www.guangdonglaw.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:40:9d:2e:a0:f1:a7:b3:44:c3:ed:a3:f4:71:6f:2c:7c:32 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.guangdonglaw.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:40:9d:2e:a0:f1:a7:b3:44:c3:ed:a3:f4:71:6f:2c:7c:32Serial Number (int): 283323860183545950464946492059715382311986
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 97:e8:21:86:2e:49:d3:44:4a:9d:59:95:80:25:2a:0f:f0:9d:1d:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 90:75:05:85:54:99:cd:a5:34:30:6d:f1:33:f9:f0:47:5a:4d:89:ee
Fingerprint (sha256): ed:31:75:e2:ec:bb:a6:45:30:4b:6c:a5:05:97:ea:ef:9d:fc:2e:97:a2:0a:ab:2b:71:3b:5c:05:01:d9:cf:e4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.guangdonglaw.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.guangdonglaw.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.guangdonglaw.com
Other certificates including the domain name guangdonglaw.com
(limited to 100 certificates)
www.guangdonglaw.com
www.swadi.com
stemcellwrinkletreatment.net
masalanights.com
thegodless.church
www.guangdonglaw.com
grandplex.com
realmoneyblackjackapps.com
www.gians.com
guangdonglaw.com
test-strips.com
guangdonglaw.com
maurizio.me
prime-ventures.com
www.firewoodshow.com
www.guangdonglaw.com
guangdonglaw.com
www.guangdonglaw.com
www.swadi.com
stemcellwrinkletreatment.net
masalanights.com
thegodless.church
www.guangdonglaw.com
grandplex.com
realmoneyblackjackapps.com
www.gians.com
guangdonglaw.com
test-strips.com
guangdonglaw.com
maurizio.me
prime-ventures.com
www.firewoodshow.com
www.guangdonglaw.com
guangdonglaw.com
www.guangdonglaw.com
Certificate
The complete raw certificate details for www.guangdonglaw.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISA0CdLqDxp7NEw+2j9HFvLHwyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTcwODE2MDVaFw0y MDAxMTUwODE2MDVaMB8xHTAbBgNVBAMTFHd3dy5ndWFuZ2RvbmdsYXcuY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApXadUbOSBsnNmn7mCmonxGx8 l+MOxqxjyxPd9r+ctlUmrTNlYMNMpzIXaSXNxSQoFnDa2vF+LeKWoZuJ9Pc9+X18 HxK8tGtlEu1UBCdEG73460fv3w+45kMF/FlIwnCn3hsWGagFf5CengWbzb3/3zZY Wg8EEE7Pcf55pA4mOupLkAFLwng9uPeLdmMyVMlgOKtx+8Cl8/2GReG3Qiia6ft3 CPstjGTbkHLbbFdcqccZkvBKH8Z7FiltpPvzByI3BOk5X0dMVq6tbR0hWjEsfvAD Gm2lqRhIiLC6x4fFKDEDzz+SPC+qcSnbDc9uqf3g5xL5yXItK0UQ0v/I6Xf9qqNQ NCw1YbbwL/jBRnBdBST6AHYkoaUzfOhx9Xih1NtnfWiTBGzcotaEHJkGSzznj54f rR6UM2JIXSCX35nkIBKKhWTiH06aUc5CZE7hnny+DH0h15pOqrZfKu8MJMEWNkPq ugshRtcFACXSLWiud0eEfT/p2Zr86yAg81VsQzVD21sgK0HwjR9k13J38CFqrN70 lwqgmMX5UCCtFRti2X2KrHXF3iqoHGEqVBVEhzz6NCdlUbhgDJ6aHAqB0L2GmoP4 SFcGYaJWCoXOStIP1hP9J0UKYx1wedBOtftCDWwQrhzSWlmohgG1EZ+B/Y9rFzh1 hEhoB3yPjmxFIjhjrXcCAwEAAaOCAmkwggJlMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUl+ghhi5J00RKnVmVgCUqD/CdHeYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghR3d3cuZ3Vhbmdk b25nbGF3LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v i5BeAAABbdkAt+gAAAQDAEcwRQIhAN/0FW2at+6sk/y8wVRsv0i3ft4xWiqAHqvB YpB5+xWCAiAmKE7OMhSNTBLHHP+wUbZf/icp4ZnkNEheFwyhrMRPRwB2AG9Tdqwx 8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbdkAuS0AAAQDAEcwRQIgTvGq J5AbUHGhG4Y9wCA4nYAU0IL72svGdO+WJDRrLDsCIQDDJWgySeLmUzacWC5wwN+8 O4z5KrUS6OmdCtGYOht9CDANBgkqhkiG9w0BAQsFAAOCAQEAWK2AIM0pNujMEyRn NwICvlU980gcZz+/THzl0siva90sk4idjUMxqbCBFR7YLlJ0z+nIZ2xZA1j1llJc