shop.aqua-dome.at

Issued by R3

About this certificate

This digital certificate with serial number 04:94:91:b4:20:46:f9:24:12:a3:d9:c5:62:12:a8:29:1a:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.aqua-dome.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:91:b4:20:46:f9:24:12:a3:d9:c5:62:12:a8:29:1a:aa
Serial Number (int): 399004607358823412319271313701712314309290
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:be:a2:c0:19:7a:04:67:b6:e9:8c:73:d2:5b:a2:d9:27:49:01:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:ac:0b:be:b3:0a:87:01:28:8a:8e:71:a2:6b:7a:02:86:8c:6a:76
Fingerprint (sha256): 30:5e:99:47:a2:8e:55:65:85:61:80:5f:02:59:e2:69:c4:03:79:2f:b6:42:83:fe:96:23:0c:b9:08:36:3a:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.aqua-dome.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.aqua-dome.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.aqua-dome.at

Other certificates including the domain name aqua-dome.at

(limited to 100 certificates)
tagesspiegel.kiosk.plus
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
data.angebote.aqua-dome.at
magazine.suncoastergroup.com
shop.aqua-dome.at
data.angebote.aqua-dome.at
kiosk.vidaglobal.de
shop.aqua-dome.at
kiosk.am-weststrand.com
media.hirschmann-automotive.com
shop.aqua-dome.at
tagesurlaub.aqua-dome.at
avengers.tlcresort.com
magazine.legacylighthouse.org
shop.aqua-dome.at
tagesurlaub.aqua-dome.at
kiosk.der-kleine-georg.de
downloads.yspi.ie
vvw.wertkarte.aqua-dome.at
magazine.legacylighthouse.org
kiosk.vidaglobal.de
tagesurlaub.aqua-dome.at
tagesurlaub.aqua-dome.at
kiosk.der-kleine-georg.de
quals.truebeck.com
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
tagesurlaub.aqua-dome.at
tagesurlaub.aqua-dome.at
newsletter.aqua-dome.at
shop.aqua-dome.at
tagesurlaub.aqua-dome.at
www.aqua-dome.at
data.angebote.aqua-dome.at
vvw.wertkarte.aqua-dome.at
kiosk.vidaglobal.de
quals.truebeck.com
emag.indianjeweller.in
publikationen.contipark.de
partnershop.aqua-dome.at
shop.aqua-dome.at
flyer.aqua-dome.at
magazine.legacylighthouse.org
magazine.legacylighthouse.org
shop.aqua-dome.at
avengers.tlcresort.com
wellness.aqua-dome.at
dev.angebote.aqua-dome.at
angebote.aqua-dome.at
magazine.roarkidsmagazine.com
dev.wellness.aqua-dome.at
kiosk.vidaglobal.de
data.wellness.aqua-dome.at
news.vdmno.de
dev.angebote.aqua-dome.at
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
tagesurlaub.aqua-dome.at
shop.aqua-dome.at
angebote.aqua-dome.at
www.aqua-dome.at
tagesurlaub.aqua-dome.at
shop.aqua-dome.at
onlinecatalog.custom-chrome-europe.com
shop.aqua-dome.at
kiosk.vidaglobal.de
shop.aqua-dome.at
mobile.aqua-dome.at
publikationen.contipark.de
magazine.elektropraktiker.de
dev.wellness.aqua-dome.at
flyer.aqua-dome.at
tagesurlaub.aqua-dome.at
magazine.elektropraktiker.de
www.aqua-dome.at
magazine.inversionesciel.com
data.wellness.aqua-dome.at
avengers.tlcresort.com
www.aqua-dome.at
magazine.legacylighthouse.org
magazine.legacylighthouse.org
tagesurlaub.aqua-dome.at
shop.aqua-dome.at
angebote.aqua-dome.at
shop.aqua-dome.at
vvw.wertkarte.aqua-dome.at
kiosk.der-kleine-georg.de
data.angebote.aqua-dome.at
kiosk.der-kleine-georg.de
aqua-dome.at
brochure.ntpwarranty.com
shop.aqua-dome.at
wirbeicontipark.contipark.de
wellness.aqua-dome.at
www.magbooks.icsl.org.in
shop.aqua-dome.at
angebote.aqua-dome.at
wellness.aqua-dome.at

Certificate

The complete raw certificate details for shop.aqua-dome.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg88OAsM+HrluT6UUzZzi
W4LEoiArMKUzIxWrzdWG/jqyqgd2/VUO98oLuwAySG/IHHsjQbu2kKUiyGlQDVw9
wXh8e/8fcFciY73Iw5nBWbPqkAXxTHXZZVzOIL9rKnnxKD8hMbMIlO2NXZ3pTt+a
3Hpo7tKbEtlxayhOGLGMWtVd4No64/kvhoSHpX3BJ9TxxRtPQGP5Uf82Htfx4zeM
1yJXTj7BOcjV5trKiwtTHe9ds37GymSCeFzIw0+RYZHr/2WNKfr9K0vvtBlvQBJ3
8V7Nj8YNMGNS7KomCjY25yuO4o4CQwpqnTQAPusY4uofssVudwbH+mYux9nK7haA
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399004607358823412319271313701712314309290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-23 02:10:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-24 02:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.aqua-dome.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16639320443158546935881923935502093915461924164378037892771482118201516880807173453316473047659746028205581876808762833258543483440895342553633557295442783094857460777576688837298332489014710983872033258827010252555263952354698050125437238562079649150998033947502350411055890890445649495249303934299174499480075558932268361552871046676622259132866202740532911873058141556332013572130593834854331620990023397082925667229698987022669475862385368279523770463750731353719000529633350317209635930844918940156474797450973852237504433590737234988306121074916209345877883617673930120128854036154782427080313864044834524135539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7bea2c0197a0467b6e98c73d25ba2d92749015e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.aqua-dome.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f248ef4a80000040300483046022100fa014c3ae2d1e044a54d74517fb99990d4d121f640c28dd3306f0a17184ef15b022100f3fb93d3987524fd033223b77e8925361f5dd385efb3facc947f818a67e8bb8200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f248ef4d00000040300483046022100cc473982693444b7d7b929fbb540509d7b6bd6738f0592b309e8018697028c520221009f1200e8c0875f6d71a55bfbedd181aeb8ac3d04106c38a8573765fc2c16b725
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062ec76a537532720d08b4763325a4a66d5ed402ba7f69398e111d1b9223ebc54061efdac6727fcb57aa5611ca4160d2896b2be65171310ced2aa7896c1900d286553a9f57db705ed863c14e16573130d13cbb76909e33181b0acad76e6f2829f052a0fec8bb5748395c445df73d23ecf00aa24b3145584364c43261ac7fd35e8de93e8208c8d419b52ce8b29f4be4839c840ba1afeade19ee470e7ff079275a30512c4781734bf95fffc8cb512916c7b818279867a5434834c82c89e4ec5dc1c9eceea98a2c2cb9b67d003c1d84657131389bb2349ddf3dd6e637005897bf4e6d0f6241e3a94ef6f6523d161f0c157aa4225ef65a045b98d23115310ce7c9388