hongkong-01.dayunet.com

Issued by R3

About this certificate

This digital certificate with serial number 03:79:62:e1:94:dc:f1:3c:bb:55:2c:70:45:6a:f8:ea:7e:39 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hongkong-01.dayunet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:62:e1:94:dc:f1:3c:bb:55:2c:70:45:6a:f8:ea:7e:39
Serial Number (int): 302642459822395862511856224193059274522169
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:2e:51:f9:02:b3:f3:e2:eb:6f:25:99:d6:f2:30:b5:9c:22:e6:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:ea:18:6d:a6:d5:b7:4a:e1:c0:0f:1e:1b:20:61:57:e6:44:2b:8c
Fingerprint (sha256): d6:52:9a:04:30:73:4e:1c:0f:48:0d:86:cf:dc:ec:cc:8c:62:f0:8a:e7:20:be:4d:d6:3e:d8:b1:c6:66:ce:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hongkong-01.dayunet.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hongkong-01.dayunet.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hongkong-01.dayunet.com
hongkong-01.dayunet.com

Other certificates including the domain name dayunet.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hongkong-01.dayunet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302642459822395862511856224193059274522169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 02:01:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 02:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hongkong-01.dayunet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747808838284322883452530128351541417891130367868398725656822031211385676837355152781187153425836351941422241974366229963166253541001859929549591972064556527307396584305787960005109173882484487104665652002684903486902091519972670120084648013398348056141986340128305164849433139461481271639377637831369276944808228771465101745081188091819890145439113282359583220024168480344022653627601423939513602532167737133132711837988933354803050508175845483122086396837402035200432872372110311138293663087049644004363856335327862912783515599506302619553846598093428866561959372572890443302260845653167402655030168947482292349721571450487395682752055372821096023555368173498685940001410640969836363249685927307406609097027817469593058469983036183505028052948988801488327170864663066436285213304281684492747553865778914356457086628571948297827144027374601468908033374561840788226754147584666646084393312184471965178778246513232827039426506151198325225650924005592225566924193621978140854535875206116842845835786190259390564281727688125824799736116586629991267991961471743043336442474173073771972095757541022930551403385583260241374393069828800776046341275639377401830551070095425898368250452877638366561432430575724491482400823060328445948802684069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a2e51f902b3f3e2eb6f2599d6f230b59c22e65e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongkong-01.dayunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkong-01.dayunet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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