k+UlL1wm1lOqg9Mk+TtUv8qWgTChrIlC/v3jr46VcNEG7EY/pYtw8FLyQcoxzmmL OcI/aEdLzl+jvYb6N9ef19/y4Awm0lV15RRC7YrdkFHHJP7SURE8koyJcvkdVzpl qHjvKEvDSDOCkB6yNdhC+GG71c5UN3lMYEz0/C5ILAB82Ir8Yk/lVKnxWlT12lpA EpIZEd8u28h/3DkKfPWGZky48O86dVaWvQnagCi02iFo7L6wNygute7jqD6tXU14 fHhFwQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApXadUbOSBsnNmn7mCmon xGx8l+MOxqxjyxPd9r+ctlUmrTNlYMNMpzIXaSXNxSQoFnDa2vF+LeKWoZuJ9Pc9 +X18HxK8tGtlEu1UBCdEG73460fv3w+45kMF/FlIwnCn3hsWGagFf5CengWbzb3/ 3zZYWg8EEE7Pcf55pA4mOupLkAFLwng9uPeLdmMyVMlgOKtx+8Cl8/2GReG3Qiia 6ft3CPstjGTbkHLbbFdcqccZkvBKH8Z7FiltpPvzByI3BOk5X0dMVq6tbR0hWjEs fvADGm2lqRhIiLC6x4fFKDEDzz+SPC+qcSnbDc9uqf3g5xL5yXItK0UQ0v/I6Xf9 qqNQNCw1YbbwL/jBRnBdBST6AHYkoaUzfOhx9Xih1NtnfWiTBGzcotaEHJkGSzzn j54frR6UM2JIXSCX35nkIBKKhWTiH06aUc5CZE7hnny+DH0h15pOqrZfKu8MJMEW NkPqugshRtcFACXSLWiud0eEfT/p2Zr86yAg81VsQzVD21sgK0HwjR9k13J38CFq rN70lwqgmMX5UCCtFRti2X2KrHXF3iqoHGEqVBVEhzz6NCdlUbhgDJ6aHAqB0L2G moP4SFcGYaJWCoXOStIP1hP9J0UKYx1wedBOtftCDWwQrhzSWlmohgG1EZ+B/Y9r Fzh1hEhoB3yPjmxFIjhjrXcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283323860183545950464946492059715382311986 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 08:16:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 08:16:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.guangdonglaw.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675031525345157001397171194172837520975873357371147669620608988258909825862598029609576208976374698524640813910105496597559551053351975986238149705326201763589363473654920873743598169719305641491983616385526018730483830544613134171033001161797755927939887196820102107173735702013428451239705653618561734887300728248663948129890920703290664117565435354498655492997732331538584655516934119393039864828242252720830915292346943556421651352248570665830822222495561543746345143652084543261140370904941056118195145242318991499165647398116255616710724870238163556842805480273971709756024017675966840979300405016096101493667781599835296929662775583497217367197945731927942549793653849059015596030542210263939570782956680121798935336114691887475283923101384749057764333485724236620960905802428575825408164298846141765681089307412745134415416414837623974572671434856670715575976640217551283433389031959068066059633245061053527639589346455950095037598922195602950919945165676548092223955360589948600881138052164746646128819732608884845181969141667458511404945235519116261274604807524996311407807271123690969360732816452975519910535183771689386743394745072090105968586285584696849149283067633463221420362178815324916245807321033499657356555038071 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97e821862e49d3444a9d599580252a0ff09d1de6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guangdonglaw.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd900b7e80000040300473045022100dff4156d9ab7eeac93fcbcc1546cbf48b77ede315a2a801eabc1629079fb1582022026284ece32148d4c12c71cffb051b65ffe2729e199e434485e170ca1acc44f470076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd900b92d000004030047304502204ef1aa27901b5071a11b863dc020389d8014d082fbdacbc674ef9624346b2c3b022100c325683249e2e653369c582e70c0dfbc3b8cf92ab512e8e99d0ad1983a1b7d08 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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