guangdongfinance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:6b:d8:2c:06:98:fc:d3:01:4c:ed:f0:e8:6b:20:d1:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=guangdongfinance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:6b:d8:2c:06:98:fc:d3:01:4c:ed:f0:e8:6b:20:d1:4c
Serial Number (int): 307758609521147539395060905058380317512012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:54:43:54:53:c9:67:90:fd:9d:ce:e3:f0:65:03:cf:bd:a4:f1:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:a5:f9:9e:21:c9:3f:b4:7e:15:71:05:a0:5a:7f:03:7f:71:a5:f3
Fingerprint (sha256): bf:2d:63:53:ee:f6:5a:95:6c:0d:d0:3c:21:d9:48:9e:ab:7b:74:4f:57:74:fd:82:40:a5:c3:6c:de:a0:5e:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate guangdongfinance.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for guangdongfinance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

guangdongfinance.com

Other certificates including the domain name guangdongfinance.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for guangdongfinance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307758609521147539395060905058380317512012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 22:21:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 22:21:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guangdongfinance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700096961355611411912097247007277198348653365058573833393740565325691985749165772814747210653707024309914896555869695103846890046299900342520880521013035989026176845511572467554912406807031907402570983662185892721371897261784553342169661095676592298697474719277938210552416197361378931522747178102026113502051178743637220313089570029507401101036148371352853399113902162420101330167087641996328541638273744739257861977666113859344889732598751384581563766869338833917551932494351335756677285149000911010345388220988160703239325724691110016491125243308749625121484311539570808138988519853118965652098617593735873638795757682063342344355569035023123074674677550781186002697326276213496908267257670027895522551725412267339431060132311449795974006921249370242361641086784484983267750267315639674713364826192164082659942939415681227097646501710184157824979870994868976021757513553846763517336851907820008649092662726805815149078912229844979288790316280839379280187910911209873246103642035842614675095198197857314648299389952946420680975588268639755449960477058779966531196825896180898160160564416364658456282195661371318975765850556657120785971496067204972943319785071599143977030261543231131827220382196052303817635966353171449236968700953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4254435453c96790fd9dcee3f06503cfbda4f105
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guangdongfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170504e5d640000040300483046022100d4c533f059469ee44d782433aa44a134f3f75ad1a4173d332ba1810cf781393c022100f7881661f28784a2058eacff36a2852fff443c2ea58d9475815760ae09ab2214007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170504e5d510000040300483046022100a1cae7ffbb07143f086e6e5f0539b611f02012178f02acac669599b95534c08b0221009affe1753a9f9e8cb573fb97d88f6381a5f476cb3d935400dac22adba237180e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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