aquaizoling.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:85:a8:fe:fa:52:bd:3e:91:ba:17:84:15:71:cf:1f:e4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aquaizoling.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:85:a8:fe:fa:52:bd:3e:91:ba:17:84:15:71:cf:1f:e4
Serial Number (int): 273084123071468961869114773324465011892196
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:b6:d9:cf:45:00:5d:0f:bf:f3:2e:d9:d0:8d:a7:dd:25:de:c2:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:8c:c6:83:48:2f:32:71:85:3d:1c:9b:60:77:1e:73:09:4b:c4:aa
Fingerprint (sha256): 5d:a0:ee:b1:6f:ff:89:9d:6a:e6:06:49:54:49:69:97:10:86:10:0c:88:15:b7:a2:e9:87:6c:e7:91:9e:81:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aquaizoling.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aquaizoling.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquaizoling.sk
www.aquaizoling.sk

Other certificates including the domain name aquaizoling.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for aquaizoling.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxoUpHr6G9tsfcn1GUAmo
bR8TnltujQ2MwHWjn4aRHfEc2Mg/4vvD2IZe129EfjOm8gZQuXSNg4a03hd0Dz8q
kZ+3DVB9VSEWlfMTz82JifCPxrvEfH3tNURFsWrV+Ticp766+EcaODfTMANpULKP
Oipou/f/wnKMvQK00CSYBVBnQcedpblkyhn5RnB5RJB0+mTxIXDOQAg20w1oeWj5
+E7VhdLrLzlvTdmLMgB2CGsEAvMXfWmrnNoyuti9i1OxkzwFyQm1XCEeacx1SiWd
Qw1SVecGMPU2cyzl1TzkTPPk29QaRWpIj1vAGHwWKm0wj6BsjUZmWt5FOLQWaYzn
hPJvDK9K8uNw+K4yqimsWGa+qT7e27GVUAVHWrspKtd0zpDBVYy/45WakYyZ04DN
03gGNtXPI6IaEDTdnFIYZGjTuPefbVDnbVEuJBwJFhMEpnnNsLpC3M/UYzdTftRH
9k7F89jLMIK7MZBSKICIEXO44dxQC6iRl3D5i515CxS5/PQE4rTM1pqb7qgNVa8M
XIbNDloCRc46R45sUYVgA9S1hm5TsXIQQTzWvbH/Ed8B4A0o3UgTJv/KiZjtZ7hD
VvkbnDYcjRiLG84vEgYutGwoAedGf6o4uV3/ptVYo+ziUAoqKFgSJa9/MDKfmfhr
rWJeIsZpaxm/sIiX5UQuKdMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273084123071468961869114773324465011892196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 05:13:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 05:13:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aquaizoling.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809891587793705774711937142757716966426319540924494704427456406281201557748243319135751301807262782831579563206635552963214507912662600378100033636174517075775518077506683155677093956165885403313450753484510082761415529717684184265149933489477653744073161062386841295499587033918359672006583469901664851469940847882745802738981182552039486867597008753790659017637324601379589120174063074711038702349194503646956226178373317288031884781701023684015925746632019515420406409885891411875167718946986912657055612114525933114384687533017704160222376516070896564529039884772255144615725218053351053169931822497822655163932647690990714342875835196167090700078453243130144482062298924091885332356303857991878858893788030223638754284719779367749624738446806095156615268223724076254665338793159335747881313562501400525117334483355185340760724303986109548971182589002288932178751057166203871190636516173102329344691923394983310644094472579248010533578055134778434972163309910311127925138526022742732347740004031934607491393223949626723462541338230347533495759087510743075146060483973396552737439908299860062361647507500851051470585428227105735426561665365382947874173920524473775558068562520943562059142060445800817997067629024508779036985403859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bb6d9cf45005d0fbff32ed9d08da7dd25dec203
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaizoling.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquaizoling.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e1b4c71f10000040300463044022038bfbb516ae98a923edc74815af88e10a9897edd5e3275dcd52238465142eea90220689546d48892be7da84ec2f1eeef55955ac430be42860a85500a7647f41cb34f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1b4c71e4000004030047304502210085c81f8d9a2c5e43a15cffee1e34113493ef16b2ab0304eb97742d3dd6d5b25b022040174135a1176376385d4432084d7acd19e0213e090b7d1a5f61079ecad5f986
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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