www.hengqinmall.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:37:86:be:22:e7:f0:b9:24:83:50:58:41:b8:42:0b:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hengqinmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:37:86:be:22:e7:f0:b9:24:83:50:58:41:b8:42:0b:aa
Serial Number (int): 327085161774992441701294080744182679473066
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:e4:06:c0:76:78:ab:4f:f0:82:1a:4a:ef:52:4d:e9:a2:bc:68:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:4d:c8:64:a1:22:78:2d:14:33:3a:13:70:32:c4:6b:e4:c8:ec:29
Fingerprint (sha256): cd:2d:cd:d6:f4:03:70:c7:cf:eb:c2:42:61:e5:5f:4b:e1:c3:27:33:57:1c:ff:57:99:71:e2:5b:24:45:bd:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hengqinmall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hengqinmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hengqinmall.com

Other certificates including the domain name hengqinmall.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hengqinmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327085161774992441701294080744182679473066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 09:19:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 09:19:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hengqinmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858114063005279649497732400255854764615849755788149951836468113533853363261939206934402546143328331829097891358661088010625724689701567201592140398185966065304260411317449676181222809817952732801421243306466215084586121016393109776562308202913469611557352112952532918367747685203935533004219804838769369043452438503268004915446207287930151214651767178802004182136618158336059193637624274167165200487984863377062500221388395997784296749647770236267339099654373200347838201411279063406448896188026544288252079327888639857461021045698539897549871954123141342737644441407462314842880354503343338951344935179931339962730660831157860986161387179521964358528248177383356984081702160010634763202870374217285936381765516276259141599983548216591756301963496821324321544183922515010588624149478588676535366343832482528605377158889931683735205101233017362344491954879984696514733564250475765355486156916236227580901770471488392323226483206363293740794050370960677440106187224993290445065246090454931810658746735397242603040645671037002595199449055494822105478869802735018602492977288018969433838199280238276220388161999856744305611492041960977709322620906739176082412251714273817932963915888487078708525641242508462648355963706123202211176416231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24e406c07678ab4ff0821a4aef524de9a2bc6867
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hengqinmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4a86d133000004030046304402204ccde28e4051537103cc29885b991752e7431a482411479ed51618bfb9ca2ce80220280a99dd88cce506e8790b49935b22dbbbdd2f7c6a7a1e1c4bff263eb2bef1cc007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4a86d127000004030046304402200176af7c9d70971ddaecdfac078c8aa350ba53e4b28c4b0fcfcd986fb0535929022035578f5d9c2cef57b081e192123061543482759f2250904459de6af95f50e89b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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