hengqinmall.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:3c:36:e1:e5:93:5b:f2:35:0a:6e:f0:79:f2:34:00:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hengqinmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:3c:36:e1:e5:93:5b:f2:35:0a:6e:f0:79:f2:34:00:55
Serial Number (int): 273667061649942995947496172891925896233045
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:2e:b7:99:67:89:c1:d0:b4:a1:1e:93:51:f9:0a:56:ec:fb:40:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:8e:c3:d7:90:cf:e3:aa:a4:5f:d8:58:13:19:4f:de:7d:a6:d2:eb
Fingerprint (sha256): b6:db:b1:3e:6b:f7:70:e0:3f:ab:45:f7:6b:70:80:f3:cf:89:66:80:b5:8e:02:63:ee:1f:23:0f:1a:a4:a5:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hengqinmall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hengqinmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hengqinmall.com

Other certificates including the domain name hengqinmall.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hengqinmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273667061649942995947496172891925896233045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 09:18:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 09:18:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hengqinmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722740251088214636382366223920846845752910642208538755490302164720176246360278727033951460493159885653128045863448046704046801473397734447855386266172927839789236840563197568409715103223945516215129043822594549313132698367158959385768139782315629815603597521336719186220304041189818700396759750126332340207109029919117690734688581671781041167905838411894172867024345301049310788023038723746781273514871371264027128823110651666640349986909026634279689122791801055515153331772856526610246082874615927018155407040108757654600175286085839324995692637893902013101185479015289642838297467016220020903467152053521477705443569937651677071332872141855794106424255643568766109750630569710680056913736608924197445268315102933533356812297520060504712462729316273280343239629821285338138618915263158195483406444410569079300303786288522336021833637279004118220439246532721804846499571046256560139759408197673660608145628635317183822443880404425679288225035879463298933716183149890654159502654121182786771008913826510777362097246230774034026319467700170174401577354992013887991845526579104890751744769585028896579151204737560256004411685935991703122170166952747015059384635525895759089734535435705740410150337720038350397545379674895074994890153569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							182eb7996789c1d0b4a11e9351f90a56ecfb409b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hengqinmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e4a8621660000040300473045022045a3e6d90356e4757e373049556ce1314791028c6bbd37bff3eb4c0eb2bc767f022100d052b7a9b996a59cf311805d654227e0943ca2f7e49477182078ece9a4362cb7007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4a8621620000040300483046022100b07546c6e78cc32979540bab1cf544465bb46ed09d9cd74b049a763b748ce9d7022100f10633510070935853430c424c2bbf70b268cb7ac7d0c0f43be04b0c2690025c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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