research.aitegroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:32:89:4c:56:b2:6c:06:08:40:f7:f7:69:3d:01:ba:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=research.aitegroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:32:89:4c:56:b2:6c:06:08:40:f7:f7:69:3d:01:ba:92
Serial Number (int): 281140409369486006663754582157048009570962
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:67:d7:51:c9:c4:0b:78:14:8f:a1:82:90:43:c6:a3:76:b0:0f:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:86:f6:d7:01:92:6e:e1:30:f9:57:5a:99:e1:69:28:68:3c:fa:79
Fingerprint (sha256): 01:ff:f9:c6:17:a4:2a:a0:12:dd:d0:97:5d:42:ae:f5:11:c0:2a:79:2d:d8:6c:ff:90:6a:70:a5:f7:12:ad:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate research.aitegroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for research.aitegroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

research.aitegroup.com

Other certificates including the domain name aitegroup.com

(limited to 100 certificates)
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
research.aitegroup.com
amosstatus.ifsleasing.com
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
*.aitegroup.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
status.aitegroup.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
status.aitegroup.com
amosstatus.ifsleasing.com
status.aitegroup.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
studies.aitegroup.com
files.aitegroup.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5756292874371072-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
status.aitegroup.com
5756292874371072-fe1.pantheonsite.io
status.aitegroup.com
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
digitalwallet.aitegroup.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
sni.cloudflaressl.com
5746569068412928-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
research.aitegroup.com
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
studies.aitegroup.com
status.aitegroup.com
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
status.aitegroup.com
amosstatus.ifsleasing.com
5756292874371072-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
aitegroup.com
5746569068412928-fe1.pantheonsite.io
aitegroup.com
*.aitegroup.com
5756292874371072-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
status.aitegroup.com
amosstatus.ifsleasing.com
status.aitegroup.com
intranet.netcontroll.com
amosstatus.ifsleasing.com
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
5756292874371072-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
5746569068412928-fe1.pantheonsite.io
amosstatus.ifsleasing.com
status.aitegroup.com

Certificate

The complete raw certificate details for research.aitegroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281140409369486006663754582157048009570962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 04:23:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 04:23:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'research.aitegroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888493157156322476482226315423637278283527581246779377463909639351193354315494912270596663409300855231160477950823568818236451402183728435019930998709544747029194707385524025752732122810501868085330496694008748367554926315257693232856333140207692417908426552010248500101220013530843143783234595201547780918179266698763976325779201511868297482824137156461900932833131684988299001172939881471707777422096082717604612181423863864265700433614963904765522704932181090379086546505354025592531186178042144354993050956040655938865284454449712313872591591230007671006152660009769013280188343690492849482354610541308822552863835350117221573923889390272852583311526843117745503090519868435124655864113447228019475077987923497594890295552650773158553821119252080267802827538033340966251197204345350071515114832254332147304465211064272330932724814959524338433549193278677514017423650103362009623710227471178188409976528599329730318966294245073123047344223788206106879907707744377185335833754063757688055798357253540223808811504517040708749396687778456002466204166967806628002691738281531692800030255013120920997626758468861686630683290468352200216457396420428390197955886697650380504210602125701843641959443798830882148110790974063753205124747841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df67d751c9c40b78148fa1829043c6a376b00f4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.aitegroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001692d67fb2600000403004730450220566e14565ed03383dd1163843892bfadce1a9759f60c646d0c13a1f7ee61ee8d0221008bfc138494bb67ad5f30affef846cb855e4d25b816c461c791708567fa3b9c3a0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001692d67fe9c0000040300483046022100b059a2d928fe6e993c381beb0336998f1194aeabc6c090578ce3b25b2039ca25022100a5499f6b2ba0d40fb8185798117c13cad086e20f842c5c1132ad43d1657cf615
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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