

Certificate

The complete raw certificate details for liese-sifone.campaign.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307559955169960366900454706408953325389987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 13:09:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-25 13:09:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liese-sifone.campaign.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916491022239471816865350834870092216629595482628853883148371956523366584618652926289849062031899432243112671571850207108662921804987497050705922834858265247176403677181773215933972731204905675543193272748206333125756613068239279011638777536035032671388856430493444889721155923581019432269391859284178934598233323391022611474188390445523120972390934471646391529356064131537569333452644821924333039526404449229123157627243640234973467607126307568610482375340521332179430343729646582669398316754012250325731466706858853260050468233925096712604171608370226746263209559946867148532036133266481687797989430571882158652530185594261524887413826517918668556460667521183148909626568121544360477786188360351823663463931015157673105618993507258747889664596049300692834880583983792118321012734655523376539433741424863677391013707036746848328048724786231528867863359866284789536742330117689820497878424207178395080602783580863057203236797622127837503134350898894356451081485357938380745513903470866881379975032825808626751041262052610187134203810134393261803428756799273350461211067249294133576441257371602681678486574421298954575414894193958634860633024583282716202927000558206070708338533822358613635505053736141397445597623047429481684586663171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2590b02e262d91234a707fa68e9c81042c4d317
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liese-sifone.campaign.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001657bb7e0670000040300473045022100e63faf468fe034c630ba2c4793e2476a5b26288575733b2689f700812d8ce4200220418ffe6e0fd559b1154497fba6979bae040126fc72b97dcb544b457f8d9e5422007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001657bb7e080000004030047304502203e0584a6008f29fc2058db9d8f61bfcac546476545955bd182147bd2f89b1290022100db6e90f3a5505151b404f514d975544926203680c7539966193a8c216ee6d749
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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