www.indocina.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:10:ba:32:14:e7:76:c5:28:8a:f6:09:9c:35:d1:f9:ec:fa was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.indocina.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:10:ba:32:14:e7:76:c5:28:8a:f6:09:9c:35:d1:f9:ec:faSerial Number (int): 354141158043821578290483018500298981895418
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 56:f3:e7:d8:34:2a:1b:5a:a8:16:ae:66:bd:45:a2:fe:f4:69:74:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bf:d1:a3:20:bb:f8:99:ec:7d:88:c3:64:18:8c:c3:37:45:d1:91:c1
Fingerprint (sha256): ce:9a:45:37:8c:6f:08:69:d6:41:be:ed:4b:cd:cb:ce:5c:e9:46:82:8e:0f:fd:0c:86:b6:fa:34:b9:01:85:7a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.indocina.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.indocina.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.indocina.com
Other certificates including the domain name indocina.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.indocina.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISBBC6MhTndsUoivYJnDXR+ez6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAxMjM5MzhaFw0y MDA1MTAxMjM5MzhaMBsxGTAXBgNVBAMTEHd3dy5pbmRvY2luYS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1huKxUvU/jsjBvAzYHR8gcYb0zAW5 AA5O/IwlrMFWZgtPXEYkM5tgZ7V33jNBf2K3kugXcLGlGt2YwoG8R1AOeqk7ZZeC 3+cRzVw21lNeIIvFLADG/914GIKCVbYh29K43KFJyQMkuX7My5F5+RtonN29BS0W jFgW9V4MwDSyTDPZcyGWrEwrYAHwkgq8jBT3iCI3hNhjkQj2swnNVwgssJTJoaw2 ddfuw365WBHr6sol9DG0A12jg0nFpEEmVdaqjiOCw6dL2eOs6NWyOYjNPGUjaXU5 4opbO3Jqmi3YBWkJNCq/RBaC0YQM0zD44ANV72hID87fNZ+hXjl3jaAvFp4MOtkn tPlqPvI4V80bI8nXpkA3ourG9mKoF28+Z+siejgYdJN54rPNhZPEekyTjvfgcbdi H5PBCVgsQtRFLQszz4ZZvDZyhc8XwXgAmbSjZifO0dn8SGPBsTKZtWxfDQXY9MYo x24oRcjr12iYwftbYhqdf0fwbk8VnUgUvSwT6I+9GxpBsJe9pTLzUYQtzIRofauB BeixEP1HHCVSD7NAMnQGwtTUn3PLcrVOYrA5Enc5T4n0Jb+hpJiUD6dYMVZvZbhh lc5c7VU+LMW80+DwENOsrptO/Ml3OSHGb+giitgyQAwKO9t99RL3/7VSumpNb+r+ CalYD2t2U3IwEQIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRW 8+fYNCobWqgWrma9RaL+9Gl0cTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5pbmRvY2luYS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXAv U6+rAAAEAwBIMEYCIQDy8vtXj+QA0OQ2rrufSWhrP9IcYZEwt2F9eAP/8VTAqwIh AM/RB/fBmlqEjhFiyeXmO2kTB7r3lUJlY85cp9+tPLNRAHYAB7dcG+V9aP/xsMYd IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwL1Ov0QAABAMARzBFAiAM+wjGzJC5bvwX gqXUeQAPFKVOs6A07N0uOWzFxxugHQIhAL5dIT9c6dIgS5tTs5AWnhhyWpFEfyeC Xp0zYzQHtM2mMA0GCSqGSIb3DQEBCwUAA4IBAQAUIdU6WSbk7zEcvAKJb85Tr0UA ezxxuUeC7BR6AjO7NEIiq16p2G2gpPCkPSNjNNuSq6eYbn2Zhe2hfoMGXcAjo8FC rIhuWkCkos3mlq+PNeO2EH9MDDCtd/GVfOXAyKeG0eGM42L2yEDU3AIIdIxldurC dqupI5Ug0TeuIe5vj0sofeAU7r/ZB/D8xG7fBXZAUHP3ejFlPgDlN5iTGaI2x5gf tEDegyMqmZ2fWQMe2e6t/ftf/o+VeHDAvDQ+cVYt9YBan4IHrZMj00Qey3VkQUPa bJPx/sM6KSSQcenVo6E9Cw5xLc5z3yQ1SCmTf8PqfOV2tJgLSt1xkutoiZp7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtYbisVL1P47IwbwM2B0f