a.cichuan118.com.tw

Issued by R3

About this certificate

This digital certificate with serial number 03:30:94:29:a9:a8:bb:ad:7a:12:86:29:01:e1:e4:52:cb:2a was issued on by Let's Encrypt.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=a.cichuan118.com.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:94:29:a9:a8:bb:ad:7a:12:86:29:01:e1:e4:52:cb:2a
Serial Number (int): 277867353476128791400238727644661784169258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:79:32:90:4e:4b:c2:f1:5a:9a:e3:61:50:97:27:06:28:97:7d:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:57:83:ce:05:2e:69:d9:d6:55:88:8d:d6:cb:e4:76:e1:4b:75:db
Fingerprint (sha256): dd:5f:81:79:7d:f3:49:ab:60:81:75:da:e9:e4:07:24:25:25:37:0b:bc:19:f7:f2:b9:e1:6a:8a:03:08:87:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a.cichuan118.com.tw

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.cichuan118.com.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.cichuan118.com.tw
abaopet.tw
adam.com.tw
beldora.tw
captaindanny.cc
cbtv.tw
clccghy.com
demallvip.cc
etonic.com.tw
fineday.life
go.foodieat.tw
hajuhajuhaju.com
inner.tw
iuki.org
lsc-box.com
m.cigna.tw
mammy.tw
naxia001.com
nininono.tw
oneboy.tw
qrich.cc
rtmp3.com
sapphire.tw
shd1788.com
sms.litv.tv
suntown.net
swaglive.co
tea-xpress.com
thelifesub.com
tinyurl.twglobalmall.com
ttpunch.com
twhappyworks.com
very-wed.com

Other certificates including the domain name cichuan118.com.tw

(limited to 100 certificates)

Certificate

The complete raw certificate details for a.cichuan118.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xvy03hb//FuHj+Q8V0P
zmH8C/Xv10fcY6pOrmO3AiUlGTa6JK9baiy4dZ3JZCaFsd338Q8PHjkG7d090Iuh
KgunyA1laKvt1LY0EyM/1ja1f7Op+aQNYv4xV54CHRbX3NvP2KtMDAinmacQ+FOY
p+Q5bw9DO980vhQwG4ktz3uNFmslHlocqWdt6IOHhep41QKfz4IpYcoW+QhedjJ4
8hTDEZj/2t3SxtMdSxbhhjdXbCXGD4F5AP+FSU6XkdLmv0QNFTzQXqd/0LHOt17K
7MoZ1T9bbrLyIkrSGYRUbR3d7pcVcht7vWyACYgiH1lNGbNiGeBgpF3/ez8xs1Qy
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277867353476128791400238727644661784169258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 18:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 18:38:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.cichuan118.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30184736825266101951743816319196206342318742658400940832762801730429823604244762643293384915910732303933922467104888578927897532423367483698972686735203067041040689442787641061393104383128900372916694353352613886156334627688791957206586261625329538959699614161171131413720111136379157029831419330819148376419170958818293681536239246008227422863457559215436206974227454467374239935681124259605410372194753240615241650843866861708390062776508718165672555524278791731761126135399741674185554510651166221426636177701017709762333763086954809677066431318086043139223736493918707190217803893992564441032185028178071111610971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd7932904e4bc2f15a9ae3615097270628977d0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (460 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.cichuan118.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abaopet.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adam.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beldora.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captaindanny.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbtv.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clccghy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demallvip.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etonic.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fineday.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.foodieat.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajuhajuhaju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inner.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iuki.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsc-box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cigna.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammy.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naxia001.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nininono.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneboy.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrich.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtmp3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapphire.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shd1788.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.litv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swaglive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tea-xpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelifesub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyurl.twglobalmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttpunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twhappyworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'very-wed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185c664473500000403004830460221009e062861a5634df6ac5be063a974186813b3c91a4e4d2df4bc464ecf3c7806cc022100a131f6f748b2d8ca805db3c76cdf8a5fc6fdc4377ed3571b3c5cb4c03062355b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185c6644711000004030047304502201306254832f73fc131bcd0cdbda6a1ae6e197e7a4c013c622ce375a828e29a23022100b85882b93f257f12fdd21aea98818ac45943701c105ee524e9d1b57cdb1092d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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