s.vpn.pixnet.tw

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:a9:1b:07:e4:1e:8d:91:0d:7a:9f:53:e6:66:b5:7c:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s.vpn.pixnet.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:a9:1b:07:e4:1e:8d:91:0d:7a:9f:53:e6:66:b5:7c:6c
Serial Number (int): 318388792954430638533762923181325436681324
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:1f:69:4e:dd:6e:07:9a:aa:0e:4a:40:5a:f9:06:de:77:62:ab:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:16:ca:e4:c8:2a:55:63:5d:6c:2e:20:21:7e:0f:53:f1:5a:6b:4f
Fingerprint (sha256): cd:7c:d6:66:54:f4:fd:ff:61:46:7f:cf:25:29:df:6e:39:4a:18:50:18:02:e0:50:51:20:d5:1d:b7:e0:10:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate s.vpn.pixnet.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s.vpn.pixnet.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s.vpn.pixnet.tw

Other certificates including the domain name pixnet.tw

(limited to 100 certificates)
o.vpn.pixnet.tw
cdnstats.pixnet.tw
s.vpn.pixnet.tw
appmarket.pixnet.tw
*.pixnet.tw
bill.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.streamtopic.pixnet.tw
checklogin.videos.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
checklogin.adexpert.pixnet.tw
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.help2.pixnet.tw
checklogin.adexpert.pixnet.tw
s.vpn.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
appmarket.pixnet.tw
api.i.pixnet.cc
checklogin.streamtopic.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
checklogin.staging-buy.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
buy.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
o.vpn.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
checklogin.www.pixnet.net
checklogin.www.pixnet.net
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.staging-buy.pixnet.tw
appmarket.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
*.pixnet.tw
s.vpn.pixnet.tw
o.vpn.pixnet.tw
checklogin.help.pixnet.tw
bill.pixnet.tw
s.vpn.pixnet.tw
help.pixnet.tw
colostats.pixnet.tw
buy.pixnet.tw
s.vpn.pixnet.tw

Certificate

The complete raw certificate details for s.vpn.pixnet.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ss0j7JJW0M154bvM1a0
ACsz8kHZoRyWCE1xICb742MtrJexbpsZs+iZFmrbxQclJxyQnhKOGaHptOsyvuWH
JxbmzBni8DECnISZ99oqmxe9n9mykn2GO0RQF1KjTMUSUK/NusLWiMm342LgyPix
DgeNRjqmJTp62MVvc7INOX1knppgO3wTDEnM9gOiC1i3kiePoXSDLaDv30+fFpua
QCSlgo8MnJusBy9Ekj8Mv5UDw4af/JepE0N9+aYbDXbaOGLfc07S+t7SrgNHdKQr
x7jQnuvO93qLz3iJUOCX2Q9EGY8Q29LHIqvxb8otf1ZeeT3ogWc/KYuLTg0QA1Pl
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318388792954430638533762923181325436681324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 04:36:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 04:36:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's.vpn.pixnet.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27620154759390420000712332335100966936797427537845046021306767326099566916377313432709154386458825639308580501965495875894227845909661982363272218314164451389178609565655019298986740475069811292178211921752223339554750665113907210622933582735895927686313149670253054586055399193443281310117664497332562265877048813105204337374631270741787169377176551737971075956716479676337451488955590231126294445434563713972481439910548121181657577958775374134342412175341605698300755823005677570704920686772025478576141643783423012861651807195217091838032109181051036382547849258947125756253488805320295754807556704896673205446001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f81f694edd6e079aaa0e4a405af906de7762abce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.vpn.pixnet.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eb5a941250000040300473045022100e8fb677bf6b7240edadb181283ca9cd1771454a99f364f48f59b89188271d42802207fa378f8faede6c4d2ab8293ab1676711f676d07588aaa1396b9a1a286e2afb900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb5a941510000040300473045022100f196ef576d247e07fa3c7ff5fcaf9deac5f5d9851a3a64c5634b2d713a5204b2022020509dff680163c560d095c427ba6d2a27c19d6351f1fd06e4f5b27e348286b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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