*.asiaexchange.org
Issued by R3
About this certificate
This digital certificate with serial number 03:91:1f:66:14:29:31:a7:45:d9:49:60:ec:d1:68:18:85:95 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.asiaexchange.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:91:1f:66:14:29:31:a7:45:d9:49:60:ec:d1:68:18:85:95Serial Number (int): 310719537089877633808602030854765830243733
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 05:a6:d8:e8:62:75:c0:17:af:d8:49:3b:17:82:64:b0:97:83:45:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f0:a8:a8:14:fd:bd:32:d5:a5:6c:6d:24:04:2c:f0:c8:9d:22:a2:04
Fingerprint (sha256): d9:31:8c:91:45:4f:fe:57:d0:1c:d4:f0:da:50:ba:ff:d4:2f:c2:38:53:ff:bf:b1:11:e4:b8:b8:36:b7:2d:21
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.asiaexchange.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.asiaexchange.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.asiaexchange.org
asiaexchange.org
asiaexchange.org
Other certificates including the domain name asiaexchange.org
(limited to 100 certificates)
portal.systematicqms.com
*.asiaexchange.org
mail.asiaexchange.org
support.dsncon.de
wuf.europeanaccounting.net
asiaexchange.org
support.dsncon.de
asiaexchange.org
www.studentportal.asiaexchange.org
*.asiaexchange.org
asiaexchange.org
dev.asiaexchange.org
patients.bay-street-medical.com
asiaexchange.org
support.dsncon.de
www.asiaexchange.org
rkoi.ialphal.com
www.scafftrack.us
*.asiaexchange.org
dev.asiaexchange.org
*.asiaexchange.org
asiaexchange.de
asiaexchange.org
wordpressdev.asiaexchange.org
managementkit.asiaexchange.org
wordpressdev.asiaexchange.org
*.asiaexchange.org
wuf.europeanaccounting.net
ecos.econox.com
asiaexchange.org
asiaexchange.org
mail.asiaexchange.org
support.dsncon.de
asiaexchange.org
dev.asiaexchange.org
*.asiaexchange.org
dev.asiaexchange.org
managementkit.asiaexchange.org
asiaexchange.org
asiaexchange.org
mail.asiaexchange.org
support.dsncon.de
portal.slafoundation.com
wuf.europeanaccounting.net
wordpressdev.asiaexchange.org
mail.asiaexchange.org
asiaexchange.org
wec.azai.co
*.asiaexchange.org
wuf.europeanaccounting.net
abe.lincoln-personnel.com
www.asiaexchange.org
aasianvaihto.wp02.hostingpalvelu.fi
*.asiaexchange.org
asiaexchange.org
wuf.europeanaccounting.net
*.asiaexchange.org
www.weport.com.au
asiaexchange.org
asiaexchange.org
asiaexchange.org
asiaexchange.org
support.dsncon.de
asiaexchange.org
*.asiaexchange.org
mail.asiaexchange.org
support.dsncon.de
wuf.europeanaccounting.net
asiaexchange.org
support.dsncon.de
asiaexchange.org
www.studentportal.asiaexchange.org
*.asiaexchange.org
asiaexchange.org
dev.asiaexchange.org
patients.bay-street-medical.com
asiaexchange.org
support.dsncon.de
www.asiaexchange.org
rkoi.ialphal.com
www.scafftrack.us
*.asiaexchange.org
dev.asiaexchange.org
*.asiaexchange.org
asiaexchange.de
asiaexchange.org
wordpressdev.asiaexchange.org
managementkit.asiaexchange.org
wordpressdev.asiaexchange.org
*.asiaexchange.org
wuf.europeanaccounting.net
ecos.econox.com
asiaexchange.org
asiaexchange.org
mail.asiaexchange.org
support.dsncon.de
asiaexchange.org
dev.asiaexchange.org
*.asiaexchange.org
dev.asiaexchange.org
managementkit.asiaexchange.org
asiaexchange.org
asiaexchange.org
mail.asiaexchange.org
support.dsncon.de
portal.slafoundation.com
wuf.europeanaccounting.net
wordpressdev.asiaexchange.org
mail.asiaexchange.org
asiaexchange.org
wec.azai.co
*.asiaexchange.org
wuf.europeanaccounting.net
abe.lincoln-personnel.com
www.asiaexchange.org
aasianvaihto.wp02.hostingpalvelu.fi
*.asiaexchange.org
asiaexchange.org
wuf.europeanaccounting.net
*.asiaexchange.org
www.weport.com.au
asiaexchange.org
asiaexchange.org
asiaexchange.org
asiaexchange.org
support.dsncon.de
