www.guangdonglaw.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:9d:2e:a0:f1:a7:b3:44:c3:ed:a3:f4:71:6f:2c:7c:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.guangdonglaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:9d:2e:a0:f1:a7:b3:44:c3:ed:a3:f4:71:6f:2c:7c:32
Serial Number (int): 283323860183545950464946492059715382311986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:e8:21:86:2e:49:d3:44:4a:9d:59:95:80:25:2a:0f:f0:9d:1d:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:75:05:85:54:99:cd:a5:34:30:6d:f1:33:f9:f0:47:5a:4d:89:ee
Fingerprint (sha256): ed:31:75:e2:ec:bb:a6:45:30:4b:6c:a5:05:97:ea:ef:9d:fc:2e:97:a2:0a:ab:2b:71:3b:5c:05:01:d9:cf:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.guangdonglaw.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.guangdonglaw.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.guangdonglaw.com

Other certificates including the domain name guangdonglaw.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.guangdonglaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283323860183545950464946492059715382311986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 08:16:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 08:16:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.guangdonglaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675031525345157001397171194172837520975873357371147669620608988258909825862598029609576208976374698524640813910105496597559551053351975986238149705326201763589363473654920873743598169719305641491983616385526018730483830544613134171033001161797755927939887196820102107173735702013428451239705653618561734887300728248663948129890920703290664117565435354498655492997732331538584655516934119393039864828242252720830915292346943556421651352248570665830822222495561543746345143652084543261140370904941056118195145242318991499165647398116255616710724870238163556842805480273971709756024017675966840979300405016096101493667781599835296929662775583497217367197945731927942549793653849059015596030542210263939570782956680121798935336114691887475283923101384749057764333485724236620960905802428575825408164298846141765681089307412745134415416414837623974572671434856670715575976640217551283433389031959068066059633245061053527639589346455950095037598922195602950919945165676548092223955360589948600881138052164746646128819732608884845181969141667458511404945235519116261274604807524996311407807271123690969360732816452975519910535183771689386743394745072090105968586285584696849149283067633463221420362178815324916245807321033499657356555038071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97e821862e49d3444a9d599580252a0ff09d1de6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guangdonglaw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd900b7e80000040300473045022100dff4156d9ab7eeac93fcbcc1546cbf48b77ede315a2a801eabc1629079fb1582022026284ece32148d4c12c71cffb051b65ffe2729e199e434485e170ca1acc44f470076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd900b92d000004030047304502204ef1aa27901b5071a11b863dc020389d8014d082fbdacbc674ef9624346b2c3b022100c325683249e2e653369c582e70c0dfbc3b8cf92ab512e8e99d0ad1983a1b7d08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058ad8020cd2936e8cc132467370202be553df3481c673fbf4c7ce5d2c8af6bdd2c93889d8d4331a9b081151ed82e5274cfe9c8676c590358f596525c93e5252f5c26d653aa83d324f93b54bfca968130a1ac8942fefde3af8e9570d106ec463fa58b70f052f241ca31ce698b39c23f68474bce5fa3bd86fa37d79fd7dff2e00c26d25575e51442ed8add9051c724fed251113c928c8972f91d573a65a878ef284bc3483382901eb235d842f861bbd5ce5437794c604cf4fc2e482c007cd88afc624fe554a9f15a54f5da5a4012921911df2edbc87fdc390a7cf586664cb8f0ef3a755696bd09da8028b4da2168ecbeb037282eb5eee3a83ead5d4d787c7845c1