aoiweb-pro.onelightmedia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:07:c9:26:06:06:14:ae:85:c2:86:ad:49:d1:ed:f5:fb:f5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aoiweb-pro.onelightmedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:07:c9:26:06:06:14:ae:85:c2:86:ad:49:d1:ed:f5:fb:f5
Serial Number (int): 351098492552097175526590533122126060583925
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b8:59:40:e2:a9:ad:02:04:53:79:6a:a4:02:11:91:22:92:e6:4d:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:4c:da:91:be:4a:7e:07:a3:05:b8:4a:4a:16:c6:48:01:c5:18:ed
Fingerprint (sha256): 2b:61:20:e1:70:8f:df:2a:32:33:5a:0a:4f:ce:cf:62:da:c9:01:07:2f:e2:70:df:9f:b0:ab:2e:51:dc:8f:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aoiweb-pro.onelightmedia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aoiweb-pro.onelightmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aoiweb-pro.onelightmedia.com
www.aoiweb-pro.onelightmedia.com

Other certificates including the domain name onelightmedia.com

(limited to 100 certificates)
uniq.co.nz
aoiweb.pro
aoiweb.onelightmedia.com
m.onelightmedia.com
m.onelightmedia.com
inavteq.com
inavteq.com
onelightmedia.com
onelightmedia.com
uniq.co.nz
evite.live
aoiweb-pro.onelightmedia.com
evite.live
uniq.co.nz
home.aoiweb.pro
inavteq.com
aoiweb.pro
onelightmedia.com
onelightmedia.com
home.aoiweb.pro
inavteq.com
aoiweb.onelightmedia.com
home.aoiweb.pro
uniq.co.nz
home.aoiweb.pro
onelightmedia.com
onelightmedia.com
aoiweb.onelightmedia.com
m.onelightmedia.com
worldofclaire.onelightmedia.com
ppp.onelightmedia.com
onelightmedia.com
inavteq.com
onelightmedia.com
home.aoiweb.pro
aoiweb.pro
support.aoiweb.pro
onelightmedia.com
inavteq.com
aoiweb.pro
m.onelightmedia.com
onelightmedia.com
aoiweb.pro
aoiweb.onelightmedia.com
onelightmedia.com
onelightmedia.com
inavteq.com
uniq.co.nz
m.onelightmedia.com
uniq.co.nz
inavteq.com
onelightmedia.com
uniq.co.nz
inavteq.com
aoiweb-pro.onelightmedia.com
inavteq.com
onelightmedia.com
uniq.co.nz
uniq.co.nz
support.aoiweb.pro
evite.live
home.aoiweb.pro

Certificate

The complete raw certificate details for aoiweb-pro.onelightmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfw05ai5BgBWH6MHpHDX
ySwmZzyLrivJ7MgY45/cBz99bnWH2TteQ0HSGB6jKwsjzVg0HuydF51zMIjNZRU8
QOKSF1v57p614q2FPKGbmtkMLqKEpDQuDM3HEZbBNdNiF5GWv/I4G1tQRslIdaS8
OG2+2n/nEznbvHtPkBni26QSKUP//QAu3Urq+fX4oUeDTBNHig9eHmx3nOj92+Ee
O8am9d6TUtw97l2F4WbqyxGdI9Fwjse1szweaTlLTEd9AWYXDfkwPK7Oa0rgghO1
u6mfbFaYxrRLbusrx5ZKtlf7Xdjz/J/7vHhiiWjagr2jxFaTtpkIytiN/3JdBehQ
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351098492552097175526590533122126060583925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 05:46:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 05:46:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aoiweb-pro.onelightmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18933875164108666000717068715820283405570125207644822245403257855934440884496281714901613820140859602073546656592195609834872386952012478711993344969735936293908531587674509773648406351922291205931086118734137620412785402492928002509113130417065918918261527001155307618713552582882275282649951720984078273679801479788367205923993307017803684624871889627985681464280605476031249181697418444683851385806722138228959504597043586221689510199079519953938002916794079220358436454325520868919689193932571312350600052002789550095659650764362279894294280899095194112373510552609099206581204251376537131838151533921980998242553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b85940e2a9ad020453796aa40211912292e64da7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoiweb-pro.onelightmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoiweb-pro.onelightmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ad923f34c0000040300483046022100f70806b44c18de097197d9a2e0ca4b31a2dab6cd17bfe6b5ce5f4b7f6dda5e4c022100a9860f89c35b471753c988d631339c8c73ad96f090c0ab08f73766fe03244b8b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ad923f53e000004030046304402207d9103c411828c3b870a1f2eef384878ab034d759d768f7a216b32f6a04ce836022009f56c2da6b88fb51a853a983870f057610285a2c9fc14daa320645baea9f6f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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