hongkong-01.dayunet.com
Issued by R3
About this certificate
This digital certificate with serial number 03:79:62:e1:94:dc:f1:3c:bb:55:2c:70:45:6a:f8:ea:7e:39 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hongkong-01.dayunet.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:79:62:e1:94:dc:f1:3c:bb:55:2c:70:45:6a:f8:ea:7e:39Serial Number (int): 302642459822395862511856224193059274522169
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:2e:51:f9:02:b3:f3:e2:eb:6f:25:99:d6:f2:30:b5:9c:22:e6:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:ea:18:6d:a6:d5:b7:4a:e1:c0:0f:1e:1b:20:61:57:e6:44:2b:8c
Fingerprint (sha256): d6:52:9a:04:30:73:4e:1c:0f:48:0d:86:cf:dc:ec:cc:8c:62:f0:8a:e7:20:be:4d:d6:3e:d8:b1:c6:66:ce:bd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hongkong-01.dayunet.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hongkong-01.dayunet.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hongkong-01.dayunet.com
hongkong-01.dayunet.com
hongkong-01.dayunet.com
Other certificates including the domain name dayunet.com
(limited to 100 certificates)
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
*.dayunet.com
www.dayunet.com
dayunet.com
dayunet.com
git.dayunet.com
git.dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
hongkong-01.dayunet.com
dayunet.com
git.dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
*.dayunet.com
www.dayunet.com
dayunet.com
dayunet.com
git.dayunet.com
git.dayunet.com
dayunet.com
dayunet.com
dayunet.com
dayunet.com
hongkong-01.dayunet.com
dayunet.com
git.dayunet.com
dayunet.com
Certificate
The complete raw certificate details for hongkong-01.dayunet.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISA3li4ZTc8Ty7VSxwRWr46n45MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDIwMjAxMDFaFw0yNDAzMDEwMjAxMDBaMCIxIDAeBgNVBAMT F2hvbmdrb25nLTAxLmRheXVuZXQuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAt01uvIsBOrFEnFFlowRjuZL1rKwqiUpuWriNtrPogJvdc3LS5xUb 6Nhe/+Yg8twwdf/MOsMXOZyna+DKGkghYIZqKLHUf5LQYPuI4+PZXv0xDP2icZJB mJSb8XpRdYTyK1oFTBes6mhejP6KnqFHy7AXG87dHtAhvTfTHXuWU2/0f0B7thE/ GWKokIn5eikBQzRakLIbS5+9MsIGhQicRuGvhEQk+SI/dgitAbcxhTUFWncyHxiU cprcAVT0PseCOPcvZE+VAV45x9Ee/HY+WLD5jbILN4fhd8WGAUE8HJ4YfjoCLE+X YVN34fmQz3Kdpr4IULBRTDHkxPrKssCRPS+D03nijGvF6DCDLw1iXTyRo0+6vx74 F0aNrvXtMGS1LJOqDjX4niRy7mYtoyLXZtl07XDxESGjVnSFs8vfgXcEdT7ghsBc O02tF3SXRnUrSnSBmDt9Pl+EJ8mM+NpLt8PjQynThpdbKhFwfXXNmpcCqoQNDTgx DUIRimiin/2fBiJNTRUYMdT0/tIzALAez0JtnCun6sbx5xzsF9nVyQQoyVpGqJYX OqZbYuaQj3o0nfxoKQrWfQUd9s8b1nfxf3Rlb5Q9y2SV++4vamQ0w4aOYxYkWoDb kl2izcebVwVbZutiha39xgwAM1Aw7V0aByW55wL33Dh73WO3jLoc1KUCAwEAAaOC AUEwggE9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGi5R+QKz8+LrbyWZ1vIwtZwi 5l4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wPQYDVR0RBDYwNIIZKi5ob25na29u Zy0wMS5kYXl1bmV0LmNvbYIXaG9uZ2tvbmctMDEuZGF5dW5ldC5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAC0RIHl1SbWsxxufPCQ1UkkDV4YWRXoGQLm33p9br1ak19aJPZTs/tHo KQrocE33eGS7X/YUMmWN2UuuviP33x9w0J3ZEYLf6rWJVGWIjEu+axUj8sLLi7Z0 iIAGEi1cnNQ/YKaZQxs+ql8L+hf/qAKpo62nexklr9cKA8eW5L8OYdVlaaeHPPh7 jX5LNqHGJ2NHV/rdAQdhTcG2IozRg9rN2tQ3kBn8oQZRhgPzy1JaN2B5TQA9Ohek PPAyDOKWXMEEgrv9xSHWDkJ9JWZ7nrjdBE1mHkyMy0x1Y7bNIU+AdTmyeAUwQ611 e2OmDEq3DSoxaeeF2J+EP7C7O6DR0rQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt01uvIsBOrFEnFFlowRj uZL1rKwqiUpuWriNtrPogJvdc3LS5xUb6Nhe/+Yg8twwdf/MOsMXOZyna+DKGkgh YIZqKLHUf5LQYPuI4+PZXv0xDP2icZJBmJSb8XpRdYTyK1oFTBes6mhejP6KnqFH y7AXG87dHtAhvTfTHXuWU2/0f0B7thE/GWKokIn5eikBQzRakLIbS5+9MsIGhQic RuGvhEQk+SI/dgitAbcxhTUFWncyHxiUcprcAVT0PseCOPcvZE+VAV45x9Ee/HY+ WLD5jbILN4fhd8WGAUE8HJ4YfjoCLE+XYVN34fmQz3Kdpr4IULBRTDHkxPrKssCR PS+D03nijGvF6DCDLw1iXTyRo0+6vx74F0aNrvXtMGS1LJOqDjX4niRy7mYtoyLX Ztl07XDxESGjVnSFs8vfgXcEdT7ghsBcO02tF3SXRnUrSnSBmDt9Pl+EJ8mM+NpL t8PjQynThpdbKhFwfXXNmpcCqoQNDTgxDUIRimiin/2fBiJNTRUYMdT0/tIzALAe z0JtnCun6sbx5xzsF9nVyQQoyVpGqJYXOqZbYuaQj3o0nfxoKQrWfQUd9s8b1nfx f3Rlb5Q9y2SV++4vamQ0w4aOYxYkWoDbkl2izcebVwVbZutiha39xgwAM1Aw7V0a ByW55wL33Dh73WO3jLoc1KUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302642459822395862511856224193059274522169 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 02:01:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 02:01:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hongkong-01.dayunet.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747808838284322883452530128351541417891130367868398725656822031211385676837355152781187153425836351941422241974366229963166253541001859929549591972064556527307396584305787960005109173882484487104665652002684903486902091519972670120084648013398348056141986340128305164849433139461481271639377637831369276944808228771465101745081188091819890145439113282359583220024168480344022653627601423939513602532167737133132711837988933354803050508175845483122086396837402035200432872372110311138293663087049644004363856335327862912783515599506302619553846598093428866561959372572890443302260845653167402655030168947482292349721571450487395682752055372821096023555368173498685940001410640969836363249685927307406609097027817469593058469983036183505028052948988801488327170864663066436285213304281684492747553865778914356457086628571948297827144027374601468908033374561840788226754147584666646084393312184471965178778246513232827039426506151198325225650924005592225566924193621978140854535875206116842845835786190259390564281727688125824799736116586629991267991961471743043336442474173073771972095757541022930551403385583260241374393069828800776046341275639377401830551070095425898368250452877638366561432430575724491482400823060328445948802684069 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a2e51f902b3f3e2eb6f2599d6f230b59c22e65e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongkong-01.dayunet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkong-01.dayunet.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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