junyuliu.me
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:19:88:42:c9:19:29:17:6d:a0:54:57:50:f1:61:75:5b:41 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=junyuliu.me
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:19:88:42:c9:19:29:17:6d:a0:54:57:50:f1:61:75:5b:41Serial Number (int): 270025038746081364989028857503677557332801
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 50:b3:9e:a4:04:5d:ca:c6:6d:30:86:30:eb:88:09:4c:96:a6:60:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 17:48:db:dd:48:6f:05:c1:b6:b9:4c:10:9f:48:b1:2f:92:d7:6a:83
Fingerprint (sha256): d1:0d:aa:ed:64:5f:7e:9f:da:8a:7e:8f:3c:f2:6f:ca:3f:21:85:ee:d5:1b:92:a4:5a:c7:05:f1:6b:01:48:02
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate junyuliu.me
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for junyuliu.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
junyuliu.me
www.junyuliu.me
www.junyuliu.me
Other certificates including the domain name junyuliu.me
(limited to 100 certificates)
Certificate
The complete raw certificate details for junyuliu.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAxmIQskZKRdtoFRXUPFhdVtBMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTkyMjMyNTdaFw0x OTAzMTkyMjMyNTdaMBYxFDASBgNVBAMTC2p1bnl1bGl1Lm1lMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWMWrzMWb4obbMRdgbNikorxC5Mr8aTTUCnQ Q5U1QTPb0x6mfGezCZ7uyK1InyPM5pVQII2+YznkUIWgPuEvq8wlWzmj21BccKee P6RGk0TKEErXIYilbBqHUQmwjwi8wGtO2LhTm8z2BZKXShUgNQljyeHmgRAu3oDk RBigexSs7B5IdCnicohT1DhYZBr1XXkKkMBphEm6CNilfiW8ySZ/ah9MwzkYuonM aUoA9N4jmmsEAS+q1DLDkB9rOCrrCNL/WtgL1loL9zJFbOWuuIezyL2ttnte8XwQ fSGllcyLdcxcZyrl1n0/AP8WvzPHLXu9t4UA+zFeTHVdGnPf1QIDAQABo4ICcjCC Am4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRQs56kBF3Kxm0whjDriAlMlqZgmzAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MCcGA1UdEQQgMB6CC2p1bnl1bGl1Lm1lgg93d3cuanVueXVsaXUubWUwTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWfI0KhHAAAEAwBI MEYCIQClvG+Ui9p494OZnnWIJtxfquCJnMWZvPgk/4+TBmuphAIhAOSXouZqvoYV IlW4y4RmtHJZro4VXcAFWVcDZbcS3G61AHYAKTxRllTIOWW6qlD8WAfUt2+/WHop ctykwwz05UVH9HgAAAFnyNCoRwAABAMARzBFAiALnuwd3I2sKaX555iILwT2T5y5 Z+0yTYKtCJn0B32YqAIhAJq5WX/xCfK+mwHufdYntkl2AFJE1ibAVMBd4dXPXpYf MA0GCSqGSIb3DQEBCwUAA4IBAQBip8nT5LsOnWymicsv/d2isjvXcopvFp60DVQh wutw3tXAUvxctf52n6XFnuX9JrNANJoNji9pX0yh6GGSIlyybb1TgToFGyn+0PHV 9LNlWHVN799udcZCDqQXkWDAmw1+vDdG+p1aOSC58tD28fUZoh9W8Eu8TF8cSOHl Hm5Gw2m96fSGsveuOP+FxhWwmUTWLcOwNn25skU95RFUtS07n1XhgATLAYieL/DX /0tLAqSci6b8F37Zj4BTZQbNb6GV7V/XCJBRBBIeIYLt9CY3JRqWhk5IBz1K0Xne pC5Z6RNOew4A6ng1MhAbJpSJTqZyxCvPHNeJNClxisfs4pPL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWMWrzMWb4obbMRdgbNi korxC5Mr8aTTUCnQQ5U1QTPb0x6mfGezCZ7uyK1InyPM5pVQII2+YznkUIWgPuEv q8wlWzmj21BccKeeP6RGk0TKEErXIYilbBqHUQmwjwi8wGtO2LhTm8z2BZKXShUg NQljyeHmgRAu3oDkRBigexSs7B5IdCnicohT1DhYZBr1XXkKkMBphEm6CNilfiW8 ySZ/ah9MwzkYuonMaUoA9N4jmmsEAS+q1DLDkB9rOCrrCNL/WtgL1loL9zJFbOWu uIezyL2ttnte8XwQfSGllcyLdcxcZyrl1n0/AP8WvzPHLXu9t4UA+zFeTHVdGnPf 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270025038746081364989028857503677557332801 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 22:32:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 22:32:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'junyuliu.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24917808493442524575269975889343094035263177292950721551674325351808214641258729661179608413798377484509607760501359500437162804617773080451086174836867650292994083877447656600573703694698131972044602178072287426374042955642069583814575060703814324877250780038174995392837457730782327605507234439499534202900844941466500310490493998655251810339155999311731738277427212176540866546673577133850038019151016573972168071143387710557514172753451991761925118189290211470859484820346414814449722182546164922428242025281295147901989042438502064868961668668485838809990008240783371738180114883651491880767013074678204589137877 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 50b39ea4045dcac66d308630eb88094c96a6609b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junyuliu.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junyuliu.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167c8d0a8470000040300483046022100a5bc6f948bda78f783999e758826dc5faae0899cc599bcf824ff8f93066ba984022100e497a2e66abe86152255b8cb8466b47259ae8e155dc00559570365b712dc6eb5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167c8d0a847000004030047304502200b9eec1ddc8dac29a5f9e798882f04f64f9cb967ed324d82ad0899f4077d98a80221009ab9597ff109f2be9b01ee7dd627b64976005244d626c054c05de1d5cf5e961f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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