www.avaska.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:52:66:22:09:86:c7:42:1e:f6:e9:e4:95:c6:3b:2f:3a:bd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.avaska.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:66:22:09:86:c7:42:1e:f6:e9:e4:95:c6:3b:2f:3a:bd
Serial Number (int): 376488055801441119855728618752427405818557
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:58:c6:8e:dd:ad:34:12:df:f2:36:5f:4d:3f:2b:3a:5a:67:dd:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:81:dd:bd:8a:8b:66:22:48:b8:bd:14:86:0d:83:9b:6c:a3:2b:60
Fingerprint (sha256): 0c:b8:29:2c:57:74:98:32:aa:7c:c7:8e:bf:ac:f7:b5:a1:a7:35:19:34:19:94:38:fa:15:a8:a3:c2:e0:ef:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.avaska.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avaska.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avaska.com

Other certificates including the domain name avaska.com

(limited to 100 certificates)
support.teamfanclub.com
financeiro.cma.com.br
detronic.doit.dev.br
support.striverix.com
www.avaska.com
support.jandbcommunications.com
helpdesk.visionaryfiber.com
support.pvte.ltd
helpdesk.visionaryfiber.com
suporte.magiic.com.br
helpdesk.visionaryfiber.com
support.hulusport.com
tls.automattic.com
support.element3.com.au
helpdesk.visionaryfiber.com
support.mac5enterprise.doublepine.co.th
support.iblum.co
detronic.doit.dev.br
enka.uetaya.help
sni.cloudflaressl.com
helpdesk.visionaryfiber.com
support.avaska.com
helpdesk.visionaryfiber.com
support.jandbcommunications.com
support.grupoisi.mx
help.ideatek.com
zohosupport.h-farm.com
help.throttl.co.uk
support.rivercityinnovations.ca
avaska.com
support-trips.umapped.com
support-trips.umapped.com
help.ideatek.com
helpdesk.visionaryfiber.com
support-trips.umapped.com
helpdesk.visionaryfiber.com
helpdesk.visionaryfiber.com
support-trips.umapped.com
helpdesk.visionaryfiber.com
helpdesk.visionaryfiber.com
support.iblum.co
helpdesk.visionaryfiber.com
detronic.doit.dev.br
helpdesk.visionaryfiber.com
support.sattlercollege.org
support.striverix.com
helpdesk.visionaryfiber.com
helpdesk.visionaryfiber.com
www.avaska.com
ticketsupport.crmstrategen.nl
helpdesk.visionaryfiber.com
support.rhizium.com
avaska.com
avaska.com
purchasing.waltons.com
support.vet24.co.il
support.motorentals.co
help.naqqe.com
suporte.magiic.com.br
help.naqqe.com
support.rivercityinnovations.ca
helpdesk.visionaryfiber.com
support.sterlinxglobal.com
support.pvte.ltd
helpdesk.visionaryfiber.com
support.iblum.co
help.frisbi.com
financeiro.cma.com.br
helpdesk.visionaryfiber.com
www.greenparty.asia
avaska.com
www.greenparty.asia
helpdesk.visionaryfiber.com
support.striverix.com
helpdesk.visionaryfiber.com
support.striverix.com
support.hulusport.com
helpdesk.visionaryfiber.com
support.hulusport.com
support.stsolutions.tech
support.grupoisi.mx
glsupport.fxzoho.dix.asia
purchasing.waltons.com
support-trips.umapped.com
help.throttl.co.uk
support.tomahawk.ca
help.1cloudconsulting.com
helpdesk.visionaryfiber.com
purchasing.waltons.com
support.pvte.ltd
helpdesk.visionaryfiber.com
helpdesk.visionaryfiber.com
support.sattlercollege.org
support.stsolutions.tech
support.tomahawk.ca
glsupport.fxzoho.dix.asia
avaska.com
avaska.com
purchasing.waltons.com
helpdesk.visionaryfiber.com

Certificate

The complete raw certificate details for www.avaska.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376488055801441119855728618752427405818557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 14:09:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 14:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avaska.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 623717482768203295243096601458090794470108741126680236346730833921267598579381216387774128017282216620491589916838137574509041097050032186973437750539318815279269395459343839813382356964887248322819074300938578196399877939601417600258008821210382040780561655534595760470342901478526615656921543277895831081381333985435301947807819675951557924811139595704638796288616410154225377399882519080351135292867254341746067468499490927862366535253213270308008975989659044164928563425680310850926014158496505620744853733748006277476562573672052713171210929926781078380062682886840772673902959512043065274494223178502262807154109865741868573420573251582659565477269729813324057724555387560798851674001198237777099606162794299108422743151453315436084313806060875012307626910056844216139887788305785701955448845162298727137505839771979564021615571633026357120229028055694155189454853989369528634750152153062765562401752902337638064112561720343620034122580158723377083825546839804671076591841101547896930196184265984617722609789899756213511543787874246031499224309806955482749488601575777010521928707696316626038239725002039888657715985907869895884185145334774340645177556771785956778122312061043345623654766676382824807049659302889895102483086333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d58c68eddad3412dff2365f4d3f2b3a5a67dde1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avaska.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f334e4f4b0000040300483046022100e886d085370319cc0eb400e7f140d1e3f3bd544c9fa55e5ec63d0d2d5f9ed14c02210091c1d96c308ac1ca9085e9b5f19d262187a8c037cd3a80973cf0abc1453595680075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f334e4f7f000004030046304402204bdd958ae6a7ac60a77c07de51d68358413453df948572f421f0bc53da9fda39022058d6dc5186b3931c3582962f9d815787e656e7dc84b45f4c60143a1d04f142a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00177581d47cf4cd0debe27f97392f48860ba3b29a5eb076c1256ba06a1467b45f8c54ca256051dcacb0a117635839e7d20bd6e7fbe7a008a195613117c99ea07ebf01795f42936f39554a432bc7babcc6c4b6bb2f20dd479c9d2c43114674141f35fe25313d58a8420a27133c22d6e81b934e95c3a5476c6ad4d407600c8c5d08d66cc28f7049bc7328ef54738c98a4bdd0eddf3a796acbda7e9ebc7e98aea4df85c6ab93257684953c157362f97c43c44a86d7d93e975ebfea0c1b822107a14cd970998ca09b32bc8602c7983640ce9c825779f59c52d2fbacc3a4da7930fadd874c12df7ca33bea7584b626091dbee9d7b8b1ce0b5efea45ef08b168675dc3a