aqua-scape.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:c4:2a:3a:6a:54:d5:f6:dd:db:69:27:f4:03:39:5a:d3:0b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aqua-scape.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c4:2a:3a:6a:54:d5:f6:dd:db:69:27:f4:03:39:5a:d3:0bSerial Number (int): 415200618529242489300790683686284513956619
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c5:e0:b5:b0:75:69:06:5e:8d:c7:ca:2e:98:2d:14:a5:c1:ad:a5:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 23:31:7a:2a:35:88:a3:3c:9b:1b:04:c1:90:a2:21:ce:51:ce:83:5e
Fingerprint (sha256): 2e:c6:49:81:99:f7:ba:60:80:f1:3c:a7:89:fc:05:db:da:ac:c9:8c:b8:b3:fb:9d:8a:b4:3d:93:35:04:e4:38
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aqua-scape.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aqua-scape.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aqua-scape.com
Other certificates including the domain name aqua-scape.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for aqua-scape.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISBMQqOmpU1fbd22kn9AM5WtMLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTUyMDQ3MTdaFw0y MDA1MTUyMDQ3MTdaMBkxFzAVBgNVBAMTDmFxdWEtc2NhcGUuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxFks8HN8veqNtHTGaNBgsjJI2QZe8Jcv PxJaq2lJKw4GcT6VcIw4G6CGDB8fzWPJznE4KC9IyP/xBHoiCuoHo/pKyr4fC4Sv WIatTxfhqSYAXull1ToGd71wahhw0UxzJ/mVTx2JDL/IxLPMHp+Nwg2XB9FrWPNV 20ffa+kcqw6BHcLRakht4/sNQyXHNO/jvkd9WpX/NvZdtdvswsiGo4lHON5u6mvR WyC25yrx8DSDpwsMitHPKZgZYAtyLExMesi8AvVGN0AOfSJHg+zqXDhULWyCxpCp pLYBykICOlU6YsliphqK32Ysm8gRItM0i8CWIjCJE16p3zgFS8Qyr8xH30Gd7tLu p4XX/IkDSSt5NXntw1y5oRRH4+64eUBJ0l7KCFYESkfY2nWwAO2HWndbjXmKk/Iz bldKCp47X4mE2iZtYE+J0H37rb0DMcoMUbWmRWyeDsddxvrlvW1vriTTg/a4zZbe TuogyQtvZHBrncBuMsurBcDyczwkTNZ5LmVRs1AlkRAB7gfeoyQsVb3wkkigc3Sr A63zfk7SIYozf9JqF1oYU1Lh6Mv/B1AOyU8hk/YwFxgb6q0GNqQ24LYHKR7d0IDF S72Z9E1KLDWPtVzwccwXw0RXLVQPOW9OCWb59UfZQx/Vx8XR2CHnI+/lzrl11FIN CMO2wtC5GyMCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxeC1 sHVpBl6Nx8oumC0UpcGtpb0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5hcXVhLXNjYXBlLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcErR8nYA AAQDAEcwRQIhAN7/QuRST1+ExnffaFtYqrxNFdty1HLNLwVhiMz5w80VAiBRLext TlXRDp74yMh+a7vBrh8ghcEGM5IjM08PM3tJjgB2ALIeBcyLos2KIE6HZvkruYol IGdr2vpw57JJUy3vi5BeAAABcErR9FoAAAQDAEcwRQIhAP8ZixPNLJvgbGeCuZvb US7N9/f3edhauISbVEYsKm0xAiAX4lp6BJ3aRirXPdEN38u6GxKoAZI126Kd3nUM NpM16TANBgkqhkiG9w0BAQsFAAOCAQEALx8HApmrPhjFLu+fu7Cb9zMr/fj/SBy0 pxFbKHMha8QuE/nrZ+sr77nK9ph8A/llvGbA+99wGPve8vu6r7Aowf39Nb1wsIMc NvP0Q0pudgPFs7C+v8UoapwicqCfHGby7SWxnmedI1z9EKMlCS3J7TKTSbzY51AN cinkTSdC5WJ71Itdu8MXJvX7bRwTtKaYPdvPQF08dSwbc0gFXY5ryE7vrwTFxXLb /OC3NI+oQetXvPx/2VxYqi/Tfk5wQTBn+b7hrmwTzr4ipf0qpiI53VkzTCeAw4Gm FRwQ3hiTUsSRIKFezy3N3OYflYE2jO1u0HMTcUr1VSd6b1rspLTTeQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxFks8HN8veqNtHTGaNBg