aiyco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:85:f7:dd:5e:35:24:7f:51:2c:16:4a:42:ff:d9:c4:29:55 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aiyco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:85:f7:dd:5e:35:24:7f:51:2c:16:4a:42:ff:d9:c4:29:55Serial Number (int): 306923881319087056731784304125048122517845
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 65:d8:0d:d8:79:45:09:61:c8:9d:36:1a:70:46:70:a6:e7:81:da:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a7:2d:23:65:c7:a1:5c:c2:22:9c:7a:10:56:cb:66:b1:3a:1e:ce:cf
Fingerprint (sha256): 1a:df:8a:a0:f8:7e:74:b2:ad:ae:59:96:57:84:dc:68:61:db:e4:fb:e1:78:06:8c:7d:5e:47:26:7e:01:4c:69
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aiyco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aiyco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aiyco.com
Other certificates including the domain name aiyco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for aiyco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISA4X33V41JH9RLBZKQv/ZxClVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDExODEzMDRaFw0y MDAzMzExODEzMDRaMBQxEjAQBgNVBAMTCWFpeWNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMfE/of42GtUIxKhn+wbqa1hgIAj4r7xRuFqABmw fg58qcbnPvtuhOyEsuKvgoRmXuxPJlG9OXAgLlgLwoqKqJQlAS8o8fEmfYghdgoE GKRpjp32YrCXB3u4F3OHaWBBV+ifietKBk8t5afYq7huM1eI5XQZkCqM/AyID/66 LXLFU3ObKEV95jYTU+NFisHK8QX5iKZFXGov+IUJiLchG50LjOD1bquEPIIIWtnp HuhcytfgxR2N4QX3Hq0AlJXmJJo5xsC6JbzXcwf7hGB+FpDPTJzsEk9/vaAR/13q yLlNncvPLXIVjY7I5pea5KTxa5IAj5dxc4mC97EDPTiHp5UJwzt/fu7mt0LoQHEt tmGiZR7iNNg5KqOzM1luAwGTnJsVLdvsRD/d+vRdNL721FXyb2AnZ0w/dEyiHa+E 46IOI/9+GFYUMwMvLMYl/ofvvZD3OA8xI1s37UMPe367lc6oT+a3IcrX4EumG282 TPzqTWSWM0OKfucz3MQs/zGseqBQ2BBS+5oWvgdZDnkCE5KXPWsj9WzNzmwQEhVa OAHwVyJyTbB9WXAc7e9K8rnuqQk00zW/3OlsfLwbAAs4ig3aqTqdgwepqpOZ7OAS TtJxd4Urufn6sAukZX2KXEeD8P7bW5JnOFjQscM20wfsdIwPcdQyRCIzAc9fKEWH wzkVAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGXYDdh5RQlh yJ02GnBGcKbngdoBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJYWl5Y28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvYoaS1gAABAMARjBEAiBr W/9sh/km28nvCgSPHYS6pm/YqF8U/IxDZgzw9u1FMQIgWmSWdp1ffpxDShY7L2Kb 9cZJ+5DDkv1mxbLqh1R6g2cAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToa adOiHAAAAW9ihpMIAAAEAwBHMEUCIC5ZL+yvOSkTizoSAIiJF3tlFkUESLNBnFwn jZqDu9K0AiEAlC6wXTg6RUhyZ2ZY8LIY463V3bLmEagM5Y+ljOvkdMcwDQYJKoZI hvcNAQELBQADggEBAFbeDYSGE/80EbIhxTPQa1WdxsGGMJK2cAWXsuCIxcsb5rNw 7AKno8oumOLTHT0V6bH7/xjRvHYzBPuQPyQPytJXiTCsI4gU9syNeCp4p09pG0Cy uHgG7sklYOvIiAjT7JPUm20tp01kP7IpM6aibmH5pcxSo9uyYnx1qAJ+f31/4Rps NdEvxNbQMsj9Y8rJyJvs7H9AhjSfl/AKpWBg/XwiWqw5c6crOzPL1MK516O1A91Y WQGdckGWT31D5Dx62M5gOTJLnfE2qg2czK+0nk5AMzos3jm7m53d7dPRW5evyISR yB4zuwZHy8fatjlRLwsK5tT2dWSzbIuyJhsqQDQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx8T+h/jYa1QjEqGf7Bup rWGAgCPivvFG4WoAGbB+Dnypxuc++26E7ISy4q+ChGZe7E8mUb05cCAuWAvCioqo lCUBLyjx8SZ9iCF2CgQYpGmOnfZisJcHe7gXc4dpYEFX6J+J60oGTy3lp9iruG4z V4jldBmQKoz8DIgP/rotcsVTc5soRX3mNhNT40WKwcrxBfmIpkVcai/4hQmItyEb nQuM4PVuq4Q8ggha2eke6FzK1+DFHY3hBfcerQCUleYkmjnGwLolvNdzB/uEYH4W kM9MnOwST3+9oBH/XerIuU2dy88tchWNjsjml5rkpPFrkgCPl3FziYL3sQM9OIen lQnDO39+7ua3QuhAcS22YaJlHuI02Dkqo7MzWW4DAZOcmxUt2+xEP9369F00vvbU VfJvYCdnTD90TKIdr4Tjog4j/34YVhQzAy8sxiX+h++9kPc4DzEjWzftQw97fruV zqhP5rchytfgS6YbbzZM/OpNZJYzQ4p+5zPcxCz/Max6oFDYEFL7mha+B1kOeQIT kpc9ayP1bM3ObBASFVo4AfBXInJNsH1ZcBzt70ryue6pCTTTNb/c6Wx8vBsACziK DdqpOp2DB6mqk5ns4BJO0nF3hSu5+fqwC6RlfYpcR4Pw/ttbkmc4WNCxwzbTB+x0 jA9x1DJEIjMBz18oRYfDORUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306923881319087056731784304125048122517845 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 18:13:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 18:13:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aiyco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814988491698111416025020345527677895047961627615498746916024246999888022885653354077550929405887620663811902692008040199839544321115026909901041130774047536059318437924540440800406331162130553663919089493725969126993768400525549324157639145967132833157054569150348031981654890485191993926636349022820948028275051902750514660544945563024328163905018607674785912606337815845943970666625484524440050455417561548979545334744196327056920331681313665501316321250398348984599702983728437521535186271098249755584332673843086016253545148583222239582505440390904141721766570497019852052608441482338016473750718576465088851857563492506390750314525668450981535444522746592100646077507245656215555960798737275773548046517567143033407064219939874552306402573463216611394162526727621169606380414880577497451280836363143173121128637025902616969399240923055773279827372719156392281944886494787233927750215294088142562616667838878483497375555772330315634760211841942502601587140433430465665586761161681474752942802948993543441699110433891952910332101959483587301636553818698359120209174125534626383481313356883907227789615343334366698993255563201445300591370695466788036020432725396626362874228047452904288430727113228317188608454903849248518886865173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 65d80dd879450961c89d361a704670a6e781da01 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiyco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f628692d6000004030046304402206b5bff6c87f926dbc9ef0a048f1d84baa66fd8a85f14fc8c43660cf0f6ed453102205a6496769d5f7e9c434a163b2f629bf5c649fb90c392fd66c5b2ea87547a836700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f62869308000004030047304502202e592fecaf3929138b3a12008889177b6516450448b3419c5c278d9a83bbd2b4022100942eb05d383a454872676658f0b218e3add5ddb2e611a80ce58fa58cebe474c7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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