aa.am

Issued by R3

About this certificate

This digital certificate with serial number 04:f2:a9:ee:3e:ea:1f:e8:27:55:d5:50:7c:d6:b6:62:10:91 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aa.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f2:a9:ee:3e:ea:1f:e8:27:55:d5:50:7c:d6:b6:62:10:91
Serial Number (int): 431023353095906736962720257233621467926673
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:00:cb:3a:6e:d0:f7:6b:1b:e8:ae:89:e4:d8:5b:16:0d:43:d8:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:e7:af:35:aa:18:d4:a3:46:01:1a:c5:68:8f:d3:f4:fe:98:d0:60
Fingerprint (sha256): 13:a6:02:0d:6a:6d:54:0c:7c:2d:a2:82:f5:bc:9c:e1:a5:af:b2:54:1c:60:4e:77:e6:96:b3:bc:f3:a4:8a:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aa.am

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aa.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aa.am
www.aa.am

Other certificates including the domain name aa.am

(limited to 100 certificates)
although.gw.to
dietplan.om.to
healthynewss.na.am
exchange.hthcoin.world
cloudmusic.aa.am
365.aa.am
festival.aa.am
dietplan.om.to
gutenmorgen.aa.am
jy.ali.aa.am
www.davidnevogt3.aa.am
cara.balbol.com
bild.aa.am
healthgoodstream.cd.am
bit6.aa.am
advent.aa.am
dietnewssite.ga
healthsitess.ml
aa.am
health-stream.uw.to
acounts.aa.am
smell.aa.am
www.salmodelrey.aa.am
sky.aa.am
sahar.aa.am
cloudmusic.aa.am
bild.aa.am
sahar.aa.am
gutenmorgen.aa.am
dietnewssite.ga
lotion.aa.am
cybernest.aa.am
montag.aa.am
donuts.aa.am
aa.am
ixuner.aa.am
aa.am
dietnewstime.c0m.li
cloudmusic.aa.am
dietnews.xi.to
sistodak.aa.am
aa.am
ffdm.claim.aa.am
nikeperfumes.aa.am
sahar.aa.am
aa.am
healthynewss.na.am
aaaa0aaaaa.aa.am
aa.am
nice.aa.am
boydnetwork.aa.am
aa.am
dogepower.aa.am
healthsitess.aa.am
amazon-service.aa.am
dietnewstime.c0m.li
aa.am
yun.aa.am
loseweight-tip.yn.to
sistodak.aa.am
aa.am
health01sites.mm.am
office.aa.am
sahar.aa.am
ffdm.claim.aa.am
www.baidu.aa.am
aa.am
termdesign.aa.am
aa.am
healthsitess.ml
chat.wiki.aa.am
www.baidu.aa.am
dietnews.xi.to
healthgoodstream.cd.am
healthstream.gw.to
montag.aa.am
aa.am
zpy-media.aa.am
aa.am
healthsitess.aa.am
healthgoodstream.cd.am
dietnewstime.c0m.li
healthy-newss.ro.to
healthy-newss.ro.to
fin.aa.am
health-sitesss.rh.to
chodontujama.aa.am
ali.aa.am
healthynewss.na.am
aa.am
healthytopnews.fr.am
lamp.aa.am
diet-news.nc.to
*.amirnetv.aa.am
www.fricillakaro1.aa.am
ltcdouble.aa.am
health-stream.uw.to
gutenmorgen.aa.am
aa.am
healthstream.gw.to

Certificate

The complete raw certificate details for aa.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431023353095906736962720257233621467926673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 14:22:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 14:22:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aa.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966322325172648972807335468483626377363876390975992149527284956207702833652227362381348067322978772346689016385208098520069458939494792366038869870837961478635440208937611463790806888774786760227573301120922007654338847967231680422414235239257933849164267291762507450304706089528958036868935333306600633776367315771466118343951908487646946612686655550728118572401557302753125116332277974642443518542724596393904086424436744572332480648743125496004860849165745343249203044058942123054521613038375915289202528417729859851055742885906175081769405289686239844173040665805854799776415261340633719314837094586823347981451503494594182759431046149501097009043867309784387612497696669732249524784513776959496749900403480917939532577439456461264540579729716475520001156325987495783891431157710023646650505577198410267147832632930945374262092399397448179290468470140139953455820278885939549445711117627492749899046436118714892035743817183411396551649444716173699008152539661167796887869989387366072668926322193088093759065751410425217831425659015464753359041769812700644007236167686517569146325297181680174698244213256164460814241887981677066510169234440848265819651696770897489815886529368981061658388334669178507492050459699821363634926844881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f100cb3a6ed0f76b1be8ae89e4d85b160d43d80c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aa.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f2f9a0b29000004030047304502203a23db5be9ca8b2a65d1e4a54a5fc776ae514c4e1786c67c30259df727486879022100c463efdbbd24dd9ca61880f434d328590023e37c37fa10d325950fda4912d19600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f2f9a0b83000004030047304502210082c58de328b2443ff6ea88a2ec4df14a451fde5b7a82eaa6797284928d73fd7002206f0d9815317fb9491df79eeb5eea69d31ac251b04f780d31052c41fc68ae5804
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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