lrc.cn

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:06:db:4f:ef:c4:a4:69:f3:6e:07:20:7b:3d:a6:5e:84 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lrc.cn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:06:db:4f:ef:c4:a4:69:f3:6e:07:20:7b:3d:a6:5e:84
Serial Number (int): 271894725272123308285213890820992011755140
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:95:b0:65:78:51:7a:f4:33:a5:8d:cd:e7:b9:1b:74:76:4f:fa:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:52:11:d6:91:4e:95:3e:6b:89:b8:0f:65:ad:0f:68:c1:88:9d:a3
Fingerprint (sha256): cc:3d:d0:55:31:c5:ed:be:f4:91:6d:12:34:e7:ad:2a:5d:2f:62:ab:9d:12:2a:e4:a0:c4:67:35:8b:bc:65:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lrc.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lrc.cn

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

en.lrc.cn
lrc.cn
sso.lrc.cn
www.lrc.cn

Other certificates including the domain name lrc.cn

(limited to 100 certificates)
lrc.cn
lrc.cn
lrc.cn
meetings.lrc.cn
lrc.cn
*.lrc.cn
lrc.cn
lrc.cn
lrc.cn

Certificate

The complete raw certificate details for lrc.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271894725272123308285213890820992011755140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 01:57:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 01:57:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lrc.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3522763064334740894894847255245503601116590606630736164424132412219807881789513641701624844827747710813089603954325144489903480690239514293743797693901399183747435458862812817257257613743684475203700208463392427142769677980842397778997740115287334427650758339523056438077012557025497624430395870903441972064224565144856882163173511850734719736634096113964163166861361359003506030133684578088352379911675295631380216760814191005662480211278457586851938036355408201188182806361367518610061788611696316144755279774236187133527044513421714833331355609295325709730705648296244005055298762241328042823407931498381789918201711955132638920091693997484756578548149889395102977710190090986205436236901026028672220652811118189335093680039609207776682592490552041825624246607880890298105899562968852506502964002968293326407828474402515564324809872557683287228249913296097105686182554699285941827040309125238084529162177002153949820892139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2295b06578517af433a58dcde7b91b74764ffa8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.lrc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrc.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001887a09c038000004030047304502200ad75eac7e27a401932850e0ba445a9ed2f01e1f5ace21fa1e2976b2cf692434022100d955cd374189ebd4a02c4b63ebd28029153e2d7d783999b90d48f807d7b72f5d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001887a09c05c0000040300473045022100bf1527ce5da1bf4e16e9e60bdfec3f2dccd01e5fbcb871b7934f4fe93a2e6cc902204f65adc419e9d1ba9598607e372c3304b6900f8101634ce442c6420b7a437d19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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