aligntek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:f0:0b:54:6c:4a:32:b3:9c:19:47:ff:ce:2f:ba:78:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aligntek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:f0:0b:54:6c:4a:32:b3:9c:19:47:ff:ce:2f:ba:78:e1
Serial Number (int): 294323038566246667568438226904191369640161
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:96:8d:d4:3a:fd:67:d5:74:38:ce:a1:24:c3:5b:ee:3a:52:51:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:96:c9:fa:39:db:6a:1d:7d:43:9a:23:d9:7d:27:0d:d5:a0:28:5b
Fingerprint (sha256): 0c:1b:21:eb:b2:1d:c2:4a:4c:03:c7:ca:52:19:b6:65:65:e9:55:8e:57:c8:31:67:d8:77:de:9d:93:9d:3e:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aligntek.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aligntek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aligntek.com

Other certificates including the domain name aligntek.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aligntek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294323038566246667568438226904191369640161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 03:01:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 03:01:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aligntek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856461048809410059902539724583594975370625869621818086091539686640575865532441764189423632867134201783069594417691738408327625868203913872022780566577280965547429515313757505543657582770648528467105778253926666225050197470955807738229760028470774952783687326706126755014003757005425081060595634794030635551069420308190945438319793810430553878525356707295751904123183846404448188067925524747240060451140605057843013692295172281054470803171901193650984999744135868629832560114854794852870212877588470373570379372213158512745390110391994932774612961420802253138744218099999747214276569862288711152917880162580854042302756214716887183628265163623110098624230938194643216179168300829473760947079274477545833505256695182477707168429031542105172052933562174563292292182525628805610972755609010365441745797589948752763355669152807652581323824979702058521332866659771202180472703131489903718593439597909009285277767269625930445138703992155843793746680474227765604343007858336484702543876355096918982334632990975320674915805358777947204792729775056649606019591166084468118101305970256137245796092107774997136970508765245376825307760170788479395591259095183074531768377446859142220643564810609013197992642984519859518915340057152768093903294621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02968dd43afd67d57438cea124c35bee3a5251e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligntek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc3470850000004030046304402205be5c9e5046df202a85ed4b77334d40121a36a528c3fb89866239c482afda00102203531a56ef85aae938bc6d750ce841a2b1d662b85061058492f3a3c016f362327007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc347085700000403004830460221009ebbd123050eceff17adfc418490b1ad6e349847f99a30f81e8fc0ac81110ef7022100d6ff58cdfb8fd95f0f468cc58d0e5db925b1a404e848212e38d1650248921c4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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