hengqinmall.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:27:87:de:3b:2d:8f:fe:d4:65:ae:27:76:b1:74:e8:0e:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hengqinmall.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:87:de:3b:2d:8f:fe:d4:65:ae:27:76:b1:74:e8:0e:3d
Serial Number (int): 274788469774802896744689305235195886571069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:94:0f:3f:78:9c:20:f6:5a:19:29:6a:4c:dc:b2:bb:32:05:6e:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:af:11:0d:ea:40:42:be:55:b7:57:05:27:71:86:ac:9b:1e:d8:0a
Fingerprint (sha256): f3:31:29:e8:a2:c4:d0:45:62:9f:a7:a7:3e:91:53:78:27:bc:60:df:25:23:c6:57:bc:44:17:2b:b5:5b:b9:98

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hengqinmall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hengqinmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hengqinmall.com

Other certificates including the domain name hengqinmall.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hengqinmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISAyeH3jstj/7UZa4ndrF06A49MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjMyMDE1NTJaFw0x
OTA5MjEyMDE1NTJaMBoxGDAWBgNVBAMTD2hlbmdxaW5tYWxsLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANYB0YoGZs0SBhKubEQvdb5pWC6rk+03
fPSvp3l0Ury9ounTzsYngrR/Th4N3pimE+0ZIptiitDh/McMfGrNCp7oX3IyVSXy
LWK45ey9HoxK9d/3DEYDMWPc4DBmouYMkvIDEcNK0+e4p6H83yrOgmrVtG52dmjt
1U8x4xG+NoUvr9yquA5Kg8M4IkJ7HCcUky+gJVHar28DN9gHp0flJtuiO05ItDw3
d453nEo+DnIfgGbCguGB7xDgrhFALDW/HW6bDe9uY2wfD6kCqP2LaH+p84+482lv
ror/Z7z2C7/S3mxQBdiy2o1DztCnoHwIbbp5eWYZIly9J+73Tvd8KH3hqB/s07ij
LD3hnL0QcBVgxKwvyPwha/J43FRptJenGJCybx+R94O5nPHqdGTiXCppTc2ra59Z
8E8BRlIDKU3BwfLDsiCvgzVbqjMyMDE4lbeYCr/EUICwUisVWJmWDFoT5oF8V60r
6kbxmI0u03ctDfze4e6x/7IfmOmSaF+mQt3Qkbteb22IvKXF5vXyAizSKVvBUKho
atDULaCAxGi5JczbnvQztivD+yUfPshPSH/amoXorHUoU9PLChakokzHUkL3SXML
WFYAmAufWosCYX8cwksqlUmWVh58oTYdP5VpWNqE4OA+ynCsE1p3B6yGwoke4sRQ
ermOTRP4oRHPAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOmU
Dz94nCD2WhkpakzcsrsyBW6qMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPaGVuZ3Fpbm1hbGwuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFrhjIA
NQAABAMARzBFAiEA9GQvvk6ErEzwrgwAkTN83dBdL7gYPXi0Iut7RV9FXPUCIBs/
NEki0fiFi4gqPYpPBncXMfMuDqxaMEAdHHgTHOmdAHYAY/Lbzeg7zCzPC3KEJ1dr
M6SNYXePvXWmOLHHaFRL2I0AAAFrhjIAWQAABAMARzBFAiAtsi4nYO5U75jVxqi1
xeBo7PDIhOrCa00/VyRtdtgsZAIhAO6c0PDAIKz2tmTGPJ3fWbmv6hlh9TwSDGRX
hgbgb59tMA0GCSqGSIb3DQEBCwUAA4IBAQA5RRNPaqYq3tDSPElsB4ee9TnD/iO4
N0tM0yGVEwW2zgg1hhn+wwXYDgCq63dUPBWiv1RKrJxDnZTp+TGLhNVyBXOySdni
6XQPQ94Adxw84Ms2+niQze8jKB/pzm1czDN19q6DeI1oUO+144j6WSuhw5nHsoBG
BimSNLoG/C9p90a9NuSmp62UA6VmskPsbud6hNTSN8uq2WDNg72yyYy2nKXrwgJq
bWO0rpG78rdj3P0LSCvz5D3Qmfy6QqiTgUngj3atNMj9hh+k4GJlyW9JdxUqW7ze
9vwXomGng5rHCdgna15dcfrG+ZYz412QuM7Lyck7C0BX/lDmM8WqHQST
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274788469774802896744689305235195886571069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 20:15:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 20:15:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hengqinmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873072810568411361189369780496618327249958384892328768866459794122665895235979774884164227411799882305289163833555508156431564817567300986034807223777240875476053682711247869289801132834403229526655874555321366381954999777887133740597872630783869930004886538810262465283515504752382394075331806375381628728521175277648100984192274189216942252619988980453695036618084059397573697381068033512483762863022096930164357262110604441498061286156742699062427591178938243945665680608080232185723193112553696166380980816186287059837191718877823844407004357485679293589507178879521020612385192758749617252602569998995692413021342564826553040739868965405449311680519818195111372354001562397212488098723537176416036529700318844793721607332070157270304196114340982749479284524766433522456472290151503847799950636539151465326305596466008697807047595898235771797882416144156862167920051795174872359958131566648035178077052507626893175818324354556540008946666588058985117770901243272984064304022901507889664286056272142718956125111615161148914130492813706097629340945851027065084222569008003270179962246941261763313476411108213679689292109066910308382547595183476557328363762075131422416363305931508419842533503632993504578425493921834426748488454607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9940f3f789c20f65a19296a4cdcb2bb32056eaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hengqinmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b863200350000040300473045022100f4642fbe4e84ac4cf0ae0c0091337cddd05d2fb8183d78b422eb7b455f455cf502201b3f344922d1f8858b882a3d8a4f06771731f32e0eac5a30401d1c78131ce99d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b86320059000004030047304502202db22e2760ee54ef98d5c6a8b5c5e068ecf0c884eac26b4d3f57246d76d82c64022100ee9cd0f0c020acf6b664c63c9ddf59b9afea1961f53c120c64578606e06f9f6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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