aqua-scape.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c4:2a:3a:6a:54:d5:f6:dd:db:69:27:f4:03:39:5a:d3:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aqua-scape.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:2a:3a:6a:54:d5:f6:dd:db:69:27:f4:03:39:5a:d3:0b
Serial Number (int): 415200618529242489300790683686284513956619
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:e0:b5:b0:75:69:06:5e:8d:c7:ca:2e:98:2d:14:a5:c1:ad:a5:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:31:7a:2a:35:88:a3:3c:9b:1b:04:c1:90:a2:21:ce:51:ce:83:5e
Fingerprint (sha256): 2e:c6:49:81:99:f7:ba:60:80:f1:3c:a7:89:fc:05:db:da:ac:c9:8c:b8:b3:fb:9d:8a:b4:3d:93:35:04:e4:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aqua-scape.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aqua-scape.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aqua-scape.com

Other certificates including the domain name aqua-scape.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aqua-scape.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415200618529242489300790683686284513956619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 20:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 20:47:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua-scape.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801031348578285974154220551015339912063830056261995534571882759103008912180321698113541156594099191689865834819221641538427905058128206007303342864798976836145250174501309585131037859950412676362333981510844302784290365543169016216601567225690815396790396040379946381306168830499109101813608980152794400677562291681254491093212628745373385607974991169414421571147799313597739594623675050647832039916088978808485974266784698238511479199460256539428973856283355822418813136648283413689857076034549261043668594471926498507028917502535656917008587564845718832896790017892088750199292448908127968958693020478076949995927056897882376469506807446142172494146645200811557727107094600405845334067909832311702095859519666861180137084165070194409737583410823447838994795065832288633520577778564512512053001793268501081256521720824305848333728899717659250803490863637541435820974997718132818560250387340710466450717781789386248379241986620735202106237752606642398241638325894255298350262571809696336495034317734127272430178379785971716750484715119026578635916445365440340313176289197728630429082137260258864567886852920040108381047071085679315194688270940412117022076131345841381806039830847030060414406551764078326393216931584704604137395395363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5e0b5b07569065e8dc7ca2e982d14a5c1ada5bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-scape.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704ad1f2760000040300473045022100deff42e4524f5f84c677df685b58aabc4d15db72d472cd2f056188ccf9c3cd150220512dec6d4e55d10e9ef8c8c87e6bbbc1ae1f2085c106339223334f0f337b498e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704ad1f45a0000040300473045022100ff198b13cd2c9be06c6782b99bdb512ecdf7f7f779d85ab8849b54462c2a6d31022017e25a7a049dda462ad73dd10ddfcbba1b12a8019235dba29dde750c369335e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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