nav.tw

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:cd:88:9a:bd:4a:6c:6b:35:ef:7f:ac:8f:44:26:55:8d was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nav.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:cd:88:9a:bd:4a:6c:6b:35:ef:7f:ac:8f:44:26:55:8d
Serial Number (int): 315714955165706858759607673497187458110861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:65:10:73:8e:27:48:65:7f:64:3a:14:3d:08:94:26:c5:d7:8f:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:53:77:3c:49:8d:40:94:b7:18:bb:d5:4e:4f:a9:32:59:22:50:eb
Fingerprint (sha256): ba:af:02:c0:3f:62:65:11:01:c0:02:51:05:1b:bd:ac:6c:ae:00:18:c0:ca:13:83:90:1a:15:2d:ac:e9:03:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nav.tw

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nav.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.nav.tw
autodiscover.pash.com.tw
cpanel.nav.tw
cpanel.pash.com.tw
cpanel.pc-followme.idv.tw
mail.nav.tw
mail.pash.com.tw
mail.pc-followme.idv.tw
nav.tw
pash.com.tw
pash.nav.tw
pc-followme.idv.tw
pcfollowme.nav.tw
webdisk.nav.tw
webdisk.pash.com.tw
webdisk.pc-followme.idv.tw
webmail.nav.tw
webmail.pash.com.tw
webmail.pc-followme.idv.tw
www.nav.tw
www.pash.com.tw
www.pash.nav.tw
www.pc-followme.idv.tw
www.pcfollowme.nav.tw

Other certificates including the domain name nav.tw

(limited to 100 certificates)
nav.tw
1e.nav.tw
pc-followme.idv.tw
nav.tw
nav.tw
nav.tw
pash.com.tw
nav.tw
pc-followme.idv.tw
pc-followme.idv.tw
pc-followme.idv.tw
1e.nav.tw
nav.dmsuper.com
nav.tw
nav.tw
pash.com.tw
pash.com.tw
nav.tw
nav.tw
nav.tw
morestone.nav.tw
1e.nav.tw
nav.tw
pash.com.tw
nav.tw
nav.tw
pc-followme.idv.tw
pash.com.tw

Certificate

The complete raw certificate details for nav.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZPvVC4VvcxdnUd9FHVF
HItNYQHgFfUk0kUWjsAIBIH3e8oC1be6u/TgGYKWT961ocH+1wEAuhKeR4ns8qVo
0lzW5sEqIXVHulRSE9wBxX8yUQF+PszNS83H3ozQlF6iSQqLL1zFSI4TPgmZx3xK
tAwBoCrH1J6edrD+SKijIk4DBvf8EM4QKWoNVBiKg7JrFWcyKmlgAd+/lfi9gVi4
ClnpAJIsJbLh3WRCyzm81HkdgoQwDvDlNdPE58isgpEXH237A14lMKJPyVzRhULq
ASwlqqfcOZF0pZGTLBH27O57+HzIV7UBn/1Rzdmdw37A1mBd2prKsoOX6C93vBM0
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315714955165706858759607673497187458110861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 21:22:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 21:22:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nav.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25446848705497183443887531625717943237937123156891291653794092268334243562772421076414002872181712508516142238765240969655727698974898145759339877310427174560524243301070478094470565617530221617945033328484409785057926286947216366811764686043880111726760287755340003311861455504205584327012806908658198997083488873599603738432355305350585996346181589110591501974161247436690268110446885119320086302349659256044926182111829781455076765093765229991174497134177393676483415656979264669921965520257951587969333739328963243861603530463681597354401177029072206074718893795679885077212334408577454642594032996590917606651117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							956510738e2748657f643a143d089426c5d78f8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pc-followme.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pc-followme.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pash.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc-followme.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcfollowme.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pc-followme.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pc-followme.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pash.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pash.nav.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pc-followme.idv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcfollowme.nav.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001666013612200000403004830460221009a0f6f52173e66c6532ce94a6697c20e6e9b2e7ab543618321b8cf0df7b024fc022100b82366ed4bdf8788bcf779e33f1b91cc7cd19e0e9332d6ed879fa8cc6010feb700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001666013612000000403004730450221008c5cb3bee47b79a40ce6de6108a3f6b23deaaa5716e69d10ea70ffab2729b1680220497967645ac3d4d3625a1c506b13b8a147c3e473fa1b0e0ae2732c075aeac34b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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