aci.gg

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:59:86:59:2e:02:57:9c:ee:78:71:81:2a:e9:78:9b:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aci.gg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:59:86:59:2e:02:57:9c:ee:78:71:81:2a:e9:78:9b:70
Serial Number (int): 263497550864989946988551559767731448879984
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:2e:62:a9:a4:40:14:ef:5c:5e:b1:33:f9:fc:4c:38:33:26:73:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:95:84:3f:24:03:c1:9f:d9:2c:48:07:0f:52:e9:c7:e2:98:5c:93
Fingerprint (sha256): 40:6f:5b:23:10:1c:92:af:14:45:93:58:fd:84:69:89:06:f2:66:e2:b0:50:b3:8a:d9:e8:2e:57:49:df:9d:26

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aci.gg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aci.gg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aci.gg

Other certificates including the domain name aci.gg

(limited to 100 certificates)
brownaireton.aci.gg
email.aci.gg
alderneydentalpractice.com
islandcomputers.aci.gg
treeriver.aci.gg
alderneyit.com
sni.cloudflaressl.com
hostci.aci.gg
centraltyres.aci.gg
aci.gg
hostci.aci.gg
alderneytapestry.com
alderney-half-marathon.org
dentist.aci.gg
alderney2.com
jp.aci.gg
aci.gg
airtaxi.alderney2.com
craft.aci.gg
ajwb.aci.gg
automotionalderney.com
alderneycricket.com
dentist.aci.gg
alderney-half-marathon.org
jerseyfriends.net
centraltyres.aci.gg
alderney2.com
automotionalderney.com
email.aci.gg
aci.gg
alderneylibrary.com
salvationarmy.aci.gg
alderney2.com
alderneymaritimetrust.org
treeriver.aci.gg
ajwb.aci.gg
alderney2.com
alderneyweb-it.com
dentist.aci.gg
islandcomputers.aci.gg
airtaxi.aci.gg
alderneytapestry.com
treeriver.aci.gg
aci.gg
centraltyres.aci.gg
brownaireton.aci.gg
www.aci.gg
acigg.alderney2.com
ajwb.aci.gg
centraltyres.aci.gg
alderneytapestry.com
alderneywreck.com
hostci.aci.gg
salvationarmy.aci.gg
airtaxi.aci.gg
alderney2.com
airtaxi.aci.gg
craft.aci.gg
hostci.aci.gg
aci.gg
brownaireton.aci.gg
alderneymaritimetrust.org
aci.gg
stannesguesthouse.com
salvationarmy.aci.gg
treeriver.aci.gg
treeriver.aci.gg
maithaialderney.com
jp.aci.gg
stannesguesthouse.com
salvationarmy.aci.gg
ajwb.aci.gg
alderneycricket.com
centraltyres.aci.gg
salvationarmy.aci.gg
email.aci.gg
jp.aci.gg
islandcomputers.aci.gg
centraltyres.alderney2.com
alderney2.com
email.aci.gg
brownaireton.aci.gg
centraltyres.alderney2.com
airtaxi.aci.gg
stannesguesthouse.com
treeriver.aci.gg
aci.gg
salvationarmy.alderney2.com
jp.aci.gg
dentist.aci.gg
ajwb.aci.gg
alderney2.com
ajwb.aci.gg
sjaas.com
salvationarmy.aci.gg
alderney2.com
aci.gg
aci.gg
salvationarmy.aci.gg
airtaxi.aci.gg

Certificate

The complete raw certificate details for aci.gg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263497550864989946988551559767731448879984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 12:05:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 12:05:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aci.gg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734446730900993566889141639700032258766816913539936376629393867273200951378919004224617151225367352636991448461969468702314431378701988158637501422505823666823254063129197656952911787328958634064630198983385659411468271518854598076272946322311619106395895127808317792308346559594805470437984777861843691597713057683358554763871975526184682451357557621477234938713337669261832728753737846375547763294814841263964507475281149159483393660659477322389353221335077228809359643207776692050684633154463930064964297642019501029321834692493815634912786407773979122609521130220819975888525503767430918953728151254870280536168134762482747285621142110255886631348278256097929003765344917531449851798010502036359039700569758498611970180298208757045280026143694625656100220670279304151938409333528417734806587673775963149996331484640925821290494714129346668461446262482073188514531458594212774173469845074726753235131292844046011958552671455063144419451537581451319683424932567542681763603405256040583141770223357381442637563996670954327429899764702916758931124914167037331023808914946260679850163080584258333675671204906026030885508098464082014630592618792471768439931803881091483587358645124081400980692743679619076043814163394172894736860527519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a2e62a9a44014ef5c5eb133f9fc4c383326731f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aci.gg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a59c02c1f0000040300473045022100abcf1b18f88e548a31c7384dee6e94a1ee9e92c2bc2cb29b961c69c17ae5e0eb02202fbffe2c937c65b9572842b4a67320146284a304552f9aa45c69830ce811a138007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a59c02c4d0000040300473045022100eaa5296293b2316921403f6504c1720ccee28030db6a510bcc044f29ffa2c5170220625df22b224bb1529e77df47d32ad162796ef66984ea36486627df0bfc0afaa0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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