www.aquaoasis.jp

Issued by R3

About this certificate

This digital certificate with serial number 03:a0:4d:60:d1:09:2f:76:c6:28:4b:86:4b:e4:4b:56:ac:7b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aquaoasis.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:4d:60:d1:09:2f:76:c6:28:4b:86:4b:e4:4b:56:ac:7b
Serial Number (int): 315884889758556101969985258647541933059195
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:de:86:4f:27:f2:74:14:63:52:06:cf:36:97:7a:20:50:6c:52:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:fe:f3:c2:5d:2c:54:2d:cd:9e:33:72:8c:80:a9:1c:3b:da:63:5f
Fingerprint (sha256): 1e:b5:e3:02:d3:c4:76:ae:af:c7:9f:66:27:85:7b:69:1a:4f:5c:f9:dc:29:d5:15:bd:ba:d6:31:1f:f4:14:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.aquaoasis.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aquaoasis.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquaoasis.jp
www.aquaoasis.jp

Other certificates including the domain name aquaoasis.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aquaoasis.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdW6lrlaCAPbIQfz3SDk
jvtrLF3GaM/b1mDCDJ2p/1AkWFdhmYEi6dB2SaVJS/zDP3snT9GRAAvOzlbSSTGF
3wyEoZ0McPAXfaggRWm7SlUwepxUbCW7tBDj3PyKAL5r9TH71IDxzgNAh5KSpilE
7TMVi/QxUT9V9/vLJC133xkOmjF0lidmqvQietXQd1Jn80+wH8pfl78rRIT5yyDV
PfoAV7eGxw/8skZxOvgEduqmJUiIGP3S6mNUAXNB/4NC0PQflZGa8RgO/PZqw7fg
K8/q6q60SzVca9ByJlg+PDkL9e88gs04GVdxQqmsqP38enUC18+lhg0OtaBw4tOZ
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315884889758556101969985258647541933059195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 07:09:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 07:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aquaoasis.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22954526828963761761847565245202122327537336062620204595206930583771955171596354089007279169371897505965658432262805880630681100454821665745733525343782500656462454539780696415238015475911755356466082813728927003755593096089863825274687804273795010654286524718617326354882237569122041224317637831874580626570265352683100181506304843527083215124298402840278419131964533904287258349061207785727917613772729083752006401808487340325507566875769296987541665391176007749370518606301875980466279080802658298167989663183842985759790188912782699848656184660496872719410583078657615779861665255130473768346011657075723559213521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7de864f27f27414635206cf36977a20506c524b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaoasis.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaoasis.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896d326bb40000040300483046022100e9becdf22a377c1915055a0525027d7d277b2c07b5565e6bf04c9c10df25da3a022100ffb473e9c6d0737846cc4bf371b21ed03f49c3747f1e025dfe574432c2f2403c007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001896d326bc6000004030046304402206cc300dc1ef3aeb6331b528b61283bb573a66c84042f7069fe5331f674f0d7e70220011f5c41eebeaca5b40908eeeda7b31112873e54cc799a9253da5567fb1ec227
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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