www.aligntek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:40:1e:09:36:dd:3a:3d:82:9e:78:fd:86:6c:d3:a5:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aligntek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:40:1e:09:36:dd:3a:3d:82:9e:78:fd:86:6c:d3:a5:77
Serial Number (int): 303617097841001573874002063690381598631287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:96:fe:5a:0e:fc:33:58:56:c8:14:f8:a2:f5:93:33:d4:60:b0:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:07:d2:73:50:80:2d:8c:6a:4d:56:12:10:2e:d2:67:25:fe:e8:09
Fingerprint (sha256): 36:74:55:2d:6a:f2:93:a1:9b:a0:16:aa:f7:15:cf:c6:05:eb:f5:6c:d9:be:a0:8e:e4:7c:4a:e7:d9:56:a3:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aligntek.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aligntek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aligntek.com

Other certificates including the domain name aligntek.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aligntek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA3xAHgk23To9gp54/YZs06V3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjMwNDEyMDNaFw0y
MDA1MjMwNDEyMDNaMBsxGTAXBgNVBAMTEHd3dy5hbGlnbnRlay5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC6MUOsnsxNM18KuIdaayxmdf6az9IH
HhwHKXeu75zJE+49RJ+zJf7oUhFIBJUPUSkekfjsMUe5RICMHnBe7YfF87FfRfkQ
KpyouMreCQwXRt/bOIZvFlzw6yZmG0Z/kWOfdxDafqMJrxqQEw87y0bQL/Y34/hh
nylLTOtT+0TKGzbIhWxjURW6RrR6yohDaiGIJ900XuhPSqxEgRLxD5bYNdlqo/VG
a7Xd8alYhKY9z4Seogi+4MFeMTrxGnX/npCElaYhflAf+ZKHjaiF/MXaYbm2JdMB
veNo69WR84K48qG39VcyeN84LTL4Lp4kHf7f+oIM6ldqdH/GCJA75yD4ox2nbbQT
3p0ODO9hO61niNk/1l8hP2Q5z+jzJt1TguoWuuoFrjVV+xrjB4QxJGcn8V5bdS2P
TWsUPmZq0wt9utu5PDaMQuydZVkxaEWxSb5XSZF51J8twuoVbajpA8tRgTNYfqNr
5MN5VvDm0bCCY9C/bgz21y+JEvlxz+TntCbF+h6ok47fe627G/KndSaWWX2rNsX4
Un/xVMamoIittx+3K0kG/+BZev4v9sG2rhvcFxCr4ytGSv770ced7H6XeyJ6TvDV
Sa58k86UIKDORFmU06/cvZLsO6ysq1vXMfPLYi8Q47P6lP1PkbANS6WTn82u1I8j
e81wT7FRWKtUUQIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSy
lv5aDvwzWFbIFPii9ZMz1GCwrDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5hbGlnbnRlay5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXBw
dafHAAAEAwBIMEYCIQCE5KeQt1daHoAOimSafGM76V+UjRn4MwUQdHYTgEh88wIh
AMvIpqoUk+9od5uKG+lOQRSMeCjUUVcECMzdUuWBkzuqAHUAsh4FzIuizYogTodm
+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwcHWnuQAABAMARjBEAiAIAGQA3TX7+Eop
Ke6t+8U7R2iK2fkmJ7HxaO8LIa12TgIgL9Yz8IoxoS0Pjsm7AFhAH5Piaii+WBin
4qIS8ogjx9UwDQYJKoZIhvcNAQELBQADggEBABM/aVwZWcXxIOOeICcbHvO1Avmx
eUPODYxQSeuD/BQdfcOqv+t9e8rCVliqtjm6bNSP3wXBuCv1su77g1KoDZI5zCPg
0BaFpimxkp+1rl+7RowzuHoNm69M2330wHztP5g2mEPIZXVExBkdVvrcvk0if11R
/w/uS3GUaE1jQBVASYI1/qwZZozAXJJTTcqbg62Ei8qUyGDrfqOzdOByItRcVNVh
L3lfgu0xxMTgG5EnWB7x/QschKrBOnzLOehgL+zOEFVx8iMkaeoOu3uuFSCBlCkR
Y4XDOaumM2uflIlpRwybRCi7EN4HW6qf+llox+t51i0k6ITd5/3Nt3+dc+I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303617097841001573874002063690381598631287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 04:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 04:12:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aligntek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759598878778176522677702911903760152448235430430214067835164899890551667836712097731227138223809157547228700366344921101180316671871866630033612285227320140617868116408356343411673528192992233785536168401338659155601091094500697060611778267388482689914269113689209077901080228572429210778249423989070265318902252561290805387321623619868970689670839835324884789117676723500558423489338259909919409329424330290200692724525591456507955834569585480495585217962791514418990934613982715222088317413748647370151861265375273699481976510490179650806428144845604350511289430547583954378057848305537987823766613159602112832005438267128725427711301992366200669143968656104890695194163769398146014551308639068652464377404114021587498670583858891745615542410131999569042582418691732115423888184975685637018042408410082541842746880664565905360531538819144471343937897879549362066665956994939971106663111205543023931508194440753454924663381440399320127865187645441476918385493113018634077116545363213950386609746256581219124728750202226224464108659941594966916437171414621313594318401727403846378244191676767823712343893609539013430154700998135849812445734908328252159498281012261361455851285904598055402428201786656003043141399467430474288263287889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b296fe5a0efc335856c814f8a2f59333d460b0ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aligntek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001707075a7c7000004030048304602210084e4a790b7575a1e800e8a649a7c633be95f948d19f833051074761380487cf3022100cbc8a6aa1493ef68779b8a1be94e41148c7828d451570408ccdd52e581933baa007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707075a7b90000040300463044022008006400dd35fbf84a2929eeadfbc53b47688ad9f92627b1f168ef0b21ad764e02202fd633f08a31a12d0f8ec9bb0058401f93e26a28be5818a7e2a212f28823c7d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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