www.indocina.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:10:ba:32:14:e7:76:c5:28:8a:f6:09:9c:35:d1:f9:ec:fa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.indocina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:ba:32:14:e7:76:c5:28:8a:f6:09:9c:35:d1:f9:ec:fa
Serial Number (int): 354141158043821578290483018500298981895418
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:f3:e7:d8:34:2a:1b:5a:a8:16:ae:66:bd:45:a2:fe:f4:69:74:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:d1:a3:20:bb:f8:99:ec:7d:88:c3:64:18:8c:c3:37:45:d1:91:c1
Fingerprint (sha256): ce:9a:45:37:8c:6f:08:69:d6:41:be:ed:4b:cd:cb:ce:5c:e9:46:82:8e:0f:fd:0c:86:b6:fa:34:b9:01:85:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.indocina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indocina.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indocina.com

Other certificates including the domain name indocina.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.indocina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISBBC6MhTndsUoivYJnDXR+ez6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAxMjM5MzhaFw0y
MDA1MTAxMjM5MzhaMBsxGTAXBgNVBAMTEHd3dy5pbmRvY2luYS5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1huKxUvU/jsjBvAzYHR8gcYb0zAW5
AA5O/IwlrMFWZgtPXEYkM5tgZ7V33jNBf2K3kugXcLGlGt2YwoG8R1AOeqk7ZZeC
3+cRzVw21lNeIIvFLADG/914GIKCVbYh29K43KFJyQMkuX7My5F5+RtonN29BS0W
jFgW9V4MwDSyTDPZcyGWrEwrYAHwkgq8jBT3iCI3hNhjkQj2swnNVwgssJTJoaw2
ddfuw365WBHr6sol9DG0A12jg0nFpEEmVdaqjiOCw6dL2eOs6NWyOYjNPGUjaXU5
4opbO3Jqmi3YBWkJNCq/RBaC0YQM0zD44ANV72hID87fNZ+hXjl3jaAvFp4MOtkn
tPlqPvI4V80bI8nXpkA3ourG9mKoF28+Z+siejgYdJN54rPNhZPEekyTjvfgcbdi
H5PBCVgsQtRFLQszz4ZZvDZyhc8XwXgAmbSjZifO0dn8SGPBsTKZtWxfDQXY9MYo
x24oRcjr12iYwftbYhqdf0fwbk8VnUgUvSwT6I+9GxpBsJe9pTLzUYQtzIRofauB
BeixEP1HHCVSD7NAMnQGwtTUn3PLcrVOYrA5Enc5T4n0Jb+hpJiUD6dYMVZvZbhh
lc5c7VU+LMW80+DwENOsrptO/Ml3OSHGb+giitgyQAwKO9t99RL3/7VSumpNb+r+
CalYD2t2U3IwEQIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRW
8+fYNCobWqgWrma9RaL+9Gl0cTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5pbmRvY2luYS5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXAv
U6+rAAAEAwBIMEYCIQDy8vtXj+QA0OQ2rrufSWhrP9IcYZEwt2F9eAP/8VTAqwIh
AM/RB/fBmlqEjhFiyeXmO2kTB7r3lUJlY85cp9+tPLNRAHYAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwL1Ov0QAABAMARzBFAiAM+wjGzJC5bvwX
gqXUeQAPFKVOs6A07N0uOWzFxxugHQIhAL5dIT9c6dIgS5tTs5AWnhhyWpFEfyeC
Xp0zYzQHtM2mMA0GCSqGSIb3DQEBCwUAA4IBAQAUIdU6WSbk7zEcvAKJb85Tr0UA
ezxxuUeC7BR6AjO7NEIiq16p2G2gpPCkPSNjNNuSq6eYbn2Zhe2hfoMGXcAjo8FC
rIhuWkCkos3mlq+PNeO2EH9MDDCtd/GVfOXAyKeG0eGM42L2yEDU3AIIdIxldurC
dqupI5Ug0TeuIe5vj0sofeAU7r/ZB/D8xG7fBXZAUHP3ejFlPgDlN5iTGaI2x5gf
tEDegyMqmZ2fWQMe2e6t/ftf/o+VeHDAvDQ+cVYt9YBan4IHrZMj00Qey3VkQUPa
bJPx/sM6KSSQcenVo6E9Cw5xLc5z3yQ1SCmTf8PqfOV2tJgLSt1xkutoiZp7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354141158043821578290483018500298981895418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:39:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 12:39:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indocina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740565126719423630295438536115440042625904502449797006689540731873295049040072913509746657270561800766764646892058520257874374968605485771771221684492809120185269650209850648073360981793852553346121520912232884376493806290987542282060182351384074405104071232736152915408066450179402268757826187168560044958516922887172340951104107539078217019228952669554471026894491135091319169662525501639929110564338713774286348315030227923346059563589179077583895172718472348684347595738478832109230333626141144798758161196878145959155453270850226693456711061594579521644549283948101423476600305993732065303520214647095057299544564627900368007232599596406435201219953494758602803188160026312715480107181720247192268624218712476976021428185197111806285432721606172435928082388750168415324492868010206637231125724332407554280154556525688899356425413432268182653519780806910102680607386068071027596263822190276710952287229983274341965443991021388987305758508985114755720541444750142184070403051621932657421133984652300030318527233644068173493303893817036462378286308034263228821688239378612508532501747132310847419854918408968032517982498303048853860477424327122925005268394251514997928134966323150032451253496727373610160871185921818837529121665041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56f3e7d8342a1b5aa816ae66bd45a2fef4697471
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indocina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702f53afab0000040300483046022100f2f2fb578fe400d0e436aebb9f49686b3fd21c619130b7617d7803fff154c0ab022100cfd107f7c19a5a848e1162c9e5e63b691307baf795426563ce5ca7dfad3cb35100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702f53afd1000004030047304502200cfb08c6cc90b96efc1782a5d479000f14a54eb3a034ecdd2e396cc5c71ba01d022100be5d213f5ce9d2204b9b53b390169e18725a91447f27825e9d33633407b4cda6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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