shwemyat.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:9b:e5:50:26:80:2f:c5:c9:63:60:d2:87:f3:4c:0a:59 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shwemyat.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:9b:e5:50:26:80:2f:c5:c9:63:60:d2:87:f3:4c:0a:59
Serial Number (int): 310885021999787193880355526602934568356441
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:17:0c:95:05:3b:67:17:96:5c:9f:18:64:73:c8:41:5c:21:cd:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:e4:97:90:7a:dc:6f:17:59:1c:4e:69:3f:52:1a:30:57:f9:47:03
Fingerprint (sha256): b7:bf:d1:6c:f2:d8:a6:e0:d5:95:e1:95:fd:4c:04:d4:a7:4e:3e:93:94:77:37:dc:92:a8:f0:95:29:22:16:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shwemyat.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shwemyat.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.shwemyat.com
autodiscover.synergyalliancemm.com
cpanel.shwemyat.com
cpanel.synergyalliancemm.com
mail.shwemyat.com
mail.synergyalliancemm.com
shwemyat.com
shwemyat.prosmartmm.com
synergyalliancemm.com
synergyalliancemm.prosmartmm.com
webdisk.shwemyat.com
webdisk.synergyalliancemm.com
webmail.shwemyat.com
webmail.synergyalliancemm.com
www.shwemyat.com
www.shwemyat.prosmartmm.com
www.synergyalliancemm.com
www.synergyalliancemm.prosmartmm.com

Other certificates including the domain name shwemyat.com

(limited to 100 certificates)
prosmartmm.com
shwemyat.com
shwemyat.com
shwemyat.com
shwemyat.com
shwemyat.com
shwemyat.com

Certificate

The complete raw certificate details for shwemyat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG6Dkfy9wvsWBssKgG2z
gLdkS20Dzn8woms60NAJXrtG5oRPRJlBk2y95BVBNMs8Y+Tc7WWbBLq5jCy4mnJl
mr7fvDqfWQ3cIrJD1Qwna0/zDSNHYeewYC5S5Ds0v8OcSaSh5QRVlQPbEI2GCKrG
bxfahSrETGxlHNOM6uypxMT5CRT/7pxePfgxU2PBz6cUdrKZwnFPXspKD9kN4PTq
gSEv3EbE/0u/W6SXHRJR1oV3S48YsxYnFgiJcXyjxSGg8eCYd4dyu2xfCcSfKH/J
3Rls8MBYoRrLxeUTbTTb+lDlhpHTrr5/G7RpPxyVcOyRB3OOqFcVOcDyKBagkAW/
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310885021999787193880355526602934568356441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 04:29:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 04:29:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shwemyat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20252625252619930882162941899556712636310834822265818539573240359443479210788894172256553392300075878374852043487963954809965092452214873547594392595516845599003295824438370156325494459642493791810215632867366692413391933655136898067637664518755246119861538274534824634660401704167302304566632147126141962037188528400396109891921773715233611910834305452770025558687072120622397694176262200689852492732352995651414255765742347618621650322110772006737094438052415199854791803404923025699576299358977603930534579653678464495218610604257387418760867090093009046196692932028922045291921935145087570056596442672205725548509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87170c95053b6717965c9f186473c8415c21cd90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shwemyat.prosmartmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergyalliancemm.prosmartmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shwemyat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shwemyat.prosmartmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergyalliancemm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergyalliancemm.prosmartmm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017100b7c10d0000040300483046022100fd28727d6f8d85d7c578bd0e6638e1a801f9d2cbfc7b53ff2cf8d3c26ce0d9c5022100a0ad3ecfcfa71fc4aed41e91a855dad4887988b58d0e7cd4c2b9b2591fc6edd100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017100b7c13700000403004830460221009833430a16f443b09c0ea55bd31da469e918a4489dc098b24834edd386f4f19c022100a6c50f47a3e882f06b559c300a46d17c14551ebee83285ce237c6f0f7eed3eae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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