aiyco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:f7:dd:5e:35:24:7f:51:2c:16:4a:42:ff:d9:c4:29:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aiyco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:f7:dd:5e:35:24:7f:51:2c:16:4a:42:ff:d9:c4:29:55
Serial Number (int): 306923881319087056731784304125048122517845
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:d8:0d:d8:79:45:09:61:c8:9d:36:1a:70:46:70:a6:e7:81:da:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:2d:23:65:c7:a1:5c:c2:22:9c:7a:10:56:cb:66:b1:3a:1e:ce:cf
Fingerprint (sha256): 1a:df:8a:a0:f8:7e:74:b2:ad:ae:59:96:57:84:dc:68:61:db:e4:fb:e1:78:06:8c:7d:5e:47:26:7e:01:4c:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aiyco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aiyco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aiyco.com

Other certificates including the domain name aiyco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aiyco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306923881319087056731784304125048122517845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 18:13:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 18:13:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aiyco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814988491698111416025020345527677895047961627615498746916024246999888022885653354077550929405887620663811902692008040199839544321115026909901041130774047536059318437924540440800406331162130553663919089493725969126993768400525549324157639145967132833157054569150348031981654890485191993926636349022820948028275051902750514660544945563024328163905018607674785912606337815845943970666625484524440050455417561548979545334744196327056920331681313665501316321250398348984599702983728437521535186271098249755584332673843086016253545148583222239582505440390904141721766570497019852052608441482338016473750718576465088851857563492506390750314525668450981535444522746592100646077507245656215555960798737275773548046517567143033407064219939874552306402573463216611394162526727621169606380414880577497451280836363143173121128637025902616969399240923055773279827372719156392281944886494787233927750215294088142562616667838878483497375555772330315634760211841942502601587140433430465665586761161681474752942802948993543441699110433891952910332101959483587301636553818698359120209174125534626383481313356883907227789615343334366698993255563201445300591370695466788036020432725396626362874228047452904288430727113228317188608454903849248518886865173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65d80dd879450961c89d361a704670a6e781da01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiyco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f628692d6000004030046304402206b5bff6c87f926dbc9ef0a048f1d84baa66fd8a85f14fc8c43660cf0f6ed453102205a6496769d5f7e9c434a163b2f629bf5c649fb90c392fd66c5b2ea87547a836700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f62869308000004030047304502202e592fecaf3929138b3a12008889177b6516450448b3419c5c278d9a83bbd2b4022100942eb05d383a454872676658f0b218e3add5ddb2e611a80ce58fa58cebe474c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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