asiaexchange.org
Certificate
The complete raw certificate details for *.asiaexchange.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISA5EfZhQpMadF2Ulg7NFoGIWVMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjUxODI3MTRaFw0yNDA3MjQxODI3MTNaMB0xGzAZBgNVBAMM EiouYXNpYWV4Y2hhbmdlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwhRVUifwfyLNGG2HQw/KmohCeheYVzSPBty5NBPjnVDcmJ7FzX5b7mSMMe aV9hSrHdYZ4TrR7ERTfHuAUbj63zpVTmJ2VQNVnQRNg4Ae+nmLSR74D7nNXVmveD 1gUBiMX8X0Wv1bCjGMewvtvnTmGvalAkdZ5IU6LFD9YcJbZPuPv92l24aqRgaiHZ zpAQOYdN1i/ffeIBhwBA2AEyyEABbBen/8rENFZZ1Tt3sfySVV0t2VcCYg5tT1fI JaScmp3jQL45trw0PBfmgjYohbLPC66pR8CVMm6Pj0n4uZWwyg5xJU+5Px6y7o2Z +GzX4wsHm1xYtamx02nnaMdhg4MCAwEAAaOCAiYwggIiMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUBabY6GJ1wBev2Ek7F4JksJeDRZQwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wLwYDVR0RBCgwJoISKi5hc2lhZXhjaGFuZ2Uub3JnghBhc2lhZXhjaGFu Z2Uub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPFrnt0wAA BAMARzBFAiA5IaVm47xuTcIEZPxOL9qt61Ygm6JE8Fc7y1CssOShngIhAISDqQKe c8/gOJt8wHonVAN7Cahn8yrMdnDLF2jmfH2GAHYA3+FW66oFr7WcD4ZxjajAMk6u Vtlup/WlagHRwTu+UlwAAAGPFrnuiQAABAMARzBFAiEAgo7RB+9uNz/gMfpj5a/S gFK/SyrjXsa2K5o+yS4mgvgCIEO7mj++++9Dt8C6uzKD0JEeHVutM1+n8XZv/ZzR 2tJoMA0GCSqGSIb3DQEBCwUAA4IBAQAzs7DkVrGtsTHGtlNXsqIE8ty/VpBuJrOP nJ4X78f2oiXLokU0Wn67xEl1FS80R2jW4r1Xw5hcSXB0R0dsQWPID6A63W9JJG3H NhNz7+v4T21qkRtDjqosD+q96eJ1pFF9fSCgsKEUBja9i6/VKn17rfzYEcmHSWZ3 zDlJIU/VGNVBo4EzBeLIIMwkAMQAib1aqgfXvB9q02tqgD9CzJmxOaJde8cbXMuN ZPTIvBbGdbR7VG+8CV/EkTkykVJBT6LMbOR+BHfLi/kRxaIkKJCOtfRBn92CWyiZ vOLAce1pgainmtjZdcR5GhQ2kiNKE+bLO3WPy+SVCn6O8pS44uYG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CFFVSJ/B/Is0YbYdDD8 qaiEJ6F5hXNI8G3Lk0E+OdUNyYnsXNflvuZIwx5pX2FKsd1hnhOtHsRFN8e4BRuP rfOlVOYnZVA1WdBE2DgB76eYtJHvgPuc1dWa94PWBQGIxfxfRa/VsKMYx7C+2+dO Ya9qUCR1nkhTosUP1hwltk+4+/3aXbhqpGBqIdnOkBA5h03WL9994gGHAEDYATLI QAFsF6f/ysQ0VlnVO3ex/JJVXS3ZVwJiDm1PV8glpJyaneNAvjm2vDQ8F+aCNiiF ss8LrqlHwJUybo+PSfi5lbDKDnElT7k/HrLujZn4bNfjCwebXFi1qbHTaedox2GD gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310719537089877633808602030854765830243733 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 18:27:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 18:27:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.asiaexchange.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27788833550432467100505878110024575751054063686772354907775916129396447885411742101470182764286300707203131894503537445899666590186181491421521479675911513295430137355915798713913442132786435620049226392161970954116781828638420393752336417740526922749112928616782020276170625767078381566098630432695622888743580238851156337407451388670590048109437808504797227685660913679203758065084939589978210480083631205765354232839558099946171521534392396566589987390011289855217594768179988440002598895315927437226782354014706982627291435273332546515234157725142623856254567564874623568072430511687478688851624028647689927361411 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 05a6d8e86275c017afd8493b178264b097834594 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asiaexchange.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiaexchange.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f16b9edd3000004030047304502203921a566e3bc6e4dc20464fc4e2fdaadeb56209ba244f0573bcb50acb0e4a19e0221008483a9029e73cfe0389b7cc07a2754037b09a867f32acc7670cb1768e67c7d86007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f16b9ee890000040300473045022100828ed107ef6e373fe031fa63e5afd28052bf4b2ae35ec6b62b9a3ec92e2682f8022043bb9a3fbefbef43b7c0babb3283d0911e1d5bad335fa7f1766ffd9cd1dad268 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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