acquarica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c8:fa:17:19:6f:4e:3c:eb:a4:c1:bf:f3:34:1e:29:80:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquarica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c8:fa:17:19:6f:4e:3c:eb:a4:c1:bf:f3:34:1e:29:80:ec
Serial Number (int): 416838044048881434157917621974875658354924
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cd:03:3e:80:86:2b:70:ec:b1:fd:a5:21:cb:ce:95:d5:30:26:be:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:d6:e7:84:97:e3:5a:d2:99:48:b7:74:ad:09:32:05:ee:ac:43:dc
Fingerprint (sha256): 3a:ef:a9:38:17:fb:bb:c3:9a:8a:21:ed:90:e0:b6:11:72:6c:94:72:0e:ba:08:ee:00:16:41:84:11:82:a6:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acquarica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquarica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquarica.org

Other certificates including the domain name acquarica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for acquarica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416838044048881434157917621974875658354924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 20:29:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 20:29:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquarica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753907594525715330782059380545688048878029416599262280217506860236981804403598840809410636913238071593106163536326009645193902603844921658768419514835518479451328857359142754373204798210131497743352074589439315824974133561711033425850418033973004683913288638616151670026828254835561506224705321080512394221055982854757783953958370941898645365345930969462010918558117034835647799432536577164683757323962991061606209185946445111031076629871500747891523442024268095172536560085342592328457562844084583199095805111067192269013991036471109042109224564367784768670777585057201075919567341111387230469073874721154088524865209656340881266228397420559312245225925293700540212492025178784575180770853781378101029724765263638803833248390683710088276663328872676056344024519562209715543738477124150824957333440332920667053565822265548497477907499927373155038080064098988556559191315909630132925071517303191568260978459482385969520223410493952341257421702428207587861774325856287821116031398757365085735794687069373199760477252559148525233144563968689765344132009507271172476502089946769210889873864508875664624968365725893339240993169597923395354468474306490982830383883799004943265446390085548815282319289610791304360255461752363680330627594719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd033e80862b70ecb1fda521cbce95d53026be9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquarica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017007cf2a54000004030047304502204c1f41b34ae72b211ee78bfdaba7ebff9dfd22665f6a0be08070e5585ae41b4202210084703b4ed2154a8f72a66893874bfe2a469493c324872f79c7692353fd26de0100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017007cf2a510000040300473045022100c05f2620e8f01c30d1d6522e143103d9ffe6499c9450b068aae637f886daf140022003bf7cdd58d1c82e60970b383cd9310d10b73649c5c07c8b333a70c561bec205
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b6df9540e68543ead5e12d3c8cc07488652dc696b0f8f3b60f7ae7843ff8ce222ca8fbfc89592c008b529a4b0c5bd40472a8577b52d1b56b1c6a6a194cdcc5465c40fdd200cb6670ff652ccd9abaae41bc661664133216dda5869976db022bcc147ab6b83cb8bf4f93e7d4bb342af314db002598a1f96df629d5f028d6bf79ccde1f5d9d17c44736e50b7f9a851685f56f1533f1df0fad7993e683f3f4e447995a08fc75c99e00ae413ffb3c5e6f9e58d4ff2a28a1521711329ab2008a537cb7d124f1493c4364e6b26bac34d3c33ea166754eece2d3338cff5f24e52442e6b636c8a236a348dfb6bb8c1dd1a4c765f342547ebae53d6baaf763b772b0089ca