gucci.aisolutions.technology

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:df:91:07:83:d1:25:17:de:54:15:d9:09:67:68:32:41 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gucci.aisolutions.technology

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:df:91:07:83:d1:25:17:de:54:15:d9:09:67:68:32:41
Serial Number (int): 333433608094123763245261399903012762694209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:0a:5b:c5:b3:38:a1:ff:c6:22:d5:55:51:d0:46:af:f0:4a:d5:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:ee:ef:7a:0c:a5:85:3a:ff:cc:fa:0b:e7:92:7b:04:13:f3:af:3b
Fingerprint (sha256): 33:11:31:6f:05:17:5c:69:86:01:6e:29:86:6f:08:81:e5:36:56:ad:d6:10:cf:0b:3a:fb:c6:ae:37:bf:ab:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gucci.aisolutions.technology

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gucci.aisolutions.technology

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.gucci.aisolutions.technology
gucci.aisolutions.technology

Other certificates including the domain name aisolutions.technology

(limited to 100 certificates)
gucci.aisolutions.technology
jacobholm.aisolutions.technology
gucci.aisolutions.technology
sqn.ai
vodafoneautomotive-dev.aisolutions.technology
godmat.co
unicreditnews.aisolutions.technology
wombatbarn.com
vodafoneautomotive-dev-be.aisolutions.technology
mediaset.aisolutions.technology
vodafoneautomotive-dev.aisolutions.technology
everisevents.aisolutions.technology
aristoc.ug
keep.aethersol.com
linyu.app
vodafoneautomotive-pie.aisolutions.technology
clearscore-demo.carsift.co
serviceagreement-staging.omnicar.io
www.sebblessing.de
gucci.aisolutions.technology
vodafoneautomotive-pie.aisolutions.technology
mediaset.aisolutions.technology
vodafoneautomotive-test.aisolutions.technology
gucci.aisolutions.technology
jacobholm.aisolutions.technology
vodafoneautomotive.aisolutions.technology
geargrab.app
vending.asimov.mx
www.broodings.ga

Certificate

The complete raw certificate details for gucci.aisolutions.technology in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333433608094123763245261399903012762694209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 09:53:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 09:53:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gucci.aisolutions.technology'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735836765728061728467505531184394583869040387593488591133159950862152994665782403694364251590681887734228359404190367973749096282848042813437677513506320454302125277963159269076329845752862192396472141748426120120835043068870785700732434793808451481894623163254397120146588469512404968885082439774767976440036167676983110699001494615744929620972851368984082657231302220075354620531427489360980321243924156883030615731217752476873049236447370961841809444926429865855380791358822383860574403773785389556838412317169578746269838350701055859814665890141995079540751599503496660160239023750040707629694881913328755082650869530553283495904634546252421853098490267122951761723378582337356014878565501184879718625289794463063946814615458968412721018443781912468125960715813590245330489828446709636663424144732692154451297661305023192556221816895057878620914963365469197795990053828769823994916183898313721754324990403470684929462648952344984982824838947902388895246654748345514939021856408313974945161614890928030028535576417805979761728578583202846584664299458337011049991496756374095954910712544719864948951036379002156850507169712654935962872281155303151129704419830778082301926323016296070563176695305258336012269989460682791797952049563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							190a5bc5b338a1ffc622d55551d046aff04ad548
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gucci.aisolutions.technology'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gucci.aisolutions.technology'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff0eeea6a000004030046304402201aef86e9fd7e75288b334e773254966f70956886087ac535a625cf85e08ccdee02207a447f8c33edcb91c078403c062f37a2193a7861cb82f7208c821f0af2cefb8600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff0eeeab30000040300463044022078258cf63444e59ffb68703396cf5d6f710c056c87359447f16e063949cafc9002201644bd10fdda5d15df7be388312ba63b9d245ce60f9858e65a86f7925a2fefd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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