iway.hk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bb:b6:6a:5d:de:51:2e:11:f5:e4:c8:eb:e3:62:c5:d4:8f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=iway.hk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bb:b6:6a:5d:de:51:2e:11:f5:e4:c8:eb:e3:62:c5:d4:8f
Serial Number (int): 412324418123834207833715198506463740155023
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:87:8b:36:e3:bd:18:5f:6d:d3:9e:2d:b8:fe:5d:62:f7:96:0a:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:33:38:be:be:4b:ba:b1:26:e4:e1:b9:35:d7:4c:a4:b7:8b:38:08
Fingerprint (sha256): ba:9d:b1:dd:14:2e:02:29:1c:32:57:4a:cb:5a:4a:d6:48:63:c4:3f:91:c7:63:e6:94:ec:66:7a:88:32:cc:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate iway.hk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iway.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cycs.iway.hk
iway.hk
tommy.iway.hk
www.iway.hk

Other certificates including the domain name iway.hk

(limited to 100 certificates)
iway.hk
sni.cloudflaressl.com
sni.cloudflaressl.com
iway.hk
iway.hk
f7e.dev
www.jvdevelopment.app
wreely.com
sni.cloudflaressl.com
www.staging-airtracker.k-9apps.com
www.aleksandravujadinovic.com
iway.hk
link.vcoloring.com
iway.hk
iway.hk
thaipostcheck.org
brightpalette.ca
iway.hk
iway.hk
www.kalmanfamily.com
iway.hk
iway.hk
content.dev.wavemakerfutureproof.co.uk
iway.hk
iway.hk
www.iway.hk
nivishka.in
iway.hk
myjobis.fun
iway.hk
iway.hk
sni.cloudflaressl.com
iway.hk
iway.hk
iway.hk
www.cflee.dev

Certificate

The complete raw certificate details for iway.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISBLu2al3eUS4R9eTI6+NixdSPMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjMwMDAwMDlaFw0x
OTA2MjEwMDAwMDlaMBIxEDAOBgNVBAMTB2l3YXkuaGswggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCtfmaUJw+Iz7fIWuMqaOilYLxH+s949xcpgIGPKk9F
RKjTXxvEslFpMHJOXB6YwVqS3/e5otD3lWnni4hf9N0N4sYm4PxTE6qkIdB1hqwl
Fr8msxuT0+4UD5R1yNqG9QzfwzuF3Ii31xyHyZaKnDWQvU22qLfv79yDBut+j2qV
xG8VBdRrIJKrT/wGmdIOmkKmogCJsw6g848UXQ1/kSsHaqyzKFiIjrgu7ecLYYju
KE3SP4yglzHfHyFr3S52TJqThZTKhB1+Z9PsyjBY1Cxo2zll+zACkY8lxjqt0bZR
DEjOBVyKHIoq9ltWZ9QEgTwk6m36fiECdnOZ7x67RiV9AgMBAAGjggKGMIICgjAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFLmHizbjvRhfbdOeLbj+XWL3lgrPMB8GA1Ud
IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr
BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr
BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wPAYD
VR0RBDUwM4IMY3ljcy5pd2F5Lmhrggdpd2F5Lmhrgg10b21teS5pd2F5Lmhrggt3
d3cuaXdheS5oazBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d
8dv+AAABaagP7PQAAAQDAEYwRAIgC8kOlX8az89HOOZ1nLijAPAgfc060F3zcoBV
xB8WpVgCID4jnKGy67B/RYnsbzQsazD3zDAJVt7EYYx+QSC8DgOwAHcAY/Lbzeg7
zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpqA/s4wAABAMASDBGAiEA/J1F
IWxRq6phuNtcXRBPC/pxpvAk3okV2g6qrKakbOQCIQCKwyPttt3Mi7od5iOhZo4O
ScOni4BGsuXw/4zR8ygiXjANBgkqhkiG9w0BAQsFAAOCAQEAmdvIymQeeJ7h8BeP
uJDFmr3kLj65eOmU8NA1mDQI1THWMEJAow738CA+AJD1cEqvnLLtnoyPM8sHDHTy
clxgZ3FG5gHX5/Pd8ZwK6+h8kI6iyLydoe0j7Hl5OA0iKuR73ONl+cqaAET/cG7p
BDvAsOzMlchScgcMVtlPmQPW0qsRu5oR64Ig95XYfZLhQqfoh5FsdqlO5WmybguB
+HLngl3IuUwVWB6iZ2w5p+9XJ/gtZkyPAJ7CktUGoFPYmnOhVhKCiXzv+DjyctUh
lr+9bSSCkll1ZEzZIFIaoBrZvJLK6H0tjMHCwCV9c1W7dKdoQLSh2unir0pqNANO
oHZkCg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX5mlCcPiM+3yFrjKmjo
pWC8R/rPePcXKYCBjypPRUSo018bxLJRaTByTlwemMFakt/3uaLQ95Vp54uIX/Td
DeLGJuD8UxOqpCHQdYasJRa/JrMbk9PuFA+UdcjahvUM38M7hdyIt9cch8mWipw1
kL1Ntqi37+/cgwbrfo9qlcRvFQXUayCSq0/8BpnSDppCpqIAibMOoPOPFF0Nf5Er
B2qssyhYiI64Lu3nC2GI7ihN0j+MoJcx3x8ha90udkyak4WUyoQdfmfT7MowWNQs
aNs5ZfswApGPJcY6rdG2UQxIzgVcihyKKvZbVmfUBIE8JOpt+n4hAnZzme8eu0Yl
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412324418123834207833715198506463740155023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 00:00:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 00:00:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iway.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21901557266465363537182470302737681054355749751528179243882683770796611708855532411705762296791103209803885330529546395580084856652163643745712586117475618451820273804495217687166648543582654905999003634022348515293127334995129156044075550237673479036722917580123150666318723409145816112726621627127080616615366879107731455290765192503146970788982799512181336017000396593545588461071223301962416508817466662768730854498546460012959119214834566057197421432834962987258861261978349426305487844693769817295807722033725974240440270628505302930518226798139194265712614155295841993885989138083176548972161222544066689246589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9878b36e3bd185f6dd39e2db8fe5d62f7960acf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycs.iway.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iway.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommy.iway.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iway.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a80fecf4000004030046304402200bc90e957f1acfcf4738e6759cb8a300f0207dcd3ad05df3728055c41f16a55802203e239ca1b2ebb07f4589ec6f342c6b30f7cc300956dec4618c7e4120bc0e03b000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a80fece30000040300483046022100fc9d45216c51abaa61b8db5c5d104f0bfa71a6f024de8915da0eaaaca6a46ce40221008ac323edb6ddcc8bba1de623a1668e0e49c3a78b8046b2e5f0ff8cd1f328225e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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