hca.asia-planner.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:90:73:64:05:1c:8e:33:9b:9e:cd:03:ba:ed:e4:f4:f5 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hca.asia-planner.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:90:73:64:05:1c:8e:33:9b:9e:cd:03:ba:ed:e4:f4:f5
Serial Number (int): 325842233117515807594516054322026853496053
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:5a:56:c1:23:c4:ad:25:93:1b:63:d5:e9:11:70:17:48:c0:5f:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:60:d3:2f:fd:f8:9a:c3:cf:14:6e:a6:96:55:f2:4c:cf:b2:54:6d
Fingerprint (sha256): e6:c5:80:64:de:21:7c:00:2c:4f:b3:b6:67:d3:ae:10:21:17:83:ad:22:8c:c3:a7:0e:b9:5e:43:44:8d:ea:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hca.asia-planner.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hca.asia-planner.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hca.asia-planner.com
hcd.asia-planner.com
hcg.asia-planner.com
hcl.asia-planner.com
hcq.asia-planner.com
hcx.asia-planner.com
www.hca.asia-planner.com
www.hcd.asia-planner.com
www.hcg.asia-planner.com
www.hcl.asia-planner.com
www.hcq.asia-planner.com
www.hcx.asia-planner.com

Other certificates including the domain name asia-planner.com

(limited to 100 certificates)
hcq.asia-planner.com
www.cci-program.com
asia-planner.com
hbm.clfy-sg.asia
asia-planner.com
asia-planner.com
asia-planner.com
hca.asia-planner.com

Certificate

The complete raw certificate details for hca.asia-planner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua9QQXvvWQjtXaQDmb4W
5m87/WafRG9Su2kCfm4zOXlDD5T+uyAo/+cJHRfaOBrte9n5HtwvzhZZojk1Bgj5
itFPepmmiAZ0Y6nCa/Mx9IIFGms8AKs0Jl0C1QtZB75dRHXA/q36y1FvBzzqfZwQ
i2ouUhgxXwv3r+264ob5gy1A7QyujgHXYkMcU+9fWPHbC6E9KMO4P2HGm3LrafhJ
BZJQNJMQPlFxk98T70KB0US/1boZj34JvGK8RxramaQPBHl/eEQFrfh02PNLZTo2
UNHj7hls4QnsdJCMUVHGQjwmvC0YTuXfDgDMmH5luTr9uO/m4wbyVRaKo/cFJWpH
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325842233117515807594516054322026853496053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 03:35:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 03:35:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hca.asia-planner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23440536727227623810478196285550223262839675841936804036412049037122220688762485347073555807636770494411442520368425083400584101727675872384054294467414433934521347353760518886807641159641564627638180977353187163828428294653132898229479317724215213528494128233770849960843688966242006069616573564827016418290602691890534031101512314530874192037454597861158461166780374846776455699986771640060432241766985339265968975894266484746768639459748930038950395809666145702083430655175220352207868388509575536217672760356794763986036829156077668602534033442441387486657931173833124664051272002513496200134718790224425440134929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b35a56c123c4ad25931b63d5e911701748c05f35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hca.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcd.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcg.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcl.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcq.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcx.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hca.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcd.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcg.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcl.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcq.asia-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcx.asia-planner.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016897e42f000000040300483046022100ce8ee3a2157569726b1cfabdd0911afe8b30336bed74a6ab9d4a9f30a1eb0df9022100c4c1c41320b1d23c4c12edbb6bfd62a89851a15f72ff5aed00f373bcfa0ee44600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016897e42f0000000403004830460221009ada8686905767b9fea5f69e5f42208e9cfdf7c71fa4fd1fbb640c3bba486d4f022100fc502176bddf0af03f670a4afd060b64351ad3e7a1760f66033e018c9c272d1e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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