IHGG9MwFuQAOTvyMJazBVmYLT1xGJDObYGe1d94zQX9it5LoF3CxpRrdmMKBvEdQ DnqpO2WXgt/nEc1cNtZTXiCLxSwAxv/deBiCglW2IdvSuNyhSckDJLl+zMuRefkb aJzdvQUtFoxYFvVeDMA0skwz2XMhlqxMK2AB8JIKvIwU94giN4TYY5EI9rMJzVcI LLCUyaGsNnXX7sN+uVgR6+rKJfQxtANdo4NJxaRBJlXWqo4jgsOnS9njrOjVsjmI zTxlI2l1OeKKWztyapot2AVpCTQqv0QWgtGEDNMw+OADVe9oSA/O3zWfoV45d42g LxaeDDrZJ7T5aj7yOFfNGyPJ16ZAN6LqxvZiqBdvPmfrIno4GHSTeeKzzYWTxHpM k4734HG3Yh+TwQlYLELURS0LM8+GWbw2coXPF8F4AJm0o2YnztHZ/EhjwbEymbVs Xw0F2PTGKMduKEXI69domMH7W2IanX9H8G5PFZ1IFL0sE+iPvRsaQbCXvaUy81GE LcyEaH2rgQXosRD9RxwlUg+zQDJ0BsLU1J9zy3K1TmKwORJ3OU+J9CW/oaSYlA+n WDFWb2W4YZXOXO1VPizFvNPg8BDTrK6bTvzJdzkhxm/oIorYMkAMCjvbffUS9/+1 UrpqTW/q/gmpWA9rdlNyMBECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 354141158043821578290483018500298981895418 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:39:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 12:39:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indocina.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740565126719423630295438536115440042625904502449797006689540731873295049040072913509746657270561800766764646892058520257874374968605485771771221684492809120185269650209850648073360981793852553346121520912232884376493806290987542282060182351384074405104071232736152915408066450179402268757826187168560044958516922887172340951104107539078217019228952669554471026894491135091319169662525501639929110564338713774286348315030227923346059563589179077583895172718472348684347595738478832109230333626141144798758161196878145959155453270850226693456711061594579521644549283948101423476600305993732065303520214647095057299544564627900368007232599596406435201219953494758602803188160026312715480107181720247192268624218712476976021428185197111806285432721606172435928082388750168415324492868010206637231125724332407554280154556525688899356425413432268182653519780806910102680607386068071027596263822190276710952287229983274341965443991021388987305758508985114755720541444750142184070403051621932657421133984652300030318527233644068173493303893817036462378286308034263228821688239378612508532501747132310847419854918408968032517982498303048853860477424327122925005268394251514997928134966323150032451253496727373610160871185921818837529121665041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56f3e7d8342a1b5aa816ae66bd45a2fef4697471 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indocina.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702f53afab0000040300483046022100f2f2fb578fe400d0e436aebb9f49686b3fd21c619130b7617d7803fff154c0ab022100cfd107f7c19a5a848e1162c9e5e63b691307baf795426563ce5ca7dfad3cb35100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702f53afd1000004030047304502200cfb08c6cc90b96efc1782a5d479000f14a54eb3a034ecdd2e396cc5c71ba01d022100be5d213f5ce9d2204b9b53b390169e18725a91447f27825e9d33633407b4cda6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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