sjJI2QZe8JcvPxJaq2lJKw4GcT6VcIw4G6CGDB8fzWPJznE4KC9IyP/xBHoiCuoH o/pKyr4fC4SvWIatTxfhqSYAXull1ToGd71wahhw0UxzJ/mVTx2JDL/IxLPMHp+N wg2XB9FrWPNV20ffa+kcqw6BHcLRakht4/sNQyXHNO/jvkd9WpX/NvZdtdvswsiG o4lHON5u6mvRWyC25yrx8DSDpwsMitHPKZgZYAtyLExMesi8AvVGN0AOfSJHg+zq XDhULWyCxpCppLYBykICOlU6YsliphqK32Ysm8gRItM0i8CWIjCJE16p3zgFS8Qy r8xH30Gd7tLup4XX/IkDSSt5NXntw1y5oRRH4+64eUBJ0l7KCFYESkfY2nWwAO2H WndbjXmKk/IzbldKCp47X4mE2iZtYE+J0H37rb0DMcoMUbWmRWyeDsddxvrlvW1v riTTg/a4zZbeTuogyQtvZHBrncBuMsurBcDyczwkTNZ5LmVRs1AlkRAB7gfeoyQs Vb3wkkigc3SrA63zfk7SIYozf9JqF1oYU1Lh6Mv/B1AOyU8hk/YwFxgb6q0GNqQ2 4LYHKR7d0IDFS72Z9E1KLDWPtVzwccwXw0RXLVQPOW9OCWb59UfZQx/Vx8XR2CHn I+/lzrl11FINCMO2wtC5GyMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415200618529242489300790683686284513956619 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 20:47:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 20:47:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aqua-scape.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801031348578285974154220551015339912063830056261995534571882759103008912180321698113541156594099191689865834819221641538427905058128206007303342864798976836145250174501309585131037859950412676362333981510844302784290365543169016216601567225690815396790396040379946381306168830499109101813608980152794400677562291681254491093212628745373385607974991169414421571147799313597739594623675050647832039916088978808485974266784698238511479199460256539428973856283355822418813136648283413689857076034549261043668594471926498507028917502535656917008587564845718832896790017892088750199292448908127968958693020478076949995927056897882376469506807446142172494146645200811557727107094600405845334067909832311702095859519666861180137084165070194409737583410823447838994795065832288633520577778564512512053001793268501081256521720824305848333728899717659250803490863637541435820974997718132818560250387340710466450717781789386248379241986620735202106237752606642398241638325894255298350262571809696336495034317734127272430178379785971716750484715119026578635916445365440340313176289197728630429082137260258864567886852920040108381047071085679315194688270940412117022076131345841381806039830847030060414406551764078326393216931584704604137395395363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c5e0b5b07569065e8dc7ca2e982d14a5c1ada5bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqua-scape.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704ad1f2760000040300473045022100deff42e4524f5f84c677df685b58aabc4d15db72d472cd2f056188ccf9c3cd150220512dec6d4e55d10e9ef8c8c87e6bbbc1ae1f2085c106339223334f0f337b498e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704ad1f45a0000040300473045022100ff198b13cd2c9be06c6782b99bdb512ecdf7f7f779d85ab8849b54462c2a6d31022017e25a7a049dda462ad73dd10ddfcbba1b12a8019235dba29dde750c369335